Installing openCryptoki

Edit online

The EP11 token is part of the openCryptoki package starting with version 3.1. openCryptoki in turn is shipped with the Linux™ on Z distributions.

Check whether you already installed openCryptoki in your current environment, for example:

$ rpm -qa | grep -i opencryptoki /* for RPM */ 
$ dpkg -l | grep -i opencryptoki /* for DEB */

Note: The command examples are distribution dependent. opencryptoki must in certain distributions be specified as openCryptoki (case-sensitive).

You should see all installed openCryptoki packages. If required packages are missing, use the installation tool of your Linux distribution to install the appropriate openCryptoki RPM or DEB.

Note: You must remove any previous package of openCryptoki, before you can install the new package version 3.10.

Installing from the RPM or DEB package

The openCryptoki version 3.10 or higher packages, that comprise the EP11 support (EP11 token) are delivered by the distributors. Distributors build these packages as RPM or DEB packages for delivering them to customers.

Customers can install these openCryptoki packages by using the installation tool of their selected distribution.

If you received openCryptoki as an RPM package, follow the RPM installation process that is described in the RPM man page. If you received an openCryptoki DEB package, you can use the dpkg - package manager for Debian described in the dpkg man page.

The installation from either an RPM or DEB package is the preferred installation method.

Installing from the source package

As an alternative, for example for development purposes, you can get the latest openCryptoki version (inclusive latest patches) from the GitHub repository and build it yourself. But this version is not serviced. It is suitable for non-production systems and early feature testing, but you should not use it for production.

In this case, refer to the INSTALL file in the top level of the source tree. You can start from the instructions that are provided with the subtopics of this INSTALL file and select from the described alternatives. If you use this installation method parallel to the installation of a package from your distributor, then you should keep both installations isolated from each other.

Download the latest version of the openCryptoki sources from:

https://github.com/opencryptoki/opencryptoki/releases/tag/v3.10.0

Decompress and extract the compressed tape archive (tar.gz - file). There is a new directory named like opencryptoki-3.10.x.
Change to that directory and issue the following scripts and commands:
```
$ ./bootstrap
$ ./configure
$ make
$ make install
```
The scripts or commands perform the following functions:

bootstrap

Initial setup, basic configurations

configure

Check configurations and build the makefile

make

Compile and link

make install

Install the libraries

Note: When installing openCryptoki from the source package, the location of some installed files will differ from the location of files installed from an RPM or DEB package.