Files in the RPM or DEB
These files are included in the RPM or DEB.
- /etc/profile.d/csulcca.sh and /etc/profile.d/csulcca.csh
- Environment variables are created in this file. Customers should read this file for up-to-date
information. The key storage environment variables are added here. See Environment variables for the key storage files.
Note: /etc/profile.d/csulcca.sh and /etc/profile.d/csulcca.csh are exactly the same in what they do, but have syntax differences. Only one of these two files is used, depending on the configuration of the particular user running an application.
- /usr/lib/systemd/system/CSUTKEcat.service
- Unit configuration file used by systemd to control and supervise the CSUTKEcat daemon
- /etc/init.d/CSUTKEcat
- System initialization script that automatically starts the catcher.exe daemon
when Linux® starts. There may be
situations when you need to explicitly start or stop the catcher.exe daemon.
Select from one of the following methods:
Start or stop the daemon from the command line:
/etc/init.d/CSUTKEcat start /etc/init.d/CSUTKEcat stop
The preferred way for Linux distributions providing systemd is to use the following commands:# systemctl start CSUTKEcat # systemctl stop CSUTKEcat
In older distributions without systemd, you may be able to start or stop the catcher.exe using system services:# service CSUTKEcat start # service CSUTKEcat stop
- /etc/rc.d/rc2.d/S14CSUTKEcat
- Link to: /etc/init.d/CSUTKEcat
- /etc/rc.d/rc3.d/S14CSUTKEcat
- Link to: /etc/init.d/CSUTKEcat
- /etc/rc.d/rc5.d/S14CSUTKEcat
- Link to: /etc/init.d/CSUTKEcat
- /etc/cca/catcher.conf
- Configuration file for the CCA catcher.exe daemon (CSUTKEcat). It is used to enable or disable a TLS connection on the server side for communication with the TKE. This file is installed with the default value of TLS_ON set, and thus the catcher daemon is automatically started with a TLS connection upon installation. For more details on enabling or disabling a TLS connection for the catcher, see TKE catcher configuration for a TLS connection.
- /opt/IBM/CCA/bin/TKECM.dat
- /opt/IBM/CCA/bin/acpoints.dat
- /opt/IBM/CCA/bin/catcher.exe
- Daemon executable that is controlled by the /etc/init.d/CSUTKEcat script.
This daemon listens on TCP port 50003 for requests from the Trusted Key Entry workstation (TKE) for secure commands to administer any
adapters configured as available to the system. See the TKE documentation for usage and capabilities.
You may need to adapt firewall or networking rules on your system to allow incoming connections on
port 50003.
The daemon depends on libcsulcca.so and on the z90crypt or ap device driver. While the daemon is running, it has an open file handle to the /dev/z90crypt device node maintained by the cryptographic module. Therefore, catcher.exe as a running process affects whether you can load or unload z90crypt or ap respectively. Use /etc/init.d/CSUTKEcat to start catcher.exe or to stop it if you want to unload z90crypt or ap respectively. Remember that TKE secure administration requires a running catcher.exe process.
- /opt/IBM/CCA/bin/panel.exe
- Utility: run with no arguments for help. See also Utilities
- /opt/IBM/CCA/bin/ivp.e
- Utility: run with no arguments for install verification. See also Utilities
- /opt/IBM/CCA/cnm/CNM.jar
- jar archive of the Java packaged version of the JNI interface, implementing the Java versions of most CCA calls.
- /opt/IBM/CCA/cnm/CNMMK.jar
- jar archive of the Java packaged version of the JNI interface, implementing the Java versions of CCA calls for changing the Master Key in the CEX*C
- /opt/IBM/CCA/doc/README.txt
- contains release-specific information, if applicable and pointers to helpful tools
- /opt/IBM/CCA/doc/license.txt
- entry point to license documentation identifying release and product specific terms
- /opt/IBM/CCA/doc/
- contains files that describe classes added by the JNI support for CCA:
- hikmNativeNumber.html
- hikmNativeInteger.html
- hikmNativeLong.html
- /opt/IBM/CCA/include/csulincl.h
- C header file that is listing the names of the verbs and their parameters.
- /usr/lib64/libcsulcca.so (RPM) and /usr/lib/libcsulcca.so (DEB)
- This file is a link to the most recent library file, with name libcsulcca.so.V.R.M where: V = version, R = release, and M = maintenance level.
- /usr/lib64/libcsulccamk.so (RPM) and /usr/lib/libcsulccamk.so (DEB)
- This file is a link to the most recent library file, with name libcsulccamk.so.V.R.M where: V = version, R = release, and M = maintenance level.
- /opt/IBM/CCA/keys/README.keys