Installing Entrust nShield packages

The Entrust nShield packages are provided as TAR archive files. As such, you need to unpack these packages and install them on the OneSpan Authentication Server host.

To unpack and install the required Entrust nShieldpackages

  1. Open a terminal window.

  2. Log in as root:

    su -

  3. Change to the root folder:

    cd /

  4. Unpack the Entrust nShield Hardware Support package from the Entrust nShield software CD provided with your HSM:

    tar -xvf path_to_media/linux/amd64/hwsp.tar.gz

  5. Unpack the Entrust nShield Core Tools package from the same CD:

    tar -xvf path_to_media/linux/amd64/ctls.tar.gz

  6. Unpack the Entrust nShield Java package (containing the KeySafe tool) from the same CD:

    tar -xvf path_to_media/linux/amd64/javasp.tar.gz

  7. If required, add an environment variable definition for JDK_HOME to /etc/profile:

    export JDK_HOME=jdk_installdir

    where jdk_installdir is the installation folder of the Java Development Kit (JDK) depending on your Java installation, e.g. /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.352.b08-2.el8_7.x86_64/jre. This ensures that the KeySafe tool can find the Java libraries.

  8. Run the server installation script:

    /opt/nfast/sbin/install

    By default, the server installation script will also configure the hardserver to start on boot. For more information about hardserver configuration, see Configuring and launching the hardserver.

  9. (OPTIONAL) To allow easier execution of the Entrust nShield utilities, add the following line to the your shell environment profile (either via .bashrc or .profile):

    export PATH=$PATH:/opt/nfast/bin

If you are using an Entrust nShield Solo, you must build and install a kernel driver for it. You can do so after unpacking the required Entrust nShield packages.

To build and install the nFast kernel driver (if required)

  1. Open a terminal window and log in as root.

  2. Change to the folder with the the required nFast driver:

    cd /opt/nfast/driver

  3. Run the following commands to build the driver:

    ./configure

    make

    This builds a driver file that is automatically loaded.