C H A P T E R 2 |
Installing the Sun Crypto Accelerator 6000 Board |
This chapter describes how to install the Sun Crypto Accelerator 6000 Board hardware in both Oracle Solaris OS and Linux environments, and also how to install and remove the software. Sections include:
Once you have installed the hardware and software of the board, you need to initialize the board with configuration and keystore information. See Initializing the Board With scamgr for information on how to initialize the board.
Each board is packed in a special antistatic bag to protect it during shipping and storage. To avoid damaging the static-sensitive components on the board, reduce any static electricity on your body before touching the board by using one of the following methods:
Installing the board involves inserting the board into the system and loading the software tools. The hardware installation instructions include only general steps for installing the board. Refer to the documentation that came with your system for specific installation instructions.
Install the Hardware |
1. As superuser, follow the instructions that came with your system to shut down and power off the computer, disconnect the power cord, and remove the computer cover.
2. Locate an unused PCI slot (preferably an x8 PCI-Express slot).
3. Attach an antistatic wrist strap to your wrist, and attach the other end to a grounded metal surface.
4. Using a Phillips screwdriver, remove the screw from the PCI slot cover.
Save the screw to hold the bracket in Step 5.
5. Holding the board by its edges only, take it out of the plastic bag and insert it into the PCI slot.
6. Secure the screw on the rear bracket.
7. Replace the computer cover, reconnect the power cord, and power on the system.
8. For Oracle Solaris SPARC platforms, verify that the board is properly installed by entering the prtdiag command from a terminal:
In the preceding example, the /pci@780/pci@0/pci@8/pci@0/pci108e,5ca0@e identifies the device path to the board. There is one such line for each board in the system.
9. For Oracle Solaris x86 platforms, verify that the board is properly installed by entering the scanpci command from a terminal:
# /usr/X11/bin/scanpci ... pci bus 0x0082 cardnum 0x0e function 0x00: vendor 0x108e device 0x5ca0 Sun Microsystems Computer Corp. Device unknown |
There are two methods to install the software, manually or with the install script. This section describes how to install the software with the install script. To install the software manually, refer to Installing the Software on Oracle Solaris Platforms Without the Installation Script.
The install script identifies which platform you are installing on (Oracle Solaris SPARC or x86, Linux x86 or x64) and calls the appropriate installation scripts for your platform. The install script also automatically installs the required patches before installing the software.
In addition to the software provided on the product CD, required software is provided at the Sun Download Center (http://www.sun.com/download/).
The install script path is as follows:
/cdrom/cdrom0/Sun_Crypto_Acc_6000
Install the Software With the install Script |
1. Insert the Sun Crypto Accelerator 6000 CD into a CD-ROM drive that is connected to your system.
You see the following files and directories in the /cdrom/cdrom0/Sun_Crypto_Acc_6000 directory:
2. Install the required software by typing:
The install script analyzes the system to identify the system architecture and the required patches. The install script then installs those patches, and installs the main software appropriate for your system. The following is an example of running the install script on an Oracle Solaris SPARC system.
Note - The copyright and license information is omitted from the following example. Refer to Appendix C for copyright and software licenses. |
TABLE 2-2 shows the directories created by the default installation of the Sun Crypto Accelerator 6000 software.
Note - Once you install the Sun Crypto Accelerator 6000 hardware and software, you need to initialize the board with configuration and keystore information. See Initializing the Board With scamgr for information on how to initialize the board. |
There are two methods to remove the software, the remove script on the CD-ROM, or the pkgrm command. Use the remove script described in this section if you used the install script to install the software. If you installed the software without the install script, see Removing the Software on Oracle Solaris Platforms Without the remove Script.
Remove the Software With the remove Script on the CD-ROM |
Type the following with the Sun Crypto Accelerator 6000 CD-ROM inserted:
This section describes how to install the software manually without using the installation script provided on the product CD.
Refer to the latest version of the Sun Crypto Accelerator 6000 Board Product Notes for Version 1.0 (819-5537) for a list of the required patches. You must install all of the required patches before installing the main software. The latest product notes are available at: http://docs.sun.com
In addition to the software provided on the product CD, required software is provided at the Sun Download Center (http://www.sun.com/download/).
Install the Software Without the install Script |
1. Insert the Sun Crypto Accelerator 6000 CD into a CD-ROM drive that is connected to your system.
The required packages must be installed in a specific order and must be installed before installing any optional packages. Once the required packages are installed, you can install and remove the optional packages in any order.
2. Install the required software packages by typing:
# cd /cdrom/cdrom0/Sun_Crypto_Acc_6000/Packages # pkgadd -d . SUNWmcaf SUNWmcact SUNWmcafw SUNWmcamn SUNWmcar SUNWmcau SUNWscafsu SUNWscafsm SUNWscamga SUNWscamgm SUNWscamgr SUNWscamgu |
3. (Optional) To verify that the software is installed properly, run the pkginfo command.
4. (Optional for Oracle Solaris SPARC platforms) To ensure that the driver is attached, use the prtdiag command.
Refer to the prtdiag(1m) online manual pages.
5. (Optional for Oracle Solaris x86 platforms) To ensure that the driver is attached, use the scanpci command.
# /usr/X11/bin/scanpci ... pci bus 0x0082 cardnum 0x0e function 0x00: vendor 0x108e device 0x5ca0 Sun Microsystems Computer Corp. Device unknown |
6. (Optional) Use the modinfo command to see that modules are loaded.
# modinfo | grep Crypto 62 1317f62 20b1f 198 1 mca (MCA Crypto 1.0) 197 136d5d6 19b0 199 1 mcactl (MCA Crypto Control 1.0) |
See Directories and Files for Oracle Solaris Platforms for a description of the directories and files in the default installation.
Note - Remove the Sun Crypto Accelerator 6000 Board software manually only if you did not use the install script to install the software. If you installed the software with the installation script, to remove the software, see Removing the Sun Crypto Accelerator 6000 Software on Oracle Solaris Platforms With the remove Script. |
If you have created keystores (see Managing Keystores With scamgr), you must delete the keystore information that the Sun Crypto Accelerator 6000 Board is configured with before removing the software. The zeroize command removes all key material, but does not delete the keystore files that are stored in the filesystem of the physical host in which the board is installed. See the Perform a Software Zeroize on the Board for details on the zeroize command. If you have not yet created any keystores, you can skip this procedure.
Delete Existing Keystores |
2. Remove the keystore files with the rm command.
Remove the Software Without the remove Script |
Caution - Before removing the Sun Crypto Accelerator 6000 Board software disable any web servers you have enabled for use with the board. Failure to do so leaves those web servers nonfunctional. |
As superuser, use the pkgrm command to remove only the software packages you installed.
Caution - Installed packages must be removed in the order shown. Failure to remove them in this order could result in dependency warnings and leave kernel modules loaded. |
If you installed all the packages, you would remove them as follows:
# pkgrm SUNWscamgu SUNWscamgr SUNWscamgm SUNWscamga SUNWscafsm SUNWscafsu SUNWmcau SUNWmcar SUNWmcamn SUNWmcafw SUNWmcact SUNWmcaf |
openCryptoki software is required for the board on Linux platforms. It must be installed before installing the software. Refer to Appendix B to install the openCryptoki software.
Installing the hardware on Linux platforms is the same as with Oracle Solaris platforms. After the system is up, type the following command to verify the board is installed properly:
The output of the previous command should contain the following line:
The packages for SuSE Linux Enterprise Server 9 Service Pack 3 are in the
2.6.5-7.244-smp-x86_64 directory. The packages for Red Hat Enterprise Linux 4.0 Update 2 are in the 2.6.9-22.ELsmp-x86_64 directory. The packages are as follows:
1. Change to the appropriate directory for your platform and enter the following command:
2. (Optional) To ensure that the driver is attached, use the scanpci command.
# /usr/X11R6/bin/scanpci ... pci bus 0x0082 cardnum 0x0e function 0x00: vendor 0x108e device 0x5ca0 Sun Microsystems Computer Corp. Device unknown |
TABLE 2-3 shows the directories created by the default installation of the Sun Crypto Accelerator 6000 software.
Administration utilities and services and daemon executables |
|
Note - Once you install the Sun Crypto Accelerator 6000 hardware and software, you need to initialize the board with configuration and keystore information. See Initializing the Board With scamgr for information on how to initialize the board. |
Any applications, such as SunJava System and Apache webservers, that are using the board must be stopped before uninstalling the Sun Crypto Accelerator 6000 software.
Remove the Software |
Change to the appropriate directory for your platform and enter the following command:
Alternatively, you can enter the following command on one line:
Copyright © 2010, Oracle and/or its affiliates. All rights reserved.