C H A P T E R  2

Installing the Sun Crypto Accelerator 1000 Board

This chapter describes how to install the Sun Crypto Accelerator 1000 hardware and software. This chapter includes the following sections:


Handling the Board

Each board is packed in a special antistatic bag to protect it during shipping and storage. To avoid damaging the static-sensitive components on the board, reduce any static electricity on your body before touching the board by using one of the following methods:



caution icon

Caution - To avoid damaging the sensitive components on the board, wear an antistatic wrist strap when handling the board, hold the board by its edges only, and always place the board on an antistatic surface (such as the plastic bag it came in).




Installing the Board

Installing the Sun Crypto Accelerator 1000 board involves inserting the board into the system and loading the software tools. The hardware installation instructions include only general steps for installing the board. Refer to the documentation that came with your system for specific installation instructions.


procedure icon  To Install the Hardware

1. As superuser, follow the instructions that came with your system to shut down and power off the computer, disconnect the power cord, and remove the computer cover.

2. Locate an unused PCI slot (preferably a 64-bit, 66 MHz slot).

3. Attach an antistatic wrist strap to your wrist, and attach the other end to a grounded metal surface.

4. Using a Phillips-head screwdriver, remove the screw from the PCI slot cover.

Save the screw to hold the bracket in Step 5.

5. Holding the Sun Crypto Accelerator 1000 board by its edges only, take it out of the plastic bag and insert it into the PCI slot

6. Secure the screw on the rear bracket.

7. Replace the computer cover, reconnect the power cord, and power on the system.

8. Verify that the board is properly installed by issuing the show-devs command at the ok prompt:


ok show-devs
. . . 
/pci@1f,2000/pci108e,5455@1
/pci@1f,1000/pci108e,5455@5
. . . 

The lines /pci@1f,2000/pci108e,5455@n show that the board is installed and recognized by the system. There will be one such line for each board in the system.


Installing the Sun Crypto Accelerator 1000 Software With the install Script

The Sun Crypto Accelerator 1000 software is included on the Sun Crypto Accelerator 1000 CD. You may need to download patches from the SunSolve web site. Refer to the Sun Crypto Accelerator 1000 Board Version 2.0 Release Notes for the required patches.

There are two methods to install the software: manually or with the install script. This section describes how to install the software with the install script. To install the software manually, refer to Installing the Software Without the install Script.

Version 1.1 and 2.0 Software Contained on the CD-ROM

The Sun Crypto Accelerator 1000 Version 2.0 CD-ROM contains both Versions 1.1 and 2.0 of the software.



caution icon

Caution - Version 1.1 is for Solaris 8 and 9. Version 2.0 is supported on Solaris 10 only.



The install script path to each version is as follows:

For Version 1.1:

/cdrom/cdrom0/Sun_Crypto_Acc_1000_1_1

For Version 2.0:

/cdrom/cdrom0/Sun_Crypto_Acc_1000_2_0

The respective installation scripts are located in these directories.


procedure icon  To Install the Software With the install Script

1. If Version 1.x exists on your Solaris 10 system, use the following command to remove all Version 1.x packages:


# pkgrm SUNWcrysl SUNWdcav SUNWdcar SUNWcrysu SUNWcrypu SUNWcrypr SUNWdcamn SUNWcrypm

The Sun Crypto Accelerator 1000 Version 1.x software should not be installed on Solaris 10.

2. Insert the Sun Crypto Accelerator 1000 CD into a CD-ROM drive that is connected to your system.

You see the following files and directories in the /cdrom/cdrom0 directory.


TABLE 2-1 Files in the /cdrom/cdrom0 Directory

File or Directory

Contents

README

Release information

Sun_Crypto_Acc_1000_1_1

Contains the Sun Crypto Accelerator 1000 Version 1.1 software for Solaris 8 and 9

Sun_Crypto_Acc_1000_2_0

Contains the Sun Crypto Accelerator 1000 Version 2.0 software for Solaris 10 only


Refer to the Sun Crypto Accelerator 1000 Board Version 1.1 Installation and User's Guide (817-3693-10) for instructions on how to install the Version 1.1 software.

You see the following files and directories in the /cdrom/cdrom0/Sun_Crypto_Acc_1000_2_0 directory.


TABLE 2-2 Files in the /cdrom/cdrom0 /Sun_Crypto_Acc_1000_2_0 Directory

File or Directory

Contents

 

README

 

 

Copyright

U.S. copyright file

FR_Copyright

French copyright file

install

Script that installs the Sun Crypto Accelerator 1000 software

remove

Script that removes the Sun Crypto Accelerator 1000 software

Docs

Sun Crypto Accelerator 1000 Board Version 2.0 Installation and User's Guide

Sun Crypto Accelerator 4000 Board Version 2.0 Release Notes

Packages

Contains the Sun Crypto Accelerator 1000 software packages:

 

SUNWdcamn

DCA Crypto Accelerator Manual Page

 

SUNWdcar

DCA Crypto Accelerator (Root)

 

SUNWdcaf

DCA Crypto Accelerator (usr)

 

SUNWdcau

DCA Crypto Accelerator (Utilities)


3. Install the required software by typing:


# cd /cdrom/cdrom0/Sun_Crypto_Acc_1000_2_0
# ./install

The install script analyzes the system to determine which required patches need to be installed, installs those patches, and installs the main software--for example:



Note - The copyright and license information was omitted from the following example. Refer to Appendix E for copyright and software licenses.




# ./install
This program installs the software for the Sun Crypto Accelerator
1000, Version 2.0.
 
 
This script is about to take the following actions:
- Install Sun Crypto Accelerator 1000 support for Solaris 10
 
Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
Use is subject to license terms.
 
To cancel installation of this software, press 'q' followed by a Return.
         **OR**
Press Return key to begin installation:
 
*** Installing Sun Crypto Accelerator 1000 software for Solaris 10...
Installing required packages:
      SUNWdcaf SUNWdcar SUNWdcau SUNWdcamn
 
 
Installation of <SUNWdcaf> was successful.
 
Installation of <SUNWdcar> was successful.
 
Installation of <SUNWdcau> was successful.
 
Installation of <SUNWcamn> was successful.
 
*** Installation complete.
 
To remove this software, use the 'remove' script on this CDROM, or
the following script:
 
        /var/tmp/crypto_acc.remove
 
A log of this installation can be found at:
        /var/tmp/crypto_acc.install.2005.02.04.1507


Directories and Files

TABLE 2-6 shows the directories created by the default installation of the Sun Crypto Accelerator 1000 software.


TABLE 2-3 Sun Crypto Accelerator 1000 Directories

Directory

Contents

/opt/SUNWconn/bin

 

/opt/SUNWconn/crypto/lib

Soft links to /usr/lib/libpkcs11.so

/opt/SUNWconn/crypto/lib/sparcv9

Soft links to /usr/lib/sparcv9/libpkcs11.so

/opt/SUNWconn/cryptov2/bin

Application executables

/opt/SUNWconn/cryptov2/man

Manual pages

/opt/SUNWconn/man

Manual pages


FIGURE 2-2 shows the hierarchy of these directories and files.


FIGURE 2-1 Sun Crypto Accelerator 1000 Version 2.0 Directories and Files

Diagram of the Sun Crypto Accelerator 1000 directories and files hierarchy.[ D ]



Removing the Software With the remove Script

There are three methods to remove the software: the /cdrom/cdrom0/remove script on the CD-ROM, the /var/tmp/crypto_acc.remove script on the server, or the pkgrm command. This section describes how to remove the software with the two removal scripts. For instructions on removing the software with the pkgrm command refer to Removing the Software Without the remove Script.

Use the remove script for software removal if you used the install script to install the software. Use the /var/tmp/crypto_acc.remove script if you installed the software manually.


procedure icon  To Remove the Software With the remove Script on the CD-ROM

single-step bulletType the following with the Sun Crypto Accelerator 1000 CD-ROM inserted:


# cd /cdrom/cdrom0/Sun_Crypto_Acc_4000_2_0
# ./remove


procedure icon  To Remove the Software With the /var/tmp/crypto_acc.remove Script

A log of this installation can be found at:


 /var/tmp/crypto_acc.install.date

single-step bulletType the following:


# /var/tmp/crypto_acc.remove


Installing the Software Without the install Script

This section describes how to install the Sun Crypto Accelerator 1000 software manually without using the installation script (/cdrom/cdrom0/Sun_Crypto_Acc_1000_2_0/install) provided on the product CD.

The Sun Crypto Accelerator 1000 software is included on the Sun Crypto Accelerator 1000 CD. You might need to download patches from the SunSolve web site. Refer to the Sun Crypto Accelerator 1000 Board Version 1.1 Release Notes for the required patches.

Version 1.1 and 2.0 Software Contained on the CD-ROM

The Sun Crypto Accelerator 1000 Version 2.0 CD-ROM contains both Versions 1.1 and 2.0 of the software.



caution icon

Caution - Version 1.1 is for Solaris 8 and 9. Version 2.0 is supported on Solaris 10 only.



The install script path to each version is as follows:

For Version 1.1:

/cdrom/cdrom0/Sun_Crypto_Acc_1000_1_1

For Version 2.0:

/cdrom/cdrom0/Sun_Crypto_Acc_1000_2_0

The respective installation scripts are located in these directories.


procedure icon  To Install the Software Without the install Script

1. The Sun Crypto Accelerator 1000 Version 1.x software should not be installed on Solaris 10. If Version 1.x exists on your Solaris 10 system, use the following command to remove all Version 1.x packages:


# pkgrm SUNWcrysl SUNWdcav SUNWdcar SUNWcrysu SUNWcrypu SUNWcrypr SUNWdcamn SUNWcrypm

2. Insert the Sun Crypto Accelerator 1000 CD into a CD-ROM drive that is connected to your system.

You see the following files and directories in the /cdrom/cdrom0 directory.


TABLE 2-4 Files in the /cdrom/cdrom0 Directory

File or Directory

Contents

README

Release information

Sun_Crypto_Acc_1000_1_1

Contains the Sun Crypto Accelerator 1000 Version 1.1 software for Solaris 8 and 9

Sun_Crypto_Acc_1000_2_0

Contains the Sun Crypto Accelerator 1000 Version 2.0 software for Solaris 10 only


Refer to the Sun Crypto Accelerator 1000 Board Version 1.1 Installation and User's Guide (816-2450-11) for instructions on how to install the Version 1.1 software.

You see the following files and directories in the /cdrom/cdrom0 directory.


TABLE 2-5 Files in the /cdrom/cdrom0/Sun_Crypto_Acc_1000_2_0 Directory

File or Directory

Contents

Copyright

U.S. copyright file

FR_Copyright

French copyright file

Docs

Sun Crypto Accelerator 1000 Board Version 2.0 Installation and User's Guide

Packages

Contains the Sun Crypto Accelerator 1000 software packages:

SUNWdcamn - DCA Crypto Accelerator Manual Page

SUNWdcar - DCA Crypto Accelerator (Root)

SUNWdcau - DCA Crypto Accelerator (Utilities)

SUNWdcaf - DCA Crypto Accelerator Supplemental (usr)


3. Install the software packages by typing:


# cd /cdrom/cdrom0/Sun_Crypto_Acc_1000_2_0/Packages 
# pkgadd -d . 

At the prompt, enter all to install all of the packages.

4. To verify that the software is installed properly, run the pkginfo command.


# pkginfo SUNWdcamn SUNWdcar SUNWdcau SUNWdcaf
system  SUNWdcamn   DCA Crypto Accelerator Manual Page
system  SUNWdcar    DCA Crypto Accelerator (Root)
system  SUNWdcau    DCA Crypto Accelerator (Utilities)
system  SUNWdcaf    DCA Crypto Accelerator Supplemental (usr)

5. (Optional) To ensure that the driver attached, run the prtconf command. If multiple Sun Crypto Accelerator 1000 boards are installed, multiple lines are displayed as shown in the following example.


# prtconf
pci108e,5455, instance #0
pci108e,5455, instance #1

6. (Optional) Run the modinfo command to see that modules are loaded.

However, until you have actually used the Sun Crypto Accelerator 1000 board to perform cryptographic operations, kcl and cryptio may not be loaded or appear.


# modinfo | grep Crypto
79  7bb80000    adc0  101   1   dca (PCI Crypto Accelerator 2.0)
79  7bb80000    adc0  101   1   dca (PCI Crypto Accelerator Mod 2.0)

7. (Optional) Verify that the modules are loaded using the Solaris Cryptographic Framework command.


# cryptoadm list
kernel hardware providers:
      dca/0


Directories and Files

TABLE 2-6 shows the directories created by the default installation of the Sun Crypto Accelerator 1000 software.


TABLE 2-6 Sun Crypto Accelerator 1000 Directories

Directory

Contents

/opt/SUNWconn/bin

 

/opt/SUNWconn/crypto/lib

Soft links to /usr/lib/libpkcs11.so

/opt/SUNWconn/crypto/lib/sparcv9

Soft links to /usr/lib/sparcv9/libpkcs11.so

/opt/SUNWconn/cryptov2/bin

Application executables

/opt/SUNWconn/cryptov2/man

Manual pages

/opt/SUNWconn/man

Manual pages


FIGURE 2-2 shows the hierarchy of these directories and files.


FIGURE 2-2 Sun Crypto Accelerator 1000 Version 2.0 Directories and Files

Diagram of the Sun Crypto Accelerator 1000 directories and files hierarchy.[ D ]



Removing the Software Without the remove Script



caution icon

Caution - Before removing the Sun Crypto Accelerator 1000 software you must disable any web servers you have enabled for use with the Sun Crypto Accelerator 1000 board. Failure to do so will leave those web servers nonfunctional.




procedure icon  To Remove the Software Without the remove Script

single-step bulletAs superuser, use the pkgrm command to remove only the software packages you installed.



caution icon

Caution - Installed packages must be removed in the order shown. Failure to remove them in this order could result in dependency warnings and leave kernel modules loaded



If you installed all the packages, you would remove them as follows:


# pkgrm SUNWdcamn SUNWdcau SUNWdcar SUNWdcaf