IBM Support

GSKit V8 - Install, Uninstall and Upgrade instructions for Linux systems

Question & Answer


Question

GSKit V8 provided with Security/Tivoli Directory server needs to be upgraded as part of periodic preventive maintenance.

Cause

GSKit V8 provided with Security/Tivoli Directory server needs to be upgraded as part of periodic preventive maintenance.

Answer

Refer to Recommended Fixes for latest recommended level of GSKit for a given version of Security/Tivoli Directory Server.
The required / latest GSKit V8 can be downloaded from IBM Fix Central.

Tab navigation

Linux x86 (ia32) - GSKit V8 - Install / Upgrade Instructions


Use root login or root credentials for the following procedure.
The same steps work for both initial installation as well as an upgrade.
  1. Download the required GSKit V8 file for Linux x86 (ia32) platform from IBM Fix Central.
    The name of the file will be of the form: 8.r.m.f-TIV-GSKIT-Linux32-FPnnnn.tar.gz
    Note: r.m.f are release, maintenance and fix level of GSKit V8 and nnnn is the fix level.
  2. After download, transfer(scp/ftp) the file to the target HP-UX system and extract the same:

    ==> cd <path_where_gskit_tar.gz_file_is_kept>
    ==> gunzip -c 8*-TIV-GSKIT-Linux32-*.tar.gz | tar -xf -
    Note: The above creates a folder with name 8.r.m.f-TIV-GSKIT-Linux32-FPnnnn and extracts all files into that folder.
  3. The contents of the folder 8.r.m.f-TIV-GSKIT-Linux32-FPnnnn :

    ==> cd 8.r.m.f-TIV-GSKIT-Linux32-FPnnnn # Use the correct name as per your download.
    ==> ls -1

    For example with 8.0.14.14 level of GSKit:
    ==> ls -1
    gskcrypt32-8.0.14.14.linux.x86.rpm
    gskssl32-8.0.14.14.linux.x86.rpm

    Description of the files:

    Global Security Kit V8.r.m.f 32 bit Linux x86 Crypto - gskcrypt32-8.r.m.f .linux.x86.rpm
    Global Security Kit V8.r.m.f 32 bit Linux x86 SSL - gskssl32-8.r.m.f .linux.x86.rpm

    Note: r.m.f are release, maintenance and fix level of GSKit V8.
  4. Stop Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.
  5. Install the rpm files:

    ==> cd 8*-TIV-GSKIT-Linux32-* # this full path becomes $PWD and is set in most shells.
    ==> rpm -Uhv gskcrypt32-8*.rpm
    ==> rpm -Uhv gskssl32-8*.rpm
  6. Verify the installed rpm levels:

    ==> rpm -qa | egrep "gskcrypt32|gskssl32"
  7. Start Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.

Back to top

Linux x86 (ia32) - GSKit V8 - Uninstall Instructions


Use root login or root credentials for the following procedure.
  1. Stop Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.
  2. Uninstall the packages:

    ==> rpm -e gskssl32
    ==> rpm -e gskcrypt32

    Notes:
    - The above command may not uninstall the packages if any dependent software is still in place. First uninstall any dependent software before uninstalling gskit.
    - In most cases an upgrade would be more suitable and uninstall is not really required.
  3. Verify the installed rpm levels:

    ==> rpm -qa | egrep "gskcrypt32|gskssl32"

Back to top

Linux x86_64 - GSKit V8 - Install / Upgrade Instructions


Use root login or root credentials for the following procedure.
The same steps work for both initial installation as well as an upgrade.
  1. Download the required GSKit V8 file for Linux x86_64 platform from IBM Fix Central.
    The name of the file will be of the form: 8.r.m.f-TIV-GSKIT-LinuxX64-FPnnnn.tar.gz
    Note: r.m.f are release, maintenance and fix level of GSKit V8 and nnnn is the fix level.
  2. After download, transfer(scp/ftp) the file to the target Linux system and extract the same:

    ==> cd <path_where_gskit_tar.gz_file_is_kept>
    ==> gunzip -c 8*-TIV-GSKIT-LinuxX64-*.tar.gz | tar -xf -
    Note: The above creates a folder with name 8.r.m.f-TIV-GSKIT-LinuxX64-FPnnnn and extracts all files into that folder.
  3. The contents of the folder 8.r.m.f-TIV-GSKIT-LinuxX64-FPnnnn :

    ==> cd 8.r.m.f-TIV-GSKIT-LinuxX64-FPnnnn # Use the correct name as per your download.
    ==> ls -1R

    For example with 8.0.14.14 level of GSKit:
    ==> ls -1R
    32/
    64/

    ./32:
    gskcrypt32-8.0.14.14.linux.x86.rpm
    gskssl32-8.0.14.14.linux.x86.rpm

    ./64:
    gskcrypt64-8.0.14.14.linux.x86_64.rpm
    gskssl64-8.0.14.14.linux.x86_64.rpm

    Description of the files:

    For TDS 32 bit Client components:
    Global Security Kit V8.r.m.f for linux x86 32 bit Crypto - gskcrypt32-8.r.m.f.linux.x86.rpm
    Global Security Kit V8.r.m.f for linux x86 32 bit SSL - gskssl32-8.r.m.f.linux.x86.rpm

    For TDS 64 bit Client components:
    Global Security Kit V8.r.m.f for Linux x86_64 64 bit Crypto - gskcrypt64-8.r.m.f.linux.x86_64.rpm
    Global Security Kit V8.r.m.f for Linux x86_64 64 bit SSL - gskssl64-8.r.m.f.linux.x86_64.rpm

    Note: r.m.f are release, maintenance and fix level of GSKit V8.
  4. Stop Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.
  5. Install the packages:

    For 32 bit GSKit: (From the 32 subfolder where you can see the listing of gskssl32 and gskcrypt32 rpms)
    ==> cd 8*-TIV-GSKIT-LinuxX64-*/32

    ==> rpm -Uhv gskcrypt32-8*.rpm
    ==> rpm -Uhv gskssl32-8*.rpm

    For 64 bit GSKit: (From the 64 subfolder where you can see the listing of gskssl64 and gskcrypt64 rpms)
    ==> cd 8*-TIV-GSKIT-LinuxX64-*/64

    ==> rpm -Uhv gskcrypt64-8*.rpm
    ==> rpm -Uhv gskssl64-8*.rpm
  6. Verify the installed rpm levels:

    ==> rpm -qa | egrep "gskcrypt32|gskssl32|gskcrypt64|gskssl64"
  7. Start Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.

Back to top

Linux x86_64 - GSKit V8 - Uninstall Instructions


Use root login or root credentials for the following procedure.
  1. Stop Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.
  2. Uninstall the packages:

    For 32 bit GSKit:

    ==> rpm -e gskssl32
    ==> rpm -e gskcrypt32

    For 64 bit GSKit:

    ==> rpm -e gskssl64
    ==> rpm -e gskcrypt64

    Notes:
    - The above command may not uninstall the packages if any dependent software is still in place. First uninstall any dependent software before uninstalling gskit.
    - In most cases an upgrade would be more suitable and uninstall is not really required.
  3. Verify the installed rpm levels:

    ==> rpm -qa | egrep "gskcrypt32|gskssl32|gskcrypt64|gskssl64"

Back to top

Linux i/p Series (ppc64) - GSKit V8 - Install / Upgrade Instructions


Use root login or root credentials for the following procedure.
The same steps work for both initial installation as well as an upgrade.
  1. Download the required GSKit V8 file for Linux i/p Series (ppc64) platform from IBM Fix Central.
    The name of the file will be of the form: 8.r.m.f-TIV-GSKIT-Linuxip-FPnnnn.tar.gz
    Note: r.m.f are release, maintenance and fix level of GSKit V8 and nnnn is the fix level.
  2. After download, transfer(scp/ftp) the file to the target Linux system and extract the same:

    ==> cd <path_where_gskit_tar.gz_file_is_kept>
    ==> gunzip -c 8*-TIV-GSKIT-Linuxip-*.tar.gz | tar -xf -
    Note: The above creates a folder with name 8.r.m.f-TIV-GSKIT-Linuxip-FPnnnn and extracts all files into that folder.
  3. The contents of the folder 8.r.m.f-TIV-GSKIT-Linuxip-FPnnnn :

    ==> cd 8.r.m.f-TIV-GSKIT-Linuxip-FPnnnn # Use the correct name as per your download.
    ==> ls -1R

    For example with 8.0.14.14 level of GSKit:
    ==> ls -1R
    32/
    64/

    ./32:
    gskcrypt32-8.0.14.14.linux.ppc.rpm
    gskssl32-8.0.14.14.linux.ppc.rpm

    ./64:
    gskcrypt64-8.0.14.14.linux.ppc.rpm
    gskssl64-8.0.14.14.linux.ppc.rpm

    Description of the files:

    For TDS 32 bit Client components:
    Global Security Kit V8.r.m.f for linux ppc 32 bit Crypto - gskcrypt32-8.r.m.f.linux.ppc.rpm
    Global Security Kit V8.r.m.f for linux ppc32 bit SSL - gskssl32-8.r.m.f.linux.ppc.rpm

    For TDS 64 bit Client components:
    Global Security Kit V8.r.m.f for Linux ppc 64 bit Crypto - gskcrypt64-8.r.m.f.linux.ppc.rpm
    Global Security Kit V8.r.m.f for Linux ppc 64 bit SSL - gskssl64-8.r.m.f.linux.ppc.rpm

    Note: r.m.f are release, maintenance and fix level of GSKit V8.
  4. Stop Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.
  5. Install the packages:

    For 32 bit GSKit: (From the 32 subfolder where you can see the listing of gskssl32 and gskcrypt32 rpms)
    ==> cd 8*-TIV-GSKIT-Linuxip-*/32

    ==> rpm -Uhv gskcrypt32-8*.rpm
    ==> rpm -Uhv gskssl32-8*.rpm

    For 64 bit GSKit: (From the 64 subfolder where you can see the listing of gskssl64 and gskcrypt64 rpms)
    ==> cd 8*-TIV-GSKIT-Linuxip-*/64

    ==> rpm -Uhv gskcrypt64-8*.rpm
    ==> rpm -Uhv gskssl64-8*.rpm
  6. Verify the installed rpm levels:

    ==> rpm -qa | egrep "gskcrypt32|gskssl32|gskcrypt64|gskssl64"
  7. Start Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.

Back to top

Linux i/p Series (ppc64) - GSKit V8 - Uninstall Instructions


Use root login or root credentials for the following procedure.
  1. Stop Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.
  2. Uninstall the packages:

    For 32 bit GSKit:

    ==> rpm -e gskssl32
    ==> rpm -e gskcrypt32

    For 64 bit GSKit:

    ==> rpm -e gskssl64
    ==> rpm -e gskcrypt64

    Notes:
    - The above command may not uninstall the packages if any dependent software is still in place. First uninstall any dependent software before uninstalling gskit.
    - In most cases an upgrade would be more suitable and uninstall is not really required.
  3. Verify the installed rpm levels:

    ==> rpm -qa | egrep "gskcrypt32|gskssl32|gskcrypt64|gskssl64"

Back to top

Linux zSeries (s390x) - GSKit V8 - Install / Upgrade Instructions


Use root login or root credentials for the following procedure.
The same steps work for both initial installation as well as an upgrade.
  1. Download the required GSKit V8 file for Linux zSeries (s390x) platform from IBM Fix Central.
    The name of the file will be of the form: 8.r.m.f-TIV-GSKIT-Linuxz-FPnnnn.tar.gz
    Note: r.m.f are release, maintenance and fix level of GSKit V8 and nnnn is the fix level.
  2. After download, transfer(scp/ftp) the file to the target Linux system and extract the same:

    ==> cd <path_where_gskit_tar.gz_file_is_kept>
    ==> gunzip -c 8*-TIV-GSKIT-Linuxz-*.tar.gz | tar -xf -
    Note: The above creates a folder with name 8.r.m.f-TIV-GSKIT-Linuxz-FPnnnn and extracts all files into that folder.
  3. The contents of the folder 8.r.m.f-TIV-GSKIT-Linuxz-FPnnnn :

    ==> cd 8.r.m.f-TIV-GSKIT-Linuxz-FPnnnn # Use the correct name as per your download.
    ==> ls -1R

    For example with 8.0.14.14 level of GSKit:
    ==> ls -1R
    32/
    64/

    ./32:
    gskcrypt31-8.0.14.14.linux.s390.rpm
    gskssl31-8.0.14.14.linux.s390.rpm

    ./64:
    gskcrypt64-8.0.14.14.linux.s390x.rpm
    gskssl64-8.0.14.14.linux.s390x.rpm

    Description of the files:

    For TDS 32 bit Client components:
    Global Security Kit V8.r.m.f for linux s390 31 bit Crypto - gskcrypt32-8.r.m.f.linux.s390.rpm
    Global Security Kit V8.r.m.f for linux s390 31 bit SSL - gskssl32-8.r.m.f.linux.s390.rpm

    For TDS 64 bit Client components:
    Global Security Kit V8.r.m.f for Linux s390x 64 bit Crypto - gskcrypt64-8.r.m.f.linux.s390x.rpm
    Global Security Kit V8.r.m.f for Linux s390x 64 bit SSL - gskssl64-8.r.m.f.linux.s390x.rpm

    Note: r.m.f are release, maintenance and fix level of GSKit V8.
  4. Stop Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.
  5. Install the packages:

    For 32 bit GSKit: (From the 32 subfolder where you can see the listing of gskssl32 and gskcrypt32 rpms)
    ==> cd 8*-TIV-GSKIT-Linuxz-*/32

    ==> rpm -Uhv gskcrypt32-8*.rpm
    ==> rpm -Uhv gskssl32-8*.rpm

    For 64 bit GSKit: (From the 64 subfolder where you can see the listing of gskssl64 and gskcrypt64 rpms)
    ==> cd 8*-TIV-GSKIT-Linuxz-*/64

    ==> rpm -Uhv gskcrypt64-8*.rpm
    ==> rpm -Uhv gskssl64-8*.rpm
  6. Verify the installed rpm levels:

    ==> rpm -qa | egrep "gskcrypt32|gskssl32|gskcrypt64|gskssl64"
  7. Start Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.

Back to top

Linux zSeries (s390x) - GSKit V8 - Uninstall Instructions


Use root login or root credentials for the following procedure.
  1. Stop Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.
  2. Uninstall the packages:

    For 32 bit GSKit:

    ==> rpm -e gskssl32
    ==> rpm -e gskcrypt32

    For 64 bit GSKit:

    ==> rpm -e gskssl64
    ==> rpm -e gskcrypt64

    Notes:
    - The above command may not uninstall the packages if any dependent software is still in place. First uninstall any dependent software before uninstalling gskit.
    - In most cases an upgrade would be more suitable and uninstall is not really required.
  3. Verify the installed rpm levels:

    ==> rpm -qa | egrep "gskcrypt32|gskssl32|gskcrypt64|gskssl64"

Back to top

[{"Product":{"code":"SSVJJU","label":"IBM Security Directory Server"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"General","Platform":[{"code":"PF016","label":"Linux"}],"Version":"6.3;6.3.1;6.4","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21631460

Page Feedback