# first a neg. test on a pretty fresh install, then the test with the new packages: ubuntu@s1lp14:~$ sudo apt install opencryptoki libtspi1 [sudo] password for ubuntu: Reading package lists... Done Building dependency tree Reading state information... Done The following additional packages will be installed: libica3 libitm1 libopencryptoki0 The following NEW packages will be installed: libica3 libitm1 libopencryptoki0 libtspi1 opencryptoki 0 upgraded, 5 newly installed, 0 to remove and 0 not upgraded. Need to get 828 kB of archives. After this operation, 4,958 kB of additional disk space will be used. Do you want to continue? [Y/n] Y Get:1 http://us.ports.ubuntu.com/ubuntu-ports bionic/universe s390x libica3 s390x 3.2.1-0ubuntu1 [60.5 kB] Get:2 http://us.ports.ubuntu.com/ubuntu-ports bionic/main s390x libitm1 s390x 8-20180414-1ubuntu2 [26.9 kB] Get:3 http://us.ports.ubuntu.com/ubuntu-ports bionic/universe s390x libtspi1 s390x 0.3.14+fixed1-1build1 [127 kB] Get:4 http://us.ports.ubuntu.com/ubuntu-ports bionic/universe s390x libopencryptoki0 s390x 3.9.0+dfsg-0ubuntu1 [521 kB] Get:5 http://us.ports.ubuntu.com/ubuntu-ports bionic/universe s390x opencryptoki s390x 3.9.0+dfsg-0ubuntu1 [92.9 kB] Fetched 828 kB in 0s (2,094 kB/s) Selecting previously unselected package libica3:s390x. (Reading database ... 79269 files and directories currently installed.) Preparing to unpack .../libica3_3.2.1-0ubuntu1_s390x.deb ... Unpacking libica3:s390x (3.2.1-0ubuntu1) ... Selecting previously unselected package libitm1:s390x. Preparing to unpack .../libitm1_8-20180414-1ubuntu2_s390x.deb ... Unpacking libitm1:s390x (8-20180414-1ubuntu2) ... Selecting previously unselected package libtspi1. Preparing to unpack .../libtspi1_0.3.14+fixed1-1build1_s390x.deb ... Unpacking libtspi1 (0.3.14+fixed1-1build1) ... Selecting previously unselected package libopencryptoki0:s390x. Preparing to unpack .../libopencryptoki0_3.9.0+dfsg-0ubuntu1_s390x.deb ... Unpacking libopencryptoki0:s390x (3.9.0+dfsg-0ubuntu1) ... Selecting previously unselected package opencryptoki. Preparing to unpack .../opencryptoki_3.9.0+dfsg-0ubuntu1_s390x.deb ... Unpacking opencryptoki (3.9.0+dfsg-0ubuntu1) ... Processing triggers for ureadahead (0.100.0-20) ... ureadahead will be reprofiled on next reboot Setting up libtspi1 (0.3.14+fixed1-1build1) ... Setting up libica3:s390x (3.2.1-0ubuntu1) ... Processing triggers for libc-bin (2.27-3ubuntu1) ... Processing triggers for systemd (237-3ubuntu10) ... Processing triggers for man-db (2.8.3-2) ... Setting up libitm1:s390x (8-20180414-1ubuntu2) ... Setting up libopencryptoki0:s390x (3.9.0+dfsg-0ubuntu1) ... Setting up opencryptoki (3.9.0+dfsg-0ubuntu1) ... Adding group `pkcs11' (GID 122) ... Done. Adding user `root' to group `pkcs11' ... Adding user root to group pkcs11 Done. Created symlink /etc/systemd/system/multi-user.target.wants/pkcsslotd.service → /lib/systemd/system/pkcsslotd.service. Processing triggers for libc-bin (2.27-3ubuntu1) ... Processing triggers for ureadahead (0.100.0-20) ... Processing triggers for systemd (237-3ubuntu10) ... ubuntu@s1lp14:~$ sudo usermod -aG pkcs11 ubuntu ubuntu@s1lp14:~$ grep pkcs11 /etc/group pkcs11:x:122:root,ubuntu ubuntu@s1lp14:~$ sudo systemctl enable pkcsslotd.service Synchronizing state of pkcsslotd.service with SysV service script with /lib/systemd/systemd-sysv-install. Executing: /lib/systemd/systemd-sysv-install enable pkcsslotd ubuntu@s1lp14:~$ sudo systemctl start pkcsslotd.service ubuntu@s1lp14:~$ sudo pkcsconf usage: pkcsconf [-itsmIupPh] [-c slotnumber -U userPIN -S SOPin -n newpin] -i display PKCS11 info -t display token info -s display slot info -m display mechanism list -l display slot description -I initialize token -u initialize user PIN -p set the user PIN -P set the SO PIN -h show this help ubuntu@s1lp14:~$ sudo pkcsconf -t Segmentation fault ubuntu@s1lp14:~$ dpkg -l opencryptoki Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ Name Version Architecture Description +++-==============-============-============-================================= ii opencryptoki 3.9.0+dfsg-0 s390x PKCS#11 implementation (daemon) ubuntu@s1lp14:~$ ubuntu@s1lp14:~$ sudo pkcsconf -i PKCS#11 Info Version 2.20 Manufacturer: IBM Flags: 0x0 Library Description: Meta PKCS11 LIBRARY Library Version 3.9 ubuntu@s1lp14:~$ sudo pkcsconf -s Slot #1 Info Description: Linux Manufacturer: IBM Flags: 0x1 (TOKEN_PRESENT) Hardware Version: 0.0 Firmware Version: 0.0 Slot #2 Info Description: Linux Manufacturer: IBM Flags: 0x1 (TOKEN_PRESENT) Hardware Version: 0.0 Firmware Version: 0.0 Slot #3 Info Description: Linux Manufacturer: IBM Flags: 0x1 (TOKEN_PRESENT) Hardware Version: 0.0 Firmware Version: 0.0 ubuntu@s1lp14:~$ __________ ubuntu@s1lp14:~$ sudo add-apt-repository "deb http://us.ports.ubuntu.com/ubuntu-ports/ $(lsb_release -sc)-proposed restricted main" Hit:1 http://us.ports.ubuntu.com/ubuntu-ports bionic InRelease Get:2 http://us.ports.ubuntu.com/ubuntu-ports bionic-updates InRelease [83.2 kB] Get:3 http://us.ports.ubuntu.com/ubuntu-ports bionic-backports InRelease [74.6 kB] Get:4 http://us.ports.ubuntu.com/ubuntu-ports bionic-proposed InRelease [242 kB] Get:5 http://ports.ubuntu.com/ubuntu-ports bionic-security InRelease [83.2 kB] Get:6 http://us.ports.ubuntu.com/ubuntu-ports bionic-updates/main s390x Packages [83.1 kB] Get:7 http://us.ports.ubuntu.com/ubuntu-ports bionic-updates/main Translation-en [46.3 kB] Get:8 http://us.ports.ubuntu.com/ubuntu-ports bionic-updates/universe s390x Packages [68.5 kB] Get:9 http://us.ports.ubuntu.com/ubuntu-ports bionic-updates/universe Translation-en [36.3 kB] Get:10 http://us.ports.ubuntu.com/ubuntu-ports bionic-proposed/main s390x Packages [32.7 kB] Get:11 http://us.ports.ubuntu.com/ubuntu-ports bionic-proposed/main Translation-en [19.5 kB] Get:12 http://ports.ubuntu.com/ubuntu-ports bionic-security/main s390x Packages [45.1 kB] Get:13 http://ports.ubuntu.com/ubuntu-ports bionic-security/main Translation-en [29.2 kB] Get:14 http://ports.ubuntu.com/ubuntu-ports bionic-security/universe s390x Packages [20.5 kB] Get:15 http://ports.ubuntu.com/ubuntu-ports bionic-security/universe Translation-en [14.7 kB] Fetched 879 kB in 1s (1,107 kB/s) Reading package lists... Done ubuntu@s1lp14:~$ sudo apt update Hit:1 http://us.ports.ubuntu.com/ubuntu-ports bionic InRelease Hit:2 http://us.ports.ubuntu.com/ubuntu-ports bionic-updates InRelease Hit:3 http://us.ports.ubuntu.com/ubuntu-ports bionic-backports InRelease Hit:4 http://us.ports.ubuntu.com/ubuntu-ports bionic-proposed InRelease Hit:5 http://ports.ubuntu.com/ubuntu-ports bionic-security InRelease Reading package lists... Done Building dependency tree Reading state information... Done 20 packages can be upgraded. Run 'apt list --upgradable' to see them. ubuntu@s1lp14:~$ apt list --upgradable Listing... Done command-not-found/bionic-proposed 18.04.5 all [upgradable from: 18.04.4] command-not-found-data/bionic-proposed 18.04.5 s390x [upgradable from: 18.04.4] landscape-common/bionic-proposed 18.01-0ubuntu3.1 s390x [upgradable from: 18.01-0ubuntu3] libnss-systemd/bionic-proposed 237-3ubuntu10.1 s390x [upgradable from: 237-3ubuntu10] libpam-systemd/bionic-proposed 237-3ubuntu10.1 s390x [upgradable from: 237-3ubuntu10] libsystemd0/bionic-proposed 237-3ubuntu10.1 s390x [upgradable from: 237-3ubuntu10] libudev1/bionic-proposed 237-3ubuntu10.1 s390x [upgradable from: 237-3ubuntu10] linux-generic/bionic-proposed 4.15.0.23.25 s390x [upgradable from: 4.15.0.22.23] linux-headers-generic/bionic-proposed 4.15.0.23.25 s390x [upgradable from: 4.15.0.22.23] linux-image-generic/bionic-proposed 4.15.0.23.25 s390x [upgradable from: 4.15.0.22.23] netplan.io/bionic-proposed 0.36.2 s390x [upgradable from: 0.36.1] nplan/bionic-proposed 0.36.2 all [upgradable from: 0.36.1] python3-commandnotfound/bionic-proposed 18.04.5 all [upgradable from: 18.04.4] python3-update-manager/bionic-proposed 1:18.04.11.1 all [upgradable from: 1:18.04.11] sosreport/bionic-proposed 3.5-1ubuntu3.18.04.1 s390x [upgradable from: 3.5-1ubuntu3] systemd/bionic-proposed 237-3ubuntu10.1 s390x [upgradable from: 237-3ubuntu10] systemd-sysv/bionic-proposed 237-3ubuntu10.1 s390x [upgradable from: 237-3ubuntu10] udev/bionic-proposed 237-3ubuntu10.1 s390x [upgradable from: 237-3ubuntu10] update-manager-core/bionic-proposed 1:18.04.11.1 all [upgradable from: 1:18.04.11] wireless-regdb/bionic-proposed 2018.05.09-0ubuntu1~18.04.1 all [upgradable from: 2016.06.10-0ubuntu1] ubuntu@s1lp14:~$ ### Where is opencryptoki ?!?!?! ubuntu@s1lp14:~$ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 18.04 LTS Release: 18.04 Codename: bionic ubuntu@s1lp14:~$ ubuntu@s1lp14:~$ wget http://launchpadlibrarian.net/372381032/libopencryptoki0_3.9.0+dfsg-0ubuntu1.1_s390x.deb http://launchpadlibrarian.net/372381033/opencryptoki_3.9.0+dfsg-0ubuntu1.1_s390x.deb --2018-06-08 00:29:52-- http://launchpadlibrarian.net/372381032/libopencryptoki0_3.9.0+dfsg-0ubuntu1.1_s390x.deb Resolving launchpadlibrarian.net (launchpadlibrarian.net)... 91.189.89.229, 91.189.89.228 Connecting to launchpadlibrarian.net (launchpadlibrarian.net)|91.189.89.229|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 521252 (509K) [application/x-debian-package] Saving to: ‘libopencryptoki0_3.9.0+dfsg-0ubuntu1.1_s390x.deb’ libopencryptoki0_3. 100%[===================>] 509.04K 1.57MB/s in 0.3s 2018-06-08 00:29:53 (1.57 MB/s) - ‘libopencryptoki0_3.9.0+dfsg-0ubuntu1.1_s390x.deb’ saved [521252/521252] --2018-06-08 00:29:53-- http://launchpadlibrarian.net/372381033/opencryptoki_3.9.0+dfsg-0ubuntu1.1_s390x.deb Reusing existing connection to launchpadlibrarian.net:80. HTTP request sent, awaiting response... 200 OK Length: 92072 (90K) [application/x-debian-package] Saving to: ‘opencryptoki_3.9.0+dfsg-0ubuntu1.1_s390x.deb’ opencryptoki_3.9.0+ 100%[===================>] 89.91K --.-KB/s in 0.002s 2018-06-08 00:29:53 (40.1 MB/s) - ‘opencryptoki_3.9.0+dfsg-0ubuntu1.1_s390x.deb’ saved [92072/92072] FINISHED --2018-06-08 00:29:53-- Total wall clock time: 0.8s Downloaded: 2 files, 599K in 0.3s (1.84 MB/s) ubuntu@s1lp14:~$ ubuntu@s1lp14:~$ sudo apt install ./opencryptoki_3.9.0+dfsg-0ubuntu1.1_s390x.deb ./libopencryptoki0_3.9.0+dfsg-0ubuntu1.1_s390x.deb Reading package lists... Done Building dependency tree Reading state information... Done Note, selecting 'opencryptoki' instead of './opencryptoki_3.9.0+dfsg-0ubuntu1.1_s390x.deb' Note, selecting 'libopencryptoki0' instead of './libopencryptoki0_3.9.0+dfsg-0ubuntu1.1_s390x.deb' The following packages will be upgraded: libopencryptoki0 opencryptoki 2 upgraded, 0 newly installed, 0 to remove and 20 not upgraded. Need to get 0 B/613 kB of archives. After this operation, 4,096 B disk space will be freed. Get:1 /home/ubuntu/opencryptoki_3.9.0+dfsg-0ubuntu1.1_s390x.deb opencryptoki s390x 3.9.0+dfsg-0ubuntu1.1 [92.1 kB] Get:2 /home/ubuntu/libopencryptoki0_3.9.0+dfsg-0ubuntu1.1_s390x.deb libopencryptoki0 s390x 3.9.0+dfsg-0ubuntu1.1 [521 kB] (Reading database ... 79381 files and directories currently installed.) Preparing to unpack .../opencryptoki_3.9.0+dfsg-0ubuntu1.1_s390x.deb ... Unpacking opencryptoki (3.9.0+dfsg-0ubuntu1.1) over (3.9.0+dfsg-0ubuntu1) ... Preparing to unpack .../libopencryptoki0_3.9.0+dfsg-0ubuntu1.1_s390x.deb ... Unpacking libopencryptoki0:s390x (3.9.0+dfsg-0ubuntu1.1) over (3.9.0+dfsg-0ubuntu1) ... Processing triggers for ureadahead (0.100.0-20) ... Setting up libopencryptoki0:s390x (3.9.0+dfsg-0ubuntu1.1) ... Setting up opencryptoki (3.9.0+dfsg-0ubuntu1.1) ... addgroup: The group `pkcs11' already exists as a system group. Exiting. The user `root' is already a member of `pkcs11'. Processing triggers for libc-bin (2.27-3ubuntu1) ... Processing triggers for systemd (237-3ubuntu10) ... Processing triggers for man-db (2.8.3-2) ... ubuntu@s1lp14:~$ ubuntu@s1lp14:~$ dpkg -l | grep opencryptoki ii libopencryptoki0:s390x 3.9.0+dfsg-0ubuntu1.1 s390x PKCS#11 implementation (library) ii opencryptoki 3.9.0+dfsg-0ubuntu1.1 s390x PKCS#11 implementation (daemon) ubuntu@s1lp14:~$ ubuntu@s1lp14:~$ sudo systemctl restart pkcsslotd.service ubuntu@s1lp14:~$ sudo pkcsconf usage: pkcsconf [-itsmIupPh] [-c slotnumber -U userPIN -S SOPin -n newpin] -i display PKCS11 info -t display token info -s display slot info -m display mechanism list -l display slot description -I initialize token -u initialize user PIN -p set the user PIN -P set the SO PIN -h show this help ubuntu@s1lp14:~$ sudo pkcsconf -t Token #1 Info: Label: IBM ICA PKCS #11 Manufacturer: IBM Corp. Model: IBM ICA Serial Number: 123 Flags: 0x880045 (RNG|LOGIN_REQUIRED|CLOCK_ON_TOKEN|USER_PIN_TO_BE_CHANGED|SO_PIN_TO_BE_CHANGED) Sessions: 0/18446744073709551614 R/W Sessions: 18446744073709551615/18446744073709551614 PIN Length: 4-8 Public Memory: 0xFFFFFFFFFFFFFFFF/0xFFFFFFFFFFFFFFFF Private Memory: 0xFFFFFFFFFFFFFFFF/0xFFFFFFFFFFFFFFFF Hardware Version: 1.0 Firmware Version: 1.0 Time: 00:32:51 Token #3 Info: Label: IBM OS PKCS#11 Manufacturer: IBM Corp. Model: IBM SoftTok Serial Number: 123 Flags: 0x880045 (RNG|LOGIN_REQUIRED|CLOCK_ON_TOKEN|USER_PIN_TO_BE_CHANGED|SO_PIN_TO_BE_CHANGED) Sessions: 0/18446744073709551614 R/W Sessions: 18446744073709551615/18446744073709551614 PIN Length: 4-8 Public Memory: 0xFFFFFFFFFFFFFFFF/0xFFFFFFFFFFFFFFFF Private Memory: 0xFFFFFFFFFFFFFFFF/0xFFFFFFFFFFFFFFFF Hardware Version: 1.0 Firmware Version: 1.0 Time: 00:32:51 ubuntu@s1lp14:~$ ubuntu@s1lp14:~$ sudo pkcsconf -i PKCS#11 Info Version 2.20 Manufacturer: IBM Flags: 0x0 Library Description: Meta PKCS11 LIBRARY Library Version 3.9 ubuntu@s1lp14:~$ ubuntu@s1lp14:~$ sudo pkcsconf -s Slot #1 Info Description: Linux Manufacturer: IBM Flags: 0x1 (TOKEN_PRESENT) Hardware Version: 0.0 Firmware Version: 0.0 Slot #3 Info Description: Linux Manufacturer: IBM Flags: 0x1 (TOKEN_PRESENT) Hardware Version: 0.0 Firmware Version: 0.0 ubuntu@s1lp14:~$