Installing the nShield Key Attestation Verifier
Always download the nShield Key Attestation Verifier from a trusted source. Verify the integrity after it has been downloaded. You can verify the integrity by using the hash provided at the software download, or obtained from a trusted source.
Before you install the nShield Key Attestation Verifier:
-
See the latest Release Notes at https://nshieldsupport.entrust.com/hc/en-us/sections/360001115837-Release-Notes for hardware and software compatibility, and known and fixed issues.
-
Determine whether the nShield Key Attestation Verifier will be installed as a standalone tool, or installed alongside an existing Security World software installation.
-
Remove any previous installations of the nShield Key Attestation Verifier.
Install the nShield Key Attestation Verifier
Windows:
To install the nShield Key Attestation Verifier on Windows:
-
Download and mount
keyattest-Common-<version>.iso
. -
In an administrator command prompt, change to where the ISO is mounted.
-
Run
nShieldKeyAttestSetup.bat
, specifying:-s
(or--standalone
) for a standalone installation, or-n
(or--nshield-upgrade
) to install alongside an existing Security World software installation. For example, to install as a standalone installation:nShieldKeyAttestSetup.bat -s
On completion, nfkmattest
will exist in C:\Program Files\nCipher\nfast\bin
.
Linux:
To install the nShield Key Attestation Verifier on Linux:
-
Download and mount
keyattest-Common-<version>.iso
. -
In a command prompt, change to where the ISO is mounted.
-
Run
nShieldKeyAttestSetup.sh
, specifying:-s
(or--standalone
) for a standalone installation, or-n
(or--nshield-upgrade
) to install alongside an existing Security World software installation. For example, to install alongside an existing Security World software installation:sudo ./nShieldKeyAttestSetup.sh -n
On completion, nfkmattest
will exist in /opt/nfast/bin
.
Uninstall the nShield Key Attestation Verifier
Windows
To uninstall the nShield Key Attestation Verifier on Windows:
-
In an administrator command prompt, change to where the ISO is mounted.
-
Run
nShieldKeyAttestSetup.bat
with the--uninstall
option - specifying:-s
(or--standalone
) if installed as a standalone installation, or-n
(or--nshield-upgrade
) if installed alongside an existing Security World software installation. For example, to uninstall a standalone installation:sudo ./nShieldKeyAttestSetup.bat -s --uninstall
Linux:
To uninstall the nShield Key Attestation Verifier on Linux:
-
In a command prompt, change to where the ISO is mounted.
-
Run
nShieldKeyAttestSetup.sh
with the--uninstall
option - specifying:-s
(or--standalone
) if installed as a standalone installation, or-n
(or--nshield-upgrade
) if installed alongside an existing Security World software installation. For example, to uninstall if installed alongside an existing Security World software installation:sudo ./nShieldKeyAttestSetup.sh -n --uninstall