Prerequisites
Before you install WSOP:
-
Refer to the latest Release Notes at https://nshieldsupport.entrust.com/hc/en-us/sections/360001115837-Release-Notes for hardware and software compatibility, and known and fixed issues.
-
Review Security guidance for the Web Services Option Pack. For additional security guidance, see also the Security Manual available with the Security World software.
-
Check you have at least Security World software (v12.80) installed, and a working Security World configured. See Security World software.
-
Check you have MongoDB (v5.0.13) running with a replica set configured. See MongoDB.
-
If you already have a previous version of WSOP installed, this must first be removed before installing a new version. See Upgrading the Web Services Option Pack.
This release of WSOP is compatible with Linux only. See the Release Notes for the list of compatible operating systems and versions.
| A WSOP server can only use a single HSM. High availability can be achieved by deploying multiple WSOP servers behind a third-party load balancer, with each WSOP server communicating with a single HSM. |
Security World software
WSOP requires nShield Security World software to be installed, and a working Security World to be configured.
To confirm that there is a usable Security World, use the nfkminfo command:
nfkminfoIf the Security World is usable then the state line in the nfkminfo output shows Usable.
World
generation 2
state 0x37270008 Initialised Usable Recovery !PINRecovery !ExistingClient RTC NVRAM FTO AlwaysUseStrongPrimes !DisablePKCS1Padding !PpStrengthCheck !AuditLogging SEEDebug
…For further information on installing Security World software and creating a Security World, see the User Guide shipped with your nShield Security World software.
MongoDB
WSOP has been tested against version 5.0.18.
Replica Set setup is required. For details about MongoDB replica set configuration, see the MongoDB documentation: Replica Set Configuration
Minimum number of replica set instances supported is 1.
Minimum action privileges required for corecrypto databases and collections are:
find, insert, remove, createIndex and update.
For more information please refer to the MongoDB documentation https://www.mongodb.com/docs/.