Linux clients (recommended)

We recommend this approach to install DigiCert® Software Trust Manager client tools on Linux.

Easily download all the tools and libraries you may require to sign and scan Microsoft and non-Microsoft files on Linux.

What clients are included in the installer?

The following clients will be downloaded:

Signing Manager CTL (SMCTL)
SMCTL provides a Command Line Interface (CLI) that facilitates manual or automated private key, certificate management, and signing, with or without the need for human intervention.
Software Trust Manager PKCS11 library
The PKCS11 library handles secure key generation, application hash signing, and associated certificate-related requirements when the signing request does not require the transportation of files and intellectual property.
JCE library
The JCE library is used for signing with Jarsigner and integrates with any operating system that supports Java.
ReversingLabs scanning tool
This tool will only work if software scanner is enabled on your Software Trust Manager account. It is a Dynamic Application Security Testing (DAST) service powered by ReversingLabs to scan your software for malware, vulnerabilities, secrets, and more before releasing your software to the public.

Install Linux clients

Sign in to DigiCert ONE.
Navigate to the Manager menu (top-right) > DigiCert® Software Trust Manager > Resources > Client tool repository.
Select Linux as your operating system.
Click the download icon next to DigiCert® Software Trust Manager clients.
Move the file to your preferred location.
Open a terminal.
Run the following command to extract the files:
```
tar -xvf smtools-linux-x64.tar.gz
```

Configure client tools

Extract the contents from the downloaded file.
Move the contents of the file to the location of your choice in your file system.
Configure the tools you need:

exemplo 1. SMCTL

Select one of the four methods below to configure your environment variables for SMCTL. The most secure method is to store your API key and the Client authentication certificate password password in Linux Pass.

Refer to SMCTL for more information.

exemplo 2. PKCS11 library

A configuration is required to use the PKCS11 library.

To create a configuration file with the path to this shared library:

Open an integrated development environment (IDE) or plain text editor.

Copy and paste the following text into the editor:

name=signingmanager 
library="<path to smpkcs11.so>"
slotListIndex=0

Sample:

name=signingmanager 
library="/home/<user>/Keylockertools-linux-x64/smpkcs11.so" 
slotListIndex=0

Save the file as pkcs11properties.cfg.
Move the pkcs11properties.cfg file to the same location as the PKCS11 library.

Refer to PKCS11 library for more information.

Set PATH environment variables

Operating systems use the environment variable called PATH to determine where executable files are stored on your system. Use the PATH environment variable to store the file path to your client tools.

Launch the Terminal application.
Open the file in an editor:
```
nano ~/.profile
```
Add any exports definitions you need:
```
export PATH=<Path to client tools>
```
Click CTRL+X to exit.
Click Y to save.
Click Enter to keep the same file name.
Execute the new .profile by restarting Terminal or using:
```
 source ~/.profile
```

Nesta secção:

Linux clients (recommended)

What clients are included in the installer?

Install Linux clients

Configure client tools

Set PATH environment variables

Related articles

Resultados da procura