Install

Windows

If you run the Windows installation package, you can easily install it through the wizard-type installation screen. There is no need to reboot the system and can be installed online without service interruption. This uninterrupted installation is the same for module updates or product removal.

Linux

Installation on Linux also provides online installation during service operation by default. However, in the case of Linux, you must first install the kernel filter framework module included in the FSR installation package, and then install the FSR clone package in order. The installation process is automatically performed by the installation package, and the installation method may differ slightly depending on the platform.

Red Hat series installs as rpm package and Debian series installs as deb package. In particular, the deb package uses the Dynamic Kernel Module Support (DKMS) method, which builds and installs modules directly on the target machine.

Updates, deletions can also be performed online without service offline.

Secure Boot Support

Secureboot support is based on the signature of the fsr install module. Secure Boot support on Windows platforms is supported by signing its own SHA2 EV certificate, and Linux supports it in slightly different ways depending on the platform.

Windows

In Windows, the fsr module is distributed after obtaining EV certification from Microsoft in advance before distribution. No further action is required other than installing the fsr module as an installation package.

Linux

RedHat Family

Provides the public key for secure boot support in the package file (.run). You can use the kernel module in Secure Boot mode only by registering the provided public key.

Import fsr-module public-key
input password:
input password again:

The package installation process asks for a password for registration. The password is freely selectable and will be applied after rebooting. At this time, the registered public key is located in the /etc/pki/mantech/fsr_signing_key_pub.der path.

Debian Family

For the Debian family, the dkms package is used to build and install the module directly on the customer system. Therefore, private and public keys for secure boot are generated and registered in the customer system.

Private and public keys are automatically generated during package installation for user convenience.

Import fsr-module public-key
input password:
input password again:

In the process of registering the public key, the password required for registration is required and is applied after rebooting.
The generated and registered private key and public key are located in /etc/pki/mantech/fsr_signing_key.priv, /etc/pki/mantech/fsr_signing_key_pub.der path.