Nexus Documentation

Space shortcuts

Page tree

Versions Compared

Old Version 38

changes.mady.by.user Ann Base

Saved on

compared with

New Version Current

changes.mady.by.user Ylva Andersson

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Updates in section "Personal Desktop Client" + new note and warning added in section "Operating systems" for CM 8.7.

This article provides a list of supported platforms, formats, and third party products, for use with Smart ID Certificate Manager (CM). All listed hardware and software can be used in supported configurations of the product.

Note
Listed third party hardware and software has been verified with the current or a previous version of Certificate Manager.

Expandall

Requirements

Expand
titleOperating systems
  • Key Generation System, KGS
    • Windows Server 2012 R2, 2016, 2019
    • Windows 7, 8.1, 10
  • CM Clients
    • Windows 7, 8.1, 10
    • Windows Server 2016, 2019
    • Red Hat Enterprise Linux 7, 8
    • CentOS 7

    • SUSE Linux Enterprise Desktop 15.4

    • OpenSUSE Leap 15.4
    • Rocky Linux 8, 9
  • CM Server
    • Windows Server 2016, 2019
    • Red Hat Enterprise Linux 7, 8
    • CentOS 7

    • SUSE Linux Enterprise Server 15.4

    • OpenSUSE Leap 15.4

    • Rocky Linux 8, 9


Note

Installing of Personal Desktop Client on Rocky Linux 8/9 and RHEL 9 requires the following pre-installed dependencies:

  • libpng15
  • EPEL (Extra Packages for Enterprise Linux).


Note

The use of CentOS together with Certificate Manager is deprecated. It is not recommended to use CentOS for new installations of Certificate Manager. Certificate Manager installations already running on CentOS is still supported until it reaches end of life on 30-06-2024. For more information regarding end of life of CentOS, see https://access.redhat.com/support/policy/updates/errata/#Life_Cycle_Dates


Warning

The installation will fail if the operating system is unsupported.



Expand
titleDatabase versions
  • Microsoft SQL Server Express and Enterprise editions:
    • 2016, 2017, 2019
  • Oracle Express and Enterprise editions:
    • 19c
  • PostgreSQL:
    • 12, 13, 14
  • MySQL
    • 8.0
  • Azure SQL Database
  • MariaDB
    • 10.3 - 10.10


Expand
titleJava Virtual Machine

CM Server

  • Oracle Java SE JRE 11, OpenJDK 11. (64 bit).
    • On Windows platforms with Oracle Java installed, the newest Java is used by default, even if multiple Java versions are installed.
    • On Windows platforms with OpenJDK Java installed, the Java to be used has to be manually specified, see Install Certificate Manager server components on Windows, heading "Java version".

CM Clients

  • Oracle Java SE JRE 11, OpenJDK 11. (32/64 bit)
    • For Linux, 64-bit Java is required in order to use Personal Desktop Client.
    • For Windows with OpenJDK Java installed, the Java to be used has to be manually specified, see Launch Certificate Manager clients, heading "Specify JRE".

CM SDK 

  • Oracle Java SE JRE 11, OpenJDK 11, JRE 8. (32/64 bit.)


Note

For use of Brainpool elliptic curves (EC), AdoptOpenJDK is recommended. 



Expand
titleWeb application server

CM Web Services and Protocol Gateway servlets require a servlet engine supporting the Java API for Servlets v3.1. Apache Tomcat version 9.0 is the recommended engine.


Expand
titlePersonal Desktop Client

Nexus Personal Desktop Client is a middleware for use on CM clients, for officer smart card authentication and personalization of smart cards:

CM clients and CM SDK on Windows: Nexus Personal Desktop Client

.

Use these versions of Personal Desktop Client, they are included in the CM delivery.

For operating systems:

  • 5.8.6 for Windows, RedHat, RockyLinux, CentOS

  • 5.3.1 .for OpenSUSE

Interoperability

Formats and standards

Expand
titleCertificate formats

Excerpt Include
Supported certificate formats in Certificate Manager
Supported certificate formats in Certificate Manager
nopaneltrue


Expand
titleCertificate Revocation List (CRL) formats

Excerpt Include
Supported certificate revocation list (CRL) formats in Certificate Manager
Supported certificate revocation list (CRL) formats in Certificate Manager
nopaneltrue


Expand
titleCertificate Issuance List

Excerpt Include
Certificate Issuance List in Certificate Manager
Certificate Issuance List in Certificate Manager
nopaneltrue


Expand
titleCertificate Transparency
Excerpt Include
Certificate Transparency in Certificate Manager
Certificate Transparency in Certificate Manager
nopaneltrue


Expand
titleAlgorithms and key types

Excerpt Include
Algorithms and key types in Certificate Manager
Algorithms and key types in Certificate Manager
nopaneltrue


Expand
titleCertificate enrollment protocols

Excerpt Include
Supported certificate enrollment protocols in Certificate Manager
Supported certificate enrollment protocols in Certificate Manager
nopaneltrue


Expand
titleMonitoring

Excerpt Include
Monitoring in Certificate Manager
Monitoring in Certificate Manager
nopaneltrue


Expand
titleSoftware token formats

Excerpt Include
Supported software token formats in Certificate Manager
Supported software token formats in Certificate Manager
nopaneltrue

Smart cards

Expand
titleSmart cards

Excerpt Include
Supported smartcards in Certificate Manager
Supported smartcards in Certificate Manager
nopaneltrue


Third-party software

Expand
titleX.500 directories

Excerpt Include
Supported X.500 directories in Certificate Manager
Supported X.500 directories in Certificate Manager
nopaneltrue


Expand
titleMobile Device Management solutions

Excerpt Include
Supported mobile device management (MDM) solutions in Certificate Manager
Supported mobile device management (MDM) solutions in Certificate Manager
nopaneltrue


Expand
titleMicrosoft Enroll on behalf of (EOBO)

Excerpt Include
Microsoft Enroll on behalf of (EOBO) in WinEP
Microsoft Enroll on behalf of (EOBO) in WinEP
nopaneltrue

Third-party hardware

Expand
titleFirewalls and routers

Excerpt Include
Supported firewalls and routers in Certificate Manager
Supported firewalls and routers in Certificate Manager
nopaneltrue


Expand
titleHardware Security Modules

Excerpt Include
Supported hardware security modules (HSM) in Certificate Manager
Supported hardware security modules (HSM) in Certificate Manager
nopaneltrue


Expand
titleCard stackers

Excerpt Include
Supported card stackers in Certificate Manager
Supported card stackers in Certificate Manager
nopaneltrue


Expand
titleCard printers

Excerpt Include
Supported card printers in Certificate Manager
Supported card printers in Certificate Manager
nopaneltrue


Expand
titlePIN letter printers

Excerpt Include
Supported PIN letter printers in Certificate Manager
Supported PIN letter printers in Certificate Manager
nopaneltrue


Expand
titleSmart card readers

Excerpt Include
Supported smartcard readers in Certificate Manager
Supported smartcard readers in Certificate Manager
nopaneltrue


Expand
titleLTE Devices

Excerpt Include
Supported LTE and 5G devices in Certificate Manager
Supported LTE and 5G devices in Certificate Manager
nopaneltrue

High availability

Expand
titleHigh Availability solutions

Excerpt Include
High availability setup of Certificate Manager
High availability setup of Certificate Manager
nopaneltrue


This article includes updates for Certificate Manager 8.67.10.

Related information