==================================================
Oberthur Technologies AWP
Date of creation: 01/07/2014
==================================================
This is a non exhaustive list of system requirements to install and use the Oberthur Technologies AWP for Linux.

[1] OS
[2] Required Librairies
[3] Supported smartcards
[4] Supported smartcard readers
[5] Installation
[6] Note
[7] Troubleshooting



OS
===
Linux RedHat entreprise 5
Linux Fedora Core 7
Linux Ubuntu >= 8.04 



Required librairies 
====================
pcsc-lite >= 1.3.1-7 


Supported smartcards
====================
Cosmo V7 with IDOneClassic, IAS, PIV, AuthentICV3
Cosmo 5.4 with IDOneClassic, IDOneLite, AuthentIC V2.2


Supported smartcard readers
===========================
Any PCSC reader with Linux drivers availables shall work but the following readers have been tested:

Omnikey Cardman 3121. 
Omnikey Cardman 3821.
Driver: ifdokccid_lnx-3.5.1.tar.gz (you can download the drivers in the official Omnikey web site
http://omnikey.aaitg.comf/index.php?id=69)




Installation
============
Doubleclick on the installation package (OcsCryptolib-X.Y.Z-K.i386.EEE)
The following files are copied on the system:

	/usr/local/AWP/libOcsCryptoki.so.X.Y.Z
	/usr/local/AWP/libIDOneClassicMod.so.X.Y.Z
	/usr/local/AWP/libOcsReaderOmnikey.so.X.Y.Z
	/usr/local/AWP/libOcsReaderStd.so.X.Y.Z
	/usr/local/AWP/libOcsAuthentIC22Mod.s0.X.Y.Z
	/usr/local/AWP/libOcsAuthentICV3Mod.so.X.Y.Z
	/usr/local/AWP/libOcsCryptoki.so a symbolic link of /usr/lib/libOcsCryptoki.so.X.Y.Z
	/usr/local/AWP/libOcsAuthentIC22Mod.so a symbolic link of /usr/lib/libOcsAuthentIC22Mod.so.X.Y.Z
	/usr/local/AWP/libOcsAuthentICV3Mod.so a symbolic link of /usr/lib/libOcsAuthentICV3Mod.so.X.Y.Z
	/usr/local/AWPlibOcsIAS.so.X.Y.Z
	/usr/local/AWP/libOcsIAS.so a symbolic link of /usr/lib/libOcsIAS.so.X.Y.Z
	/usr/local/AWP/libOcsPIV.so.X.Y.Z
	/usr/local/AWP/libOcsPinPolicy.so a symbolic link of /usr/lib/libOcsPinPolicy.so.X.Y.Z
	/usr/local/AWP/libIDOneClassicMod.so a symbolic link of /usr/lib/libIDOneClassicMod.so.X.Y.Z
	/usr/local/AWP/libOcsReaderOmnikey.so a symbolic lik of /usr/lib/libOcsReaderOmnikey.so.X.Y.Z
	/usr/local/AWP/libOcsReaderStd.so a symbolic link of /usr/lib/libOcsReaderStd.so.X.Y.Z
	/usr/local/AWP/OCSMiddlewareConf.xml
	/usr/local/AWP/OCSPinPolicy.xml	
	/usr/local/AWP/Omnikey.png

Once installation has finished, the P11 cryptoki module is ready to be loaded and used in the preferred application (Firefox, Thunderbird etc.).

Note
====
In order for the module to correctly work it's mandatory to disable the SELinux.

To globally disable the SELinux:
System --> Administration --> SELinux --> System Default Enforcing Mode --> Disabled
System --> Administration --> SELinux --> Current Enforcing Mode --> Permissive

To disable the SELinux only on the Oberthur Technologies Webpack modules, open a console, browse to the folder which contains the libOcsCryptoki.so library and type the command:
	chcon -Rt textrel_shlib_t libOcs*


Troubleshooting
===============
If you encounter any error be sure to have:
	- Kernel with USB support
	- Mounted /usbfs (/usbdevfs) for more informations check http://www.linux-usb.org/
	- The reader drivers installed
	- PCSC layer correctly working.
			To check the PCSC layer you can use the pcsc_tools software (>= 1.4.14) that you can download at 
			http://ludovic.rousseau.free.fr/softwares/pcsc-tools execute the pcsc_scan command. The software scans every 
			PC/SC reader connected, printing some PC/SC	and card informations.

	If you experience errors on loading the libOcsCryptoki.so you can check for librairies
	dependencies: open the console, go to the libOcsCryptoki folder and type the command
		ld libOcsCryptoki.so
	If librairies are missing, contact your IT service to install the correct librairies.
