Sign the Napatech Driver With the Private Key

Software Installation for Linux

Platform
Intel® PAC
Napatech SmartNIC
Content Type
Software Installation Guide

About this task

Signing the Napatech driver with a private key is done with a Perl script from the kernel development package. Note that the script requires that both the files that contain the private and the public key, as well as the Napatech driver to sign:

# perl /usr/src/kernels/$(uname -r)/scripts/sign-file sha256 \
 private_key.priv public_key.der /opt/napatech3/driver/nt3gd.ko

The Napatech driver is in ELF image format and this script computes and appends the signature directly to the ELF image in the nt3gd.ko file. The modinfo utility can be used to display information about the Napatech driver signature, if it is present:

# modinfo /opt/napatech3/driver/nt3gd.ko

The Napatech driver is now ready for loading. Note that the signed Napatech driver is also loadable on systems where UEFI Secure Boot is disabled or on a non-UEFI system. That means you do not need to provide both a signed and unsigned version of the compiled Napatech driver.

Style Conventions

Bold typeface is used for names of, for instance, user interface elements and software components.

Italic typeface is used for replaceable text.

Monospaced typeface is used for code, commands and file names.

Abbreviations

BP

ByPass

DN

Document Number

GCC

GNU Compiler Collection

GNU

GNU’s Not Unix

MOK

Machine Owner Key

NEBS

Network Equipment-Building System

nt, NT

NapaTech

PTP

Precision Time Protocol

Rev.

REVision

RPM

RPM Package Manager

SCC

Self-Contained Cooling

SRPM

Source RPM

STD

STanDard

SW

SoftWare

UEFI

Unified Extensible Firmware Interface

References