Installation
This guide explains how to install Morphon T-o-M on a Microsoft Windows server. Morphon T-o-M is supported under Windows 2000 and newer, but will work on any system with a Sun Java VM. Morphon T-o-M requires Sun's Java Runtime (version 1.5 or newer) installed.
All commands listed below should be run with administrative rights. If you'd like to use a different installation path, feel free to do so.
Demo mode - Option A: Regular program
To install Morphon T-o-M as a regular program that you start and stop by hand, following these steps:
- Install a Java Runtime Environment (JRE), if not available yet.
- Extract morphon-tom-1.3-bundle.zip to C:\Program Files\
- Start Morphon T-o-M: Execute C:\Program Files\Morphon T-o-M 1.3 Stand-Alone\run.cmd
- Verify the installation: browse to http://localhost:8080/morphon-tom/
To stop Morphon T-o-M, press ctrl-c in the program's window.
Demo mode - Option B: Windows Service
Morphon T-o-M can also be installed as a Windows Service, such that it starts automatically when Windows starts. Follow these steps:
- Install a Java Runtime Environment (JRE), if not available yet.
- Extract morphon-tom-1.3-bundle.zip to C:\Program Files\
- Execute C:\Program Files\Morphon T-o-M 1.3 Stand-Alone\install-service.cmd
- Verify installation: browse to http://localhost:8080/morphon-tom/
To uninstall the Windows service, execute C:\Program Files\Morphon T-o-M 1.3 Stand-Alone\remove-service.cmd
Stopping and starting the service works like any other Windows service; use Microsoft Management Console's Services snap-in, or run one of the following commands:
Licensed mode
If you have purchased a Morphon T-o-M license you must configure the license key. Follow these steps:
- Follow the steps for Demo mode (either Regular or Windows Service)
- Execute the file C:\Program Files\Morphon T-o-M 1.3 Stand-Alone\edit-configuration.cmd. Notepad will open the Morphon T-o-M configuration file.
- Insert the following line, replacing your_license_key with the license key you received.
license = your_license_key
- Save the file and close Notepad
- Restart Morphon T-o-M
Cryptographic Keys
Morphon T-o-M uses cryptographic keys to offload all aspects of encrypting and signing. You may choose to use a 'soft' software based keystore, or your certificate vendor may have supplied you with a hardware key such as a USB token or PCI device. The following sections have configuration examples for the most common cases.
Cryptographic Key - JKS Keystore
- Follow the steps for Demo mode or Licensed mode.
- Copy your JKS file to C:\keystore.jks.
- Execute the file C:\Program Files\Morphon T-o-M 1.3 Stand-Alone\edit-configuration.cmd. Notepad will open the Morphon configuration file.
- Add the following lines, substituting your-alias, your-keystore-password and your-key-password with the proper values for your keystore:
jkskey.type = jks
jkskey.path = C:/keystore.jks
jkskey.alias = your-alias
jkskey.storepw = your-keystore-password
jkskey.keypw = your-key-password
- Replace the line
with
- Save the file and close Notepad
- Restart Morphon T-o-M
You can now use the key called "jkskey" in your templates.
Cryptographic Key - Hardware token (generic PKCS#11)
- Follow the steps for Demo mode or Licensed mode.
- Follow the instructions that came with your hardware token to install it. For specific tokens, see below.
- Execute the file C:\Program Files\Morphon T-o-M 1.3 Stand-Alone\edit-configuration.cmd. Notepad will open the Morphon configuration file.
- Add the following lines, substituting pkcs11_library.dll, your-alias, your-keystore-password and your-key-password with the proper values for your hardware token:
pkcs11key.type = pkcs11
pkcs11key.name = pkcs11_token
pkcs11key.library=C:/WINDOWS/system32/pkcs11_library.dll
pkcs11key.slot=10
pkcs11key.alias = your_alias
pkcs11key.storepw = your-store-pw
pkcs11key.keypw = your-key-password
- Replace the line
with
- Save the file and close Notepad
- Restart Morphon T-o-M
You can now use the key called "pkcs11key" in your templates.
Cryptographic Key - Hardware token (SafeNet iKey 2032)
- Download and install the SafeNet Borderless Security PK Client.
- Download and install the latest drivers for the iKey.
- Follow the steps for Demo mode or Licensed mode.
- Execute the file C:\Program Files\Morphon T-o-M 1.3 Stand-Alone\edit-configuration.cmd. Notepad will open the Morphon configuration file.
- Add the following lines, substituting your-alias, your-keystore-password and your-key-password with the proper values for your iKey token:
pkcs11key.type = pkcs11
pkcs11key.name = pkcs11_token
pkcs11key.library=C:/WINDOWS/system32/dkck201.dll
pkcs11key.slot=10
pkcs11key.alias = your_alias
pkcs11key.storepw = your-store-pw
pkcs11key.keypw = your-key-password
pkcs11key.disabledMechanisms = { CKM_MD5_RSA_PKCS CKM_SHA1_RSA_PKCS }
- Replace the line
with
- Save the file and close Notepad
- Restart Morphon T-o-M