How To Install libpam-pkcs11 on Debian 9

Introduction

In this tutorial we learn how to install libpam-pkcs11 on Debian 9.

What is libpam-pkcs11

libpam-pkcs11 is:

A Pluggable Authentication Module for PKCS#11 based smart cards. Useful for enabling smart card based user login to a system.

More advanced than libpam-p11. Additional features include full verification of the card data using certificate chains and certificate revocation lists. Advanced username mapping including LDAP, Active Directory and Kerberos.

There are three methods to install libpam-pkcs11 on Debian 9. We can use apt-get, apt and aptitude. In the following sections we will describe each method. You can choose one of them.

Install libpam-pkcs11 Using apt-get

Update apt database with apt-get using the following command.

sudo apt-get update

After updating apt database, We can install libpam-pkcs11 using apt-get by running the following command:

sudo apt-get -y install libpam-pkcs11

Install libpam-pkcs11 Using apt

Update apt database with apt using the following command.

sudo apt update

After updating apt database, We can install libpam-pkcs11 using apt by running the following command:

sudo apt -y install libpam-pkcs11

Install libpam-pkcs11 Using aptitude

If you want to follow this method, you might need to install aptitude first since aptitude is usually not installed by default on Debian. Update apt database with aptitude using the following command.

sudo aptitude update

After updating apt database, We can install libpam-pkcs11 using aptitude by running the following command:

sudo aptitude -y install libpam-pkcs11

How To Uninstall libpam-pkcs11 on Debian 9

To uninstall only the libpam-pkcs11 package we can use the following command:

sudo apt-get remove libpam-pkcs11

Uninstall libpam-pkcs11 And Its Dependencies

To uninstall libpam-pkcs11 and its dependencies that are no longer needed by Debian 9, we can use the command below:

sudo apt-get -y autoremove libpam-pkcs11

Remove libpam-pkcs11 Configurations and Data

To remove libpam-pkcs11 configuration and data from Debian 9 we can use the following command:

sudo apt-get -y purge libpam-pkcs11

Remove libpam-pkcs11 configuration, data, and all of its dependencies

We can use the following command to remove libpam-pkcs11 configurations, data and all of its dependencies, we can use the following command:

sudo apt-get -y autoremove --purge libpam-pkcs11

Dependencies

libpam-pkcs11 have the following dependencies:

• libc6
• libcurl3
• libldap-2.4-2
• libpam0g
• libpcsclite1
• libssl1.1

References

• libpam-pkcs11 website

Summary

In this tutorial we learn how to install libpam-pkcs11 package on Debian 9 using different package management tools: apt, apt-get and aptitude.