SSH

Preparing for Installation

System Requirements
Hardware and Disk Space Requirements
Licensing
Installation Packages
Upgrading Previously Installed Tectia Client Software
Downloading Tectia Releases

This section lists the supported platforms and the prerequisites for the Tectia Client installation.

System Requirements

Check the following table for the operating systems supported as Tectia Client platforms:

Table 2.1. Supported operating systems for Tectia Client and Server

Operating SystemClientServer
IBM AIX (POWER) 7.2, 7.3 7.2, 7.3
Oracle Solaris (SPARC) 11 11
Oracle Solaris (x86-64) 11 11
Red Hat Enterprise Linux (x86-64) 8, 9, 10 8, 9, 10
Rocky Linux (x86-64) 8, 9, 10 8, 9, 10
Ubuntu (x86-64) 22.04 22.04
Debian GNU/Linux (x86-64) 12, 13 12, 13
SUSE LINUX Enterprise Desktop (x86-64) 15 15
SUSE LINUX Enterprise Server (x86-64) 12, 15 12, 15
Microsoft Windows (x86-64) 10, 11, Server 2016, Server 2019, Server 2022, Server 2025 10, 11, Server 2016, Server 2019, Server 2022, Server 2025

[Note]Note

Keep the operating system fully patched according to recommendations by the operating system vendor.

Hardware and Disk Space Requirements

Tectia Client does not have any special hardware requirements. Any computer capable of running a current version of the listed operating systems, and equipped with a functional network connection can be used.

The Tectia Client installation requires about 100 megabytes of disk space.

Note that Tectia Client will save each user's settings in that particular user's personal directory.

Licensing

Tectia Client requires a license to function. The license file is named stc70.dat.

Depending on the platform for which you have purchased Tectia Client, consider the following license-related issues:

  • In the commercial installation packages, the license file(s) are included in the compressed (.zip/.tar) files together with the release notes (.txt) files and the PDF-format documentation.

  • The Tectia evaluation packages do not contain license files; the evaluation versions can be used for 45 days without a license file. On Unix and Windows machines, a banner message will remind users of how many days are left until the license expires.

  • When upgrading the evaluation version or standard commercial version to Tectia Quantum Safe Edition only license file(s) need to be copied to the license directory and Tectia Client software restarted.

Installation Packages

The installation packages of Tectia Client are compressed into installation bundles. There are three bundles for each supported operating system, the Tectia Quantum Safe Edition commercial version (-comm-pqc), the commercial version (-comm) and the upgrade and evaluation version (-upgrd-eval). The evaluation versions can be used as upgrade packages, if you already have a suitable license.

Select the relevant Tectia Client bundle:

  • For AIX platforms:

    tectia-client-<version>-aix-6-7-powerpc-comm-pqc.tar
    tectia-client-<version>-aix-6-7-powerpc-comm.tar
    tectia-client-<version>-aix-6-7-powerpc-upgrd-eval.tar
    
  • For Linux 64-bit platforms (Red Hat Enterprise Linux, Rocky Linux and SUSE Linux):

    tectia-client-<version>-linux-x86_64-comm-pqc.tar
    tectia-client-<version>-linux-x86_64-comm.tar
    tectia-client-<version>-linux-x86_64-upgrd-eval.tar
  • For Linux 64-bit platforms (Ubuntu and Debian GNU/Linux):

    tectia-client-<version>-linux-ubuntu-x86_64-comm-pqc.tar
    tectia-client-<version>-linux-ubuntu-x86_64-comm.tar
    tectia-client-<version>-linux-ubuntu-x86_64-upgrd-eval.tar
  • For Solaris SPARC platform:

    tectia-client-<version>-solaris-11-sparc-comm-pqc.tar
    tectia-client-<version>-solaris-11-sparc-comm.tar
    tectia-client-<version>-solaris-11-sparc-upgrd-eval.tar
  • For Solaris x86-64 platform:

    tectia-client-<version>-solaris-11-x86_64-comm-pqc.tar
    tectia-client-<version>-solaris-11-x86_64-comm.tar
    tectia-client-<version>-solaris-11-x86_64-upgrd-eval.tar
  • For Windows platforms:

    tectia-client-<version>-windows-comm-pqc.zip
    tectia-client-<version>-windows-comm.zip
    tectia-client-<version>-windows-upgrd-eval.zip

<version> indicates the product release and the current build number (for example 7.0.0.123).

Inside the installation bundles are the actual installation packages for Tectia Client. Select the packages to install according to which product features are relevant in your environment.

On Unix and Linux platforms, the Tectia Client comes in three installation packages:

  • the ssh-tectia-common package contains the common components of Tectia Client and Server.

  • the ssh-tectia-client package contains the specific components of Tectia Client.

  • the optional ssh-tectia-guisupport package contains the components required for the GUI available on Linux platforms.

On Windows, Tectia Client comes in a single MSI installation package, and the installation wizard guides you to select which components to install.

Upgrading Previously Installed Tectia Client Software

[Note]Note

Before starting the upgrade, make backups of all configuration files where you have made modifications. See instructions in Backup of Configuration Files.

If you are running both Tectia Client and Tectia Server on the same machine, install the same release of each Tectia product, because there are dependencies between the common components.

Check if you have some Secure Shell software, for example earlier versions of Tectia products or OpenSSH server or client, running on the machine where you are planning to install the new Tectia versions.

Before installing Tectia Server on Unix platforms, stop any OpenSSH servers running on port 22, or change their listener port. You do not need to uninstall the OpenSSH software.

When upgrading on SUSE, also install the prerequisite packages:

# zypper install insserv-compat

The following table shows you which Tectia versions you need to uninstall before you can upgrade to Tectia Client 7.0. When upgrading versions marked upgrade on top, the earlier version is automatically removed during the upgrade procedure.

Table 2.2. Upgrade lines

Tectia versionAIXLinuxSolarisWindows
4.xremoveremoveremoveremove
5.x-6.0upgrade on topupgrade on topremoveremove
6.1-7.0upgrade on topupgrade on topremoveupgrade on top or remove if Transparent TCP Tunneling is installed

The configuration file format and file locations have been changed in Tectia Client 5.0 and the Unix DTD directories in version 6.2. Because of this, the configuration files behave differently when upgrading from 4.x and from 5.x-6.1 compared to when upgrading from 6.2 and later versions.

  • The 6.2-6.x configuration files are used by 7.0 as such and automatically taken into use.

    [Note]Note

    Any explicitly configured settings, for example Ciphers, MACs and KEXs will be retained when upgrading. These might include insecure algorithms such as SHA-1 in KEX, or in host key or public-key signature algorithms. Also, for example the Post Quantum Cryptography (PQC) Hybrid Key Exchange algorithms, that require the Tectia Quantum Safe Edition license, need to be prepended to any explicit KEX configuration(s) when upgrading from Tectia version 6.5 and below. Alternatively, the explicit configuration settings, for example all KEX algorithms, can be removed from the configuration to use the 7.0 defaults or the PQC hybrid KEX can be enforced.

  • The 5.x-6.1 configuration files are used by 7.0 as such and on Windows platforms automatically taken into use.

    [Note]Note

    Any explicitly configured settings, for example Ciphers and MACs will be retained when upgrading. These might include insecure algorithms. In Tectia 6.1 and earlier on Unix the default auxiliary data directory auxdata was located in /etc/ssh2/ssh-tectia/. If your Tectia Server configuration file (ssh-server-config.xml) or Tectia Client configuration file (ssh-broker-config.xml) was created for Tectia version 6.1 or earlier, please update its DOCTYPE declaration to contain the current path to the server configuration file DTD directory: /opt/tectia/share/auxdata/ssh-server-ng/ or the Connection Broker configuration file DTD directory: /opt/tectia/share/auxdata/ssh-broker-ng/.

  • The 4.x configuration files are not migrated to 7.0, but the default 7.0 configuration is used. However, the connection profiles are migrated from 4.x to 7.0 on Windows platforms.

When necessary, you can modify the configuration files by using the Tectia Connections Configuration GUI or by editing the XML configuration files manually with an ASCII text editor or an XML editor. Please see example files ssh-server-config-example.xml for Tectia Server and ssh-broker-config-example.xml for Tectia Client.

If you have the Transparent TCP Tunneling option installed, uninstall the previous version of the client before upgrading to the 7.0 Tectia Client and restart the computer after the uninstallation. See Removing from Windows .

[Note]Note

As of version 6.4.18 on Unix, the Transparent TCP Tunneling option is no longer included in the installation package.

On Windows, a backup copy is automatically made of the earlier Tectia Client configuration files and stored in the user-specific directory:

"%APPDATA%\SSH\backup-<version>-<date>"

where <version> is the Tectia release and <date> is the date of the upgrade.

Downloading Tectia Releases

All releases require a commercial license that is delivered with the installation package.

To download Tectia software from the SSH Customer Download Center:

  1. Log in to the Customer Download Center at: https://my.ssh.com

  2. Select Tectia Client from the SSH Downloads, and choose the relevant version. Tectia products are published in major, minor, and maintenance releases:

    • Major releases are indicated with full numbers, for example 7. Major releases publish new products and new major features to existing products, in addition to fixes to the previous versions.

    • Minor releases are indicated with the second digit in the release numbers, for example 7.0. Minor releases publish new features and fixes to the previous versions.

    • Maintenance releases are third digit versions, for example 7.0.0. Maintenance releases provide fixes to the previous versions, not new functionality. The maintenance releases are available for customers with Maintenance and Support Agreement.

  3. Click the link with the correct product version and platform, and the compressed installation package will be downloaded to the default download folder on your machine.

  4. Proceed to the installation. See the platform-specific installation instructions for Tectia Client below.