ODRE PQC 0.3.1 / RC2

RC2 installation and Native commands

Verify the customer archive and the independently approved verifier kit first. Install into a new protected immutable directory, then follow the RC2 Native installation guide.

Windows: run .\install-odre-pqc.ps1 -InstallDirectory <NEW_ABSOLUTE_DIRECTORY> from the verified delivery in the approved provisioning context.

Linux: run ./install-odre-pqc.sh in the approved provisioning context, with trusted Python 3.12, OpenSSL 3.5.8 and approved prerequisite inputs. The destination must be new.

ODRE_TRUSTED_PYTHON
ODRE_TRUSTED_PYTHON_SHA256
ODRE_INSTALL_PREREQUISITES
ODRE_INSTALL_PREREQUISITES_SHA256
ODRE_INSTALL_DIRECTORY

Installation, activation and runtime checks

Windows: WINDOWS_SERVER_2022\runtime\python.exe + WINDOWS_SERVER_2022\odre-core-cli.py / odre-native.py
Linux: LINUX_FAMILY/runtime/bin/python3.12 + LINUX_FAMILY/odre-core-cli.py / odre-native-ubuntu.py

# Windows — installed WINDOWS_SERVER_2022 directory
& .\runtime\python.exe -B .\odre-core-cli.py doctor --state-directory <STATE_DIRECTORY>
# Linux — installed LINUX_FAMILY directory
./runtime/bin/python3.12 -B ./odre-core-cli.py doctor --state-directory <STATE_DIRECTORY>

init — init creates a Native device identity. Use it only for a new installation.

doctor — doctor checks the signed runtime without activation.

verify — verify checks Core after existing Lease admission. Verify the actual Gateway → Core → Protected Handler path separately.

status — status reads the Native state. Trial and Paid activation use the installed Native launcher and its approved local trust configuration.

--state-directory · --trust-config · --trust-pin

Trial and Paid use the same ODRE PQC 0.3.1 / RC2 ZIP. Downloading starts neither a Trial nor a payment.

Preserve existing identity, License, Unit, Lease and device state. Do not reinitialize an existing installation or copy private material to another device.

Signed local updates

The configured customer updater checks approved local input every 15 seconds. It validates signatures, integrity and compatibility before passing accepted input to the local AUM. This release does not download new releases from a central update server.

AMD64

Windows Server 2022 · Ubuntu 22.04 · Ubuntu 24.04 · Debian 12 · Rocky Linux 9 · AlmaLinux 9
CPython 3.12 · OpenSSL 3.5.8

RC2 release verification · Use the RC2 Native guide for device registration and approved Unit transfer. Preserve the existing state throughout.