To create and manage External Account Binding credentials for ACMEv2 enrollment with Certificate Enrollment Gateway, you must use the EAB Utility. The EAB Utility is available as a separate download package on Entrust TrustedCare.

The following procedure describes how to download and install the EAB Utility. You must install the EAB Utility on an Entrust Deployment Manager or Cryptographic Security Platform node.

To install the EAB Utility on a Entrust Deployment Manager or Cryptographic Security Platform node

1. Download the EAB Utility from Entrust TrustedCare:
   1. In a Web browser, log in to Entrust TrustedCare (https://trustedcare.entrust.com).
   2. Browse to the Certificate Enrollment Gateway product page.
   3. Download the EAB Utility binary file (eab-util), 
2. Copy the EAB Utility binary to one of the Entrust Deployment Manager or Cryptographic Security Platform nodes (for example, using scp command).
3. Log in to the node as sysadmin.
4. Navigate to the directory where you copied the binary file.
5. Enter the following command to make the binary executable: 
   sudo chmod +x eab-util
6. Enter the following command to move the file into the /usr/bin/ directory: 
   sudo mv eab-util /usr/bin/