2.2. Ubuntu Packages

There are ready made packages for Ubuntu.

Packages of older releases of privacyIDEA up to version 2.23 are available for Ubuntu 14.04 LTS and Ubuntu 16.04 LTS from a public ppa repository 1.

For recent releases of privacyIDEA starting from version 3.0 a repository is available which provides packages for Ubuntu 16.04 LTS and 18.04 LTS 2.


The packages privacyidea-apache2 and privacyidea-nginx assume that you want to run a privacyIDEA system. These packages deactivate all other (default) websites. Instead, you may install the package privacyidea-mysql to install the privacyIDEA application and setup the database without any webserver configuration. After this, you can integrate privacyIDEA with your existing webserver configuration.

Read about the upgrading process in Upgrading a packaged installation.

2.2.1. Installing privacyIDEA 3.0 or higher

Before installing privacyIDEA 3.0 or upgrading to 3.0 you need to add the repository. Add repository

The packages are digitally signed. First you need to download the signing key:

wget https://lancelot.netknights.it/NetKnights-Release.asc

On Ubuntu 16.04 check the fingerprint of the key:

gpg --with-fingerprint NetKnights-Release.asc

On 18.04 you need to run:

gpg --import --import-options show-only --with-fingerprint NetKnights-Release.asc

The fingerprint of the key is:

pub 4096R/AE250082 2017-05-16 NetKnights GmbH <release@netknights.it>
Key fingerprint = 0940 4ABB EDB3 586D EDE4 AD22 00F7 0D62 AE25 0082

Now add the signing key to your system:

apt-key add NetKnights-Release.asc

Now you need to add the repository for your release (either xenial/16.04LTS or bionic/18.04LTS)

You can do this by running the command:

add-apt-repository http://lancelot.netknights.it/community/xenial/stable


add-apt-repository http://lancelot.netknights.it/community/bionic/stable

As an alternative you can add the repo in a dedicated file. Create a new file /etc/apt/sources.list.d/privacyidea-community.list with the following contents:

deb http://lancelot.netknights.it/community/xenial/stable xenial main


deb http://lancelot.netknights.it/community/bionic/stable bionic main


While the link http://lancelot.netknights.it/community/ and its subdirectories are browsable, it is only available via http! Most browsers will automatically redirect you to https, which will result in a 404 error, since the link http**s**://lancelot.netknights.it/community/ does not exist. So if you want to browse the repository, take care to do this via http. This is OK. The apt program fetches all packages via http. If you still fail to fetch packages, you might most probably need to check your firewall and proxy settings. Installation of privacyIDEA 3.x

After having added the repositories, run:

apt update
apt install privacyidea-apache2

If you do not like the Apache2 webserver you could alternatively use the meta package privacyidea-nginx.

Now you may proceed to First Steps.

2.2.2. FreeRADIUS

privacyIDEA has a perl module to “translate” RADIUS requests to the API of the privacyIDEA server. This module plugs into FreeRADIUS. The FreeRADIUS does not have to run on the same machine as privacyIDEA. To install this module run:

apt-get install privacyidea-radius

For further details see RADIUS plugin.





Starting with privacyIDEA 2.15 Ubuntu 16.04 packages are provided. Starting with privacyIDEA 3.0 Ubuntu 16.04 and 18.04 packages are provided, Ubuntu 14.04 packages are dropped.