An automated banking machine is operative to authorize the installation, use, and/or configuration of ATM software applications and components. The machine may be provided with either an authorization key or a configuration certificate that is generated by a licensing authority. The machine is operative to authenticate the key or certificate prior to granting a user permission to install, run, and/or configure the software. The machine is operative to authenticate a configuration certificate by evaluating a digital signature associated with the configuration certificate. An authorization key may be authenticated by comparing it to a second authorization key generated responsive to inputted license information and one-way hash functions. The key or certificate may be associated with a plurality of configuration rules which specify the configuration software components and parameters for specific ATM software and hardware.