topic Re: Trusted Host in Operating System - HP-UX

Trusted Host

gany59 — Tue, 07 Jul 2009 13:48:14 GMT

how to find whether the host is trusted host or not.

Re: Trusted Host

James R. Ferguson — Tue, 07 Jul 2009 13:52:05 GMT

Hi:

You have a trusted environment if you have a 'tcb' directory as '/tcb/files/auth/system/default'.

Regards!

...JRF...

Re: Trusted Host

Ganesan R — Tue, 07 Jul 2009 14:00:35 GMT

Hi,

You can go to SAM and findout. Simple way is, to find the /tcb directory existance.

#ll -d /tcb

If this directory exist, it means system is trusted.

Re: Trusted Host

gany59 — Tue, 07 Jul 2009 14:03:09 GMT

ok .. thx for ur reply and i need to know how to convert the host as a trusted host & how to remove the host from a trusted zone .. Thx in advance.

Re: Trusted Host

Steven E. Protter — Tue, 07 Jul 2009 14:04:51 GMT

Shalom,

Note if you don't want it to be trusted, you can use /etc/tsconvert -r to revert back to not trusted mode.

shadowpassword is available for supported versions of HP-UX at http://software.hp.com

Trusted system has been deprecated as of 11.31 11iv3

SEP

Re: Trusted Host

Ganesan R — Tue, 07 Jul 2009 14:54:36 GMT

Hi,

The best and recommanded way to convert the system is using SAM though "tsconvert" command is available.

Goto SAM -> Auditing and Security -> Select any sub menu -> System will prompt this
" Do you want to convert to a Trusted System now?" -> Select Yes to convert the system.

Select sam path -> Actions and uncovert the system.

Re: Trusted Host

gany59 — Tue, 07 Jul 2009 15:13:15 GMT

hi ganesan

could u tell the command mode and steps what i have to performe.

Re: Trusted Host

James R. Ferguson — Tue, 07 Jul 2009 15:16:01 GMT

Hi (again):

You don't offer what release of HP-UX you are running. The Trusted Computing Base is deprecated at 11.31 and 11.31 is currently scheduled to be the last release to support it.

In my opinion, you may be far better served if you convert to a shadow password implementation.

Regards!

...JRF...

Re: Trusted Host

Vishu — Tue, 07 Jul 2009 21:58:54 GMT

Hi,

you can convert a non-trusted host to trusted by issuing

# tsconvert

and from trusted to non-trusted system, issue

# tsconvert -r