How to convert system into trusted host

[sandeepbodkhe_1]

Hi,

As per IT security guidelines we are planning to
convert hp-ux systems into trusted hosts. for tighter password security.

can anybody help out

i need steps to be carried out for this conversion.

Sandeep.

[likid0]

Here you have some help:

http://www.hpuxtips.es/?q=node/126

[Pete Randall]

The most reliable method is to use SAM. SAM eliminates some of the pitfalls, like having all the passwords ending up expired after conversion.

Having said that, I should also mention that HP is moving away from trusted systems as of 11iV3. I would think twice before committing to a methodology which is "going away".


Pete

[James R. Ferguson]

Hi:

You can use the 'pvconv' command to convert to a shadow pasword file --- the basis for HP-UX security in a current and future releases.

http://docs.hp.com/en/B3921-60631/pwconv.1M.html

As Pete noted, trusted systems are deprecated beginning with 11.31. In fact, they will not be supported in releases subsequent to that.

Regards!

...JRF...

[Franky_1]

Hi Sandeep,

you can use /usr/lbin/tsconvert to convert into trusted system (tsconvert -r to remove). Check with pwconv command to see if it's in trusted mode or not

Best regards

Franky

[Avinash20]

Hi Sandeep !!
"Sytem needs to be Trusted as per IT security Guidelines"

## Are they looking for only password security (password field should not be visible in /etc/password) which is answered above or do they need any other features to be enabled

You could refer to

http://docs.hp.com/en/B2355-90950/ch08s08.html

This will help you in converting the system to Trusted !!