- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- converting to trusted machine
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-15-2009 01:32 AM
тАО07-15-2009 01:32 AM
converting to trusted machine
i have few hpux servers which includes two node clusters (hpux 11.23,mcsg 11.16) .All are standard systems not trusted machines.i am planning to convert to trusted machines...
1--what are the basic requirements to do that
2-What are the challenges
3-once convert ,is there any issu with oracle database/sap application(is this trusted conversion will do any changes in database/application end?
4-how to rollback ?what are the challenges
Hope all Gurus participation on this thread .
rgds
skr
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-15-2009 02:01 AM
тАО07-15-2009 02:01 AM
Re: converting to trusted machine
1. Basic requirement is ur system should not be running on shadow file system.
If yes change it to normal passwd mode
by pwunconv
2.No challenges except lil passwrd stuff see the below link
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=317809
3.There would not be any kindda issue when u cahnge the passwd mode.
4./usr/lbin/tsconvert -r (* unconvert *)
will unconver.
The only thing as per me should be taken care is we should always have a root session open till the activity finish, else you will have to reboot server in single usermode to have root passwd.
BR,
Kapil+
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-15-2009 02:48 AM
тАО07-15-2009 02:48 AM
Re: converting to trusted machine
converting a macine from stand to trusted requires reboot ?
database/application needs to be shutdown ?
does passwd to be changed before converting to trusted ?
i have bussiness critical production machines are there ,so this many concerns ..
rgds
skr
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-15-2009 05:31 AM
тАО07-15-2009 05:31 AM
Re: converting to trusted machine
Known problems and limitations of trusted computing and possible workarounds:
http://docs.hp.com/en/5992-0553/ar01s03.html?btnNext=next%A0%BB
Also, hp is phasing out trusted computing in favor of security enhancements module in the later versions (I think 11.23 is included) of the hpux. You might want to talk to HP regarding this option.
HTH
UNIX because I majored in cryptology...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-15-2009 05:51 AM
тАО07-15-2009 05:51 AM
Re: converting to trusted machine
>>converting a macine from stand to trusted requires reboot ?
database/application needs to be shutdown ?
does passwd to be changed before converting to trusted ?
<<
Answer for all your question is NO. Converting the system into trusted is not a challanging task.
Ganesh.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-15-2009 05:52 AM
тАО07-15-2009 05:52 AM
Re: converting to trusted machine
I forgot to add one thing. The recommanded way to convert the system is through SAM.
Ganesh.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-15-2009 06:05 AM
тАО07-15-2009 06:05 AM
Re: converting to trusted machine
Why do you want to convert to a Trusted system given that you are running 11.23 and given that 11.31 is scheduled to be the last release to support Trusted configurations?
I would seriously reconsider your objectives and implement the Shadow password mechanism with its attendent enhancements.
Regards!
...JRF...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-15-2009 08:39 PM
тАО07-15-2009 08:39 PM
Re: converting to trusted machine
we are not planning to upgrade 11.23 to 11.31 i another 2-3 years.so we want to go ahead with trusted mode conversion.does anyone has trusted mode conversion documentation on 11.23 ?.what are the advantages on converting a system to trusted ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-16-2009 04:15 AM
тАО07-16-2009 04:15 AM
Re: converting to trusted machine
> we want to go ahead with trusted mode conversion.does anyone has trusted mode conversion documentation on 11.23 ?.
See:
http://docs.hp.com/en/B2355-90950/ch08.html
_BUT_ also see:
http://docs.hp.com/en/5991-8678/index.html
...and remember that Trusted security will not be supported after 11.31 (11iv3).
Regards!
...JRF...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-16-2009 04:34 AM
тАО07-16-2009 04:34 AM
Re: converting to trusted machine
See the below link
how to convert and advantage of trusted mode.
http://docs.hp.com/en/B2355-90950/ch08s08.html
Suraj