HIDS error on 11i v3

[maxell_1]

Hi gurus,

I am getting below error when executing the command "ids_genAdminKeys" on the HIDS server.

Error:
random number generation device incorrectly loaded

Help apprciated as no useful resource from Internet to help me on this.

Thanks

[maxell_1]

Hi All, Any interested parties who can help me to resolve the problem? Thanks

[Emil Velez · Accepted solution]

looks like /dev/random may not be installed correctly.

look at lsdev and see if the random driver is included.

[VK2COT]

Hello,

It seems that OS-Core.RNG-DKRN (HP-UX Strong
Random Number Generator) is not installed or
configured properly.

The other possibility is that random devices
in /dev directory are not correct (permissions,
minor number, major number ownership).

Also, check /etc/rc.log for error code
for /etc/init.d/prngd start up.

Cheers,

VK2COT

[maxell_1]

HI Thanks for the explanations. Further look into lsdev shows that the driver is unknown when it should be pseudo as below.

*************************************
# lsdev | grep rng
132 -1 rng unknown
*************************************

Can this be the reason and how to overcome it. Thanks.

[maxell_1]

Anybody?? Help appreciated. Thx

[VK2COT]

Hello,

It strongly points to the wrong setup
or installation.

a) What does this command show:

# lsdev -c 132

b) What are log files saying?
/etc/rc.log, for example.

c) Run:

# kcmodule -v rng

d) Run a small test and debug it:

# openssl genrsa -des3 -out mydom.dom.key 1024

If the module is not loaded,
try to load it.


Cheers,

VK2COT

[VK2COT]

... One more thing:

## ll /dev/*random

Your major number for devices /dev/*random
MUST match character device for rng module in
lsdev(1M).

VK2COT

[maxell_1]

Hi VK2,

Thanks for the response. I have tried all the commands check you suggested. It failed when performing the ssl debug. Attached the output of the test. Please advice. Thx

[maxell_1]

Found the solution ... problem was rng module not loaded.... load the module and solved. Thx for all the help.