Is the system running in trusted mode?

[Yap Yen Nee]

Hi,
I am using HP 11i overhere. How can I check if the system is running under trusted mode or not? What are the characteristics for a trusted system under HP 11i?

Thank you.

[Michael Tully · Accepted solution]

There are a couple of easy ways.

1) check the contents of the /etc/passwd to see if the encrypted password field has been replaced by '*' for all accounts. If so, there will be a /tcb subdirectory and contents

2) Run the 'getprpw' command like this
# /usr/lbin/getprpw -l
System is not trusted.

Not sure what you mean by characteristics. Are you after what is available to you?
This document could be of some assistance.

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90121/B2355-90121_top.html&con=/hpux/onlinedocs/B2355-90121/00/00/4-con.html&toc=/hpux/onlinedocs/B2355-90121/00/00/4-toc.html&searchterms=system%7ctrusted&queryid=20040929-001336

and

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90672/B2355-90672_top.html&con=/hpux/onlinedocs/B2355-90672/00/01/123-con.html&toc=/hpux/onlinedocs/B2355-90672/00/01/123-toc.html&searchterms=system%7ctrusted&queryid=20040929-001336

[Franky_1]

Hi Yap,

easy, just type pwconv - it'll show you if the system is in trusted mode or not
On the other side, if there's a dir named /tcb then the system is a trusted one and vice versa

Regards

Franky

[Muthukumar_5]

IF the file
/tcb/files/auth/system/default available then, it is trusted one else it is untrusted.

Simple /tcb/files/auth/* directory should be there. some times after converting into untrusted system by simply deleting

/tcb/files/auth/system/default file so that,

/tcb/files/auth/ directory will be there.

[Muthukumar_5]

We can identify the trusted system / non using iscomsec() call.

iscomsec returns a zero (0) if the system is not a trusted system. If
the system has been converted to a trusted system, iscomsec returns a
one (1).

You can get documents from

http://docs.hp.com

Attachment contains trusted system document. IT is good to read this.

HTH.

[Petr Simik_1]

You can have 3 options

1.Unix - in passwd is crypted passwd
2.shadow - in passwd is x instead of cr.pasword
3.trusted mode - in passwd is * instead of pasword

all options are unconvertable. Trusted mode is most recomended if you need to secure you system.

[Bharat Katkar]

Hi,
In addition to this you can go thr' doc which talks about trusted systems.
Hope that helps.
Regards,

[Muthukumar_5]

hai bharat,

I have attached your same document there in prev. reply :)

Have a nice day.

Regards
Muthu