Hp Systems Insight Manager User Manual Page 170

  • Download
  • Add to my manuals
  • Print
  • Page
    / 256
  • Table of contents
  • TROUBLESHOOTING
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 169
HP has a well defined process when a security defect is found that culminates with the publication
of a security bulletin. The security bulletin provides you with a high level description of the problem
and explains how to mitigate the security defect.
Procedure 46 Subscribing to security bulletins
1. Go to HP Support page.
2. Under Other support resources, click Sign up for driver, support, & security alerts. The Get
connected with updates from HP page appears.
3. Do one of the following:
Sign in if you are a registered customer.
Enter your email address to sign-up now.
Validating RPM signatures
The RPMs for HP SIM for Linux are digitally signed with HP's official private key. You can use the
rpm-hpPublicKey.pub provided with the HP SIM's Linux distribution or go to the official HP
website to download HP's public code signing key.
Checking which public keys are installed
Check which public keys are installed on your system with the following command:
# rpm -q grep-pubkey
Where grep-pubkey finds all the public keys installed on the system.
Alternatively, you can use the rpm -qi command to show more details about the certificates.
The following procedure installs HP's code signing public key.
# rpm --import rpm-hpPublicKey.pub
Validate the signature on an RPM
Use the rpm -checksig" command to validate and verify the digital signature of an RPM. The
output from the command indicates whether or not the RPM is correctly signed, as shown in the
example below:
# rpm --checksig <hpsimrpm>
How to check RPM signatures within the sysmgmt.bin
To check RPM signatures in the sysmgmt.bin before installing HP SIM, complete the following
procedure:
chmod u+x sysmgmt.bin
./sysmgmt.bin --keep --confirm
(and type y to extract the archive and n to execute
./mxbundle.server.postinstall)
This creates a temporary directory. For example, makeself-32350-20091024210345, is where
the HP SIM RPMs will be located. You can use the rpm --checksig command to verify the HP
signature of the RPMs. After verifying the RPM, enter ./sysmgmt.bin to install HP SIM.
If you install HP SIM sysmgmt.bin without installing the HP public key, you will receive the
following warning:
Installing hpsim* ...
warning: hpsim-C.06.00.00.00.%20091027-1.i386.rpm: V3 DSA signature: NOKEY, key ID 2689b887
170 Important Notes
Page view 169
1 2 ... 165 166 167 168 169 170 171 172 173 174 175 ... 255 256

Comments to this Manuals

No comments