HP-UX 11i June 2004 Release Notes

Security
Boot Authenticator for Standard Mode of HP-UX Available on Software Pack
Chapter 13
270
Boot Authenticator for Standard Mode of HP-UX
Available on Software Pack
new for June 2004 Now available on the June 2004 Software Pack is the Boot Authenticator for Standard
Mode of HP-UX.
A site's security policies may require users to authenticate before they can boot the
system into single-user mode. Previously, this feature was only available on a system
that had been converted to Trusted Mode. The Boot Authenticator for Standard Mode of
HP-UX now provides such a secure single-user mode with root password protection, but
without the overhead of converting the system to Trusted Mode.
Features and Benefits
The Boot Authenticator for Standard Mode of HP-UX provides the following features
and benefits:
• Provides secure single-user mode with root password protection.
• Reduces the risk of unauthorized system tampering.
• No overhead of converting the system to Trusted Mode.
• May provide more success with in-house security audits.
• Feature can be turned on or off easily.
Documentation
For further information on the Boot Authenticator for Standard Mode of HP-UX, see the
following:
• security (4) manpage
• Boot Authenticator for Standard Mode of HP-UX Product Note, available on the
Software Pack media and at http://docs.hp.com.
For more information about Software Pack and how you can obtain the Boot
Authenticator for Standard Mode of HP-UX, see “Software Pack (Optional HP-UX 11i v1
Core Enhancements)” on page 58.