Host Intrusion Detection System Release 3.1 Release Notes

Installation

Postinstallation

• When an agent system reboots after an upgrade from HP-UX HIDS Release 2.x to Release

3.1, the HP-UX startup in progress list should display OK for the Starting HP-UX HIDS

agent entry.

• When an agent system reboots after a cold installation, the HP-UX startup in progress list

should display N/A for the Starting HP-UX HIDS agent entry. That is, system boot will

not automatically start idsagent until after the secure communication keys and

certiﬁcates have been installed on the agent system (see “Conﬁguration” on page 44).

• On each agent system, after the system has rebooted, run the IDS_checkInstall script.

$ /opt/ids/bin/IDS_checkInstall

This script checks that the Intrusion Detection Data Source (idds) kernel driver is

conﬁgured and enabled. On all systems, it also checks that all the necessary and

superseding patches have been installed; it does not verify superseding patches.

Updating from Release 2.x

This section contains instructions on the use of conversion utilities for Release 2.x migrations.

The guiSchedConvert Migration Tool

Delivered as: /opt/ids/bin/guiSchedConvert

Usage: guiSchedConvert [Java executable path name]

What it does: The migration tool migrates any System Manager Release 2.x schedule and

group ﬁle to a corresponding Release 3.1 syntax. As noted in Release 3.1 feature

announcements, templates differ signiﬁcantly from Release 2.x. Highlights of the change

include template name change, modiﬁcation in properties offered, and changes in the name of

the new property sets. If you have an existing Release 2.x installation with customer

schedules and groups (apart from what was shipped with the product), use the migration tool

to convert these schedules to be compliant with the Release 3.1 architecture.

The tool checks whether the groups present in the system belong to Release 3.1 or Release 2.x.

If any group belongs to Release 2.x, it is migrated. Any Release 3.1 group is not changed. For

every group that exist in the system (in /var/opt/ids/gui/SurveillanceGroups), the

guiSchedConvert outputs whether the group is being migrated or not.

How to use: