Manualshelf

wlicert.conf.4 (2011 03)

ManualsBrandsHP ManualsSoftwareHP-UX Manpages
12
wlicert.conf(4)
Optional WLI Product Required
wlicert.conf(4)
NAME
wlicert.conf - WLI capabilities configuration file
DESCRIPTION
The file
/etc/wli/wlicert.conf
contains WLI capabilities granted to each authorized public key.
For more information about all capabilities , see wli(5). For more information on authorizing and grant-
ing capabilities to public keys, see wlicert (1M).
The capabilities information is organized by section. Each section has the name of the capability and
contains a list of cryptographic fingerprints for public keys that have the capability . A unique fingerprint
is generated for every authorized public key.
/etc/wli/certificates
.Ifacapability section does
not exist, it implies that no public key has been granted that capability .
The format for each section is:
capabilityname
{
fngr1 =*
fngr2 =*
.
.
fngrn =*
}
Values of capabilityname are
admin, wmd, mem, dlkm, and api. Imported public keys are represented
by fingr1, fingr2, ..., fngrn.
/etc/wli/wlicert.conf
file is created when WLI is initialized, just after the product is installed.
The first section,
admin, is created when root authorizes the first WLI administrator key pair with the
recovery agent private key. For more information on WLI initialization and authorizing administrator
keys, see wliadm (1M). The fingerprint of the public key is listed as the first entry in the
admin section.
As
admin capability is granted to additional public keys, they are listed under the admin section. For
example:
admin {
aeb3a3a360669f03d20a91193d2f5f535670f29c = *
b0c6e6a44b11a7b4bd6072f8a81a626153dd2660 = *
}
All other sections are created the first time a public key is granted the respective capability using
wlicert (1M). For example:
wmd {
d0fef0b91e02e5f0932abdcb0774f24f8466dcc6 = *
}
mem {
318173da446d704ae6c21f8a708053cfc946fd84 = *
}
dlkm {
318173da446d704ae6c21f8a708053cfc946fd84 = *
d0fef0b91e02e5f0932abdcb0774f24f8466dcc6 = *
}
api {
318173da446d704ae6c21f8a708053cfc946fd84 = *
}
When a public key has been granted more than one capability , it will be listed in each capability section.
AUTHOR
The wlicert.conf file was developed by HP.
SEE ALSO
wlicert(1M), wli(5).
HP-UX Whitelisting A.01.00 Administrator Guide at:
http://www.hp.com/go/hpux-security-docs.
HP-UX 11iv3: Sep 2010 Web Release − 1 − Hewlett-Packard Company 1

Summary of content (2 pages)