Common Data Security Architecture (CDSA) White Paper

Appendix E 119
Trouble Shooting HP CDSA
CDSA Start Up Errors when calling CSSM_ModuleAttach
isl_InitializeSignedListFromImage: manifest hash confirmed!!!
VerifyModuleCommon: Static integrity check of /usr/lib/cdsa/libcsp_wwb.1
requested
VerifyModuleCommon: Library hash check for /usr/lib/cdsa/libcsp_wwb.1 okay!
ISL_SelfCheck: entering ISL_SelfCheck
isl_InitializeSignedListFromImage: manifest hash confirmed!!!
VerifyModuleCommon: In memory integrity check of /usr/lib/cdsa/libcsp_wwb.1
requested
VerifyModuleCommon: Reverting to static check
VerifyModuleCommon: Library hash check for /usr/lib/cdsa/libcsp_wwb.1 okay!
ISL_SelfCheck: successfully exiting ISL_SelfCheck
VerifyModuleCommon: In memory integrity check of /usr/lib/cdsa/libcsp_wwb.1
requested
VerifyModuleCommon: Reverting to static check
VerifyModuleCommon: Library hash check for /usr/lib/cdsa/libcsp_wwb.1 okay!
cssm_AddinLoadAndCheckIntegriy: before locate proc address
cssm_AddinLoadAndCheckIntegriy: before check address within module
cssm_AddinLoadAndCheckIntegriy: Before AddInAuthenticate
isl_InitializeSignedListFromImage: manifest hash confirmed!!!
isl_CreateCertificateChain: cert-chain validated; links = 1
VerifyModuleCommon: In memory integrity check of /usr/lib/libcssm.1 requested
VerifyModuleCommon: Reverting to static check
VerifyModuleCommon: Library hash check for /usr/lib/libcssm.1 okay!
cssm_AddinLoadAndCheckIntegriy: after AddInAuthenticate
If output like the above is not obtained; or if the output prematurely terminates, it is likely
that either the libcssm.1 shared library (located in /usr/lib) or the libcsp_wwb.1 shared library
(located in /usr/lib/cdsa) has been changed without the update of the corresponding credential
files libcssm.dsa or libcsp_wwb.dsa (located in /usr/lib/cdsa/meta-inf). This may indicate that
your computer system security has been compromised or that your system administrator has
not properly installed the CDSA shared libraries. In any case, inform your system
administrator immediately of the situation and ask him/her for help in resolving the
situation. When a trace file is no longer needed, delete the enableIntegrityTrace file from