Software Distributor Administration Guide HP-UX 11i v1, 11i v2, and 11i v3 (5900-2561, March 2013)

If the depot is located on a remote machine, the remote machine must have a version of SD installed
that supports signature verification.
To see the details of signature verification, run the swjob command displayed at the end of the
swverify session.
To verify the signatures in a signed HP-UX DVD media prior to cold installation (Ignite), mount the
DVD locally and run swsign –v –s /mnt/dvd, where mnt/dvd is the location of the mounted
DVD.
To verify the signatures in a signed tape depot:
swsign –v –s /depots/tape.depot
To use a public key different from the one in the directory or tape depot, use the –k
/path/to/public_key.pem option with swsign.
NOTE:
• For a depot originially provided by HP, signature verification for depot metadata as well as
all bundles, products, and filesets must pass.
• If a depot provided by HP is copied using swcopy to another depot, signature verification
for the depot and bundle metadata would fail as the copied depot is not shipped by HP.
• To retain the depot metadata and bundle signatures, a filesystem copy of the depot must be
done instead of swcopy.
• Currently, swverify verifies signatures for all products in the depot irrespective of the
software_selections.
4.5 Additional Depot Management Tasks and Examples
This section illustrates some typical depot management tasks and provides extended examples of
how you can use SD-UX to manage your environment.
4.5.1 Combining Patch Depots
This example shows how to combine into a single depot five downloaded patches (which are tape
depots) from HP. The example also shows how to register the depot, list the depot contents, and
install the patches from the new depot using the patch_match_target option. The example
assumes that you have already downloaded patches PHKL_20349, PHKL_22161, PHSS_21906,
PHSS_21950, and PHCO_22923 from HPSC (http://www.hp.com/go/hpsc):
swcopy -s /tmp/PHKL_20349.depot \* @ /depots/mypatches
swcopy -s /tmp/PHKL_22161.depot \* @ /depots/mypatches
swcopy -s /tmp/PHSS_21906.depot \* @ /depots/mypatches
swcopy -s /tmp/PHSS_21950.depot \* @ /depots/mypatches
swcopy -s /tmp/PHCO_22923.depot \* @ /depots/mypatches
swreg -l depot @ /depots/mypatches
swlist -d -s /depots/mypatches
swinstall -x patch_match_target=true -s /depots/mypatches
4.5.2 Creating a Tape Depot for Distribution
This example shows you how to create a tape depot as a single file that can be distributed via ftp
or the web. This example uses the five patches from the previous example (which are formatted
as tape depots) and uses an existing depot at /depots/mypatches. The swlist command
shows the depot contents (see “Listing the Contents of a Depot (swlist -d) ” (page 100)).
98 Managing Software Depots