Software Distributor (SD-UX) Administration Guide HP-UX 11i v1, 11i v2, and 11i v3 (762797-001, March 2014)

If no key is present in the depot, then the key at /usr/lib/sw/swsign/
hp_public_key.pem is used.
-n num_threads Specifies the number of parallel threads, in which the signature verification
must be performed. The default value is 1. Higher values can speed up
the signature verification process. You must specify values between 1 and
10.
-x option=value You can specify multiple -x options. Valid options include:
• logfile=/var/adm/sw/swsign.log: Specifies the storage
location for swsign command output.
• keep_temp_dir=false: Retains the temporary directory created
by swsign command for debugging, when set to true.
-h Displays swsign usage.
Changing Command Options
You can change the behavior of this command by specifying additional command-line options
while invoking the command (using the -x option) or by reading predefined values from a file. The
following table shows the defaults and options that apply to swsign command.
Table 25 swsign Command Options and Default Values
• logfile=/var/adm/sw/swsign.log
• keep_temp_dir=false
For more information, see Appendix “Command Options” (page 227).
swsign Examples
To verify the signatures in a signed HP-UX DVD media prior to cold installation (Ignite), mount the
DVD locally and run swsign –v –s /mnt/dvd, where /mnt/dvd is the location of the mounted
DVD.
To verify the signatures in a signed tape depot:
swsign –v –s /depots/tape.depot
To use a public key different from the one in the directory or tape depot:
swsign -v -s /path/to/depot –k /path/to/public_key.pem
Additional Depot Management Tasks and Examples
This section illustrates some typical depot management tasks and provides extended examples of
how you can use SD-UX to manage your environment.
Combining Patch Depots
This example shows how to combine into a single depot five downloaded patches (which are tape
depots) from HP. The example also shows how to register the depot, list the depot contents, and
install the patches from the new depot using the patch_match_target option. The example
assumes that you have already downloaded patches PHKL_20349, PHKL_22161, PHSS_21906,
PHSS_21950, and PHCO_22923 from HPSC :
swcopy -s /tmp/PHKL_20349.depot \* @ /depots/mypatches
swcopy -s /tmp/PHKL_22161.depot \* @ /depots/mypatches
swcopy -s /tmp/PHSS_21906.depot \* @ /depots/mypatches
swcopy -s /tmp/PHSS_21950.depot \* @ /depots/mypatches
swcopy -s /tmp/PHCO_22923.depot \* @ /depots/mypatches
Additional Depot Management Tasks and Examples 97