HP-UX System Administrator's Guide: Overview HP-UX 11i v3 (B3921-90011, September 2010)

Trusted Mode Offers a complete C2-level set of security features. Passwords are not stored
in the /etc/passwd file, but are instead stored in /tcb/files for
additional security.
Protecting Against Data Loss
The best way to protect your data against loss is to have another copy of the data somewhere
when the primary copy is lost. There are many technologies that will help you make those extra
copies. These include:
Backups There are many ways in HP-UX to backup your data:
• You can backup your data to tapes, optical media, or
network-based storage. Some applications and utilities
that will allow you to do this include:
— HP Storage Essentials Software: automates high
performance backup and recovery, over unlimited
distances, to ensure 24x7 business continuity and
maximize IT resource utilization. For complete
details on the HP Storage Essentials Software, see
http://www.hp.com/go/storageessentials.
— The pax command extracts, writes, and lists
archive files and copies files and directory
hierarchies. A more contemporary utility, pax
performs basically the same functions as the older
(still available) utilities cpio and tar. For details
about pax, see pax(1).
— tar (called the “tape archiver”) is equally adept
at writing to disk archive files or optical media
as it is at writing to magnetic tape media. For
details about tar, see tar(1).
— cpio (copy in/out)
— vxdump copies to magnetic tape all files in a VxFS
file system that have been changed after a certain
date. See vxdump(1M)
• You can copy important files to another system using
ftp, rcp, or (for secure copies) sftp.
• To protect the copies from being destroyed if physical
damage or theft occurs at the site of the primary data,
be sure to keep at least one copy of critical data at an
alternate location. Don’t forget to physically protect
tapes that contain unencrypted data. HP Openview
Security Data Protector can encrypt backups.
• To protect your operating system files and settings,
use Dynamic Root Disk to clone an HP-UX system
image to a disk other than that from which the system
normally boots. This allows you to quickly boot from
an alternate root disk in the event your primary boot
disk fails.
Disk Mirroring Disk mirroring writes multiple copies of data to separate
(physical or logical) devices simultaneously.
If you are using LVM (HP’s Logical Volume Manager),
you will need to install the optional product,
MirrorDisk/UX to use disk mirroring. MirrorDisk/UX
supports up to three copies of data if you are using LVM
Data Protection Tools 105