AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.


#Power
#Power
#Operatingsystems
#Servers
 View Only

  • 1.  Trying to configure PowerSC Trusted Boot

    Posted 01/05/15 03:25 PM

    Originally posted by: ppereira


    Hi!; I'm tryining to install PowerSC and started a small lab over which I am trying to start with Trusted Boot.  I've installed the collector and verifyer on two AIX 7.1.  On the collector side I had no problems to install but on the verifyer side I'm not able to make available the vtpm device.  Already checked the lpar properties and the VTP Module checkbox is checked and the lpar had been shut down and started again.  Lpar is running AIX 7100-03-02-1412 and PowerSC is 1.1 Std.

    Also when I run ptsc command to enroll the collector I get the following output:

    > ptsc -ti -v
    Config file: /etc/ptsc.conf
    Initializing Reference Manifest

    And trying to test it I get the following:

    >  ptsc -t -v
    Config file: /etc/ptsc.conf
    Failed to read the Reference Manifest UUID file '/var/ptsc/rm_uuid':
    Please ensure on the target that:
      * ptsc has been initialized (ptsc -i)
      * you (uid==0) are allowed to attest (i.e. a member of group 'ptsc')
     

    I'll go on searching but any advice will be helpful.

     

    Regards and thank in advance.

    Pablo.


    #AIX-Forum


  • 2.  Re: Trying to configure PowerSC Trusted Boot

    Posted 01/13/15 12:12 PM

    Originally posted by: GarlandJoseph


    Are there any error messags in the errror log. What about error messages on boot (alog -t boot -o).  Are there any errors in /var/adm/ras/trousers/tcsd.err?

     


    #AIX-Forum


  • 3.  Re: Trying to configure PowerSC Trusted Boot

    Posted 01/13/15 02:03 PM

    Originally posted by: ppereira


    Thanks for the reply!.

    The file /var/adm/ras/trousers/tcsd.err had a message stating that the file /etc/security/tss/tcsd.conf should be owned by daemon/staff and it was owned by root/security.

    Changed the ownership, rebooted the sistem and it worked fine.

     

    Thanks again and regards.

    Pablo.


    #AIX-Forum


  • 4.  Re: Trying to configure PowerSC Trusted Boot

    Posted 01/13/15 05:15 PM

    Originally posted by: GarlandJoseph


    I think there is a patch for that...all it does really is change the ownership file it tracks in the trusted computing base.  If you were running in production or a DOD environment it would be a larger issue depending on future updates to the machine.  You my see it again you may not.  It should or will be fixed in next SP if not already.


    #AIX-Forum


Related Content