IBM Support

GSKit V8 - Install, Uninstall and Upgrade instructions for HP-UX systems

Question & Answer


Question

How to Install, Uninstall or Upgrade of GSKit V8 used with Security/Tivoli Directory Server on HP-UX systems?

Cause

GSKit V8 provided with Security/Tivoli Directory server needs to be upgraded as part of periodic preventive maintenance.

Answer

Refer to Recommended Fixes for latest recommended level of GSKit for a given version of Security/Tivoli Directory Server.
The required / latest GSKit V8 can be downloaded from IBM Fix Central.

Tab navigation

HP-UX - GSKit V8 - Install / Upgrade Instructions


Use root login or root credentials for the following procedure.
The same steps work for both initial installation as well as an upgrade.
  1. Download the required GSKit V8 file for HP-UX platform from IBM Fix Central.
    The name of the file will be of the form: 8.r.m.f-TIV-GSKIT-HPUXIA64-FPnnnn.tar.gz
    Note: r.m.f are release, maintenance and fix level of GSKit V8 and nnnn is the fix level.
  2. After download, transfer(scp/ftp) the file to the target HP-UX system and extract the same:

    ==> cd <path_where_gskit_tar.gz_file_is_kept>
    ==> gunzip -c 8*-TIV-GSKIT-HPUXIA64-*.tar.gz | tar -xf -
    Note: The above creates a folder with name 8.r.m.f-TIV-GSKIT-HPUXIA64-FPnnnn and extracts all files into that folder.
  3. The contents of the folder 8.r.m.f-TIV-GSKIT-HPUXIA64-FPnnnn :

    ==> cd 8.r.m.f-TIV-GSKIT-HPUXIA64-FPnnnn # Use the correct name as per your download.
    ==> ls -1R

    For example with 8.0.14.14 level of GSKit:
    ==> ls -1R
    32/
    64/

    ./32:
    gskcrypt32-8.0.14.14.hpux.ia64.tar.Z
    gskssl32-8.0.14.14.hpux.ia64.tar.Z

    ./64:
    gskcrypt64-8.0.14.14.hpux.ia64.tar.Z
    gskssl64-8.0.14.14.hpux.ia64.tar.Z

    Description of the files:

    For TDS 32 bit Client components:
    Global Security Kit V8.r.m.f for HPUX 32 bit IA64 Crypto - gskcrypt32-8.r.m.f.hpux.ia64.tar.Z
    Global Security Kit V8.r.m.f for HPUX 32 bit IA64 - gskssl32-8.r.m.f.hpux.ia64.tar.Z

    For TDS 64 bit Client components:
    Global Security Kit V8.r.m.f for HPUX IA 64-bit Crypto - gskcrypt64-8.r.m.f.hpux.ia64.tar.Z
    Global Security Kit V8.r.m.f for HPUX IA 64-bit - gskssl64-8.r.m.f.hpux.ia64.tar.Z

    Note: r.m.f are release, maintenance and fix level of GSKit V8.
  4. Now extract individual package files:
    ==> cd 32
    ==> uncompress gsk*Z
    ==> tar -xf gskcrypt32*.tar
    ==> tar -xf gskssl32*.tar
    ==> ls -1d gsk*32 # the following output will be seen
    gskcrypt32
    gskssl32

    ==> cd ../64
    ==> uncompress gsk*Z
    ==> tar -xf gskcrypt64*.tar
    ==> tar -xf gskssl64*.tar
    ==> ls -1d gsk*64 # the following output will be seen
    gskcrypt64
    gskssl64
  5. Stop Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.
  6. Install the packages:

    For 32 bit GSKit: (From the 32 subfolder where you can see the listing of gskssl32 and gskcrypt32)
    ==> cd 8*-TIV-GSKIT-HPUXIA64-*/32 # this full path becomes $PWD and is set in most shells.
    ==> ls -1d gsk*32 # the following output will be seen
    gskcrypt32
    gskssl32

    ==> swinstall -s $PWD/gskcrypt32 gskcrypt32
    ==> swinstall -s $PWD/gskssl32 gskssl32

    For 64 bit GSKit: (From the 64 subfolder where you can see the listing of gskssl64 and gskcrypt64)
    ==> cd 8*-TIV-GSKIT-HPUXIA64-*/64 # this full path becomes $PWD and is set in most shells.
    ==> ls -1d gsk*64
    gskcrypt64
    gskssl64

    ==> swinstall -s $PWD/gskcrypt64 gskcrypt64
    ==> swinstall -s $PWD/gskssl64 gskssl64
  7. Verify the installed fileset levels:

    ==> swlist | egrep "gskcrypt|gskssl"
  8. Start Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.


HP-UX - GSKit V8 - Uninstall Instructions


Use root login or root credentials for the following procedure.
  1. Stop Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.
  2. Uninstall the packages:

    For 32 bit GSKit:
    ==> swremove gskssl32
    ==> swremove gskcrypt32

    For 64 bit GSKit:
    ==> swremove gskssl64
    ==> swremove gskcrypt64

    Notes:
    - The above command may not uninstall the packages if any dependent software is still in place. First uninstall any dependent software before uninstalling gskit.
    - In most cases an upgrade would be more suitable and uninstall is not really required.
  3. Verify the installed fileset levels:

    ==> swlist | egrep "gskcrypt|gskssl"

[{"Product":{"code":"SSVJJU","label":"IBM Security Directory Server"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"General","Platform":[{"code":"PF010","label":"HP-UX"}],"Version":"6.3;6.3.1","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21628888