Question & Answer
Question
How to Install, Uninstall or Upgrade of GSKit V8 used with Security/Tivoli Directory Server on HP-UX systems?
Cause
GSKit V8 provided with Security/Tivoli Directory server needs to be upgraded as part of periodic preventive maintenance.
Answer
Refer to Recommended Fixes for latest recommended level of GSKit for a given version of Security/Tivoli Directory Server.
The required / latest GSKit V8 can be downloaded from IBM Fix Central.
HP-UX - GSKit V8 - Install / Upgrade Instructions
Use root login or root credentials for the following procedure.
The same steps work for both initial installation as well as an upgrade.
- Download the required GSKit V8 file for HP-UX platform from IBM Fix Central.
The name of the file will be of the form: 8.r.m.f-TIV-GSKIT-HPUXIA64-FPnnnn.tar.gz
Note: r.m.f are release, maintenance and fix level of GSKit V8 and nnnn is the fix level.
- After download, transfer(scp/ftp) the file to the target HP-UX system and extract the same:
==> cd <path_where_gskit_tar.gz_file_is_kept>
==> gunzip -c 8*-TIV-GSKIT-HPUXIA64-*.tar.gz | tar -xf -
Note: The above creates a folder with name 8.r.m.f-TIV-GSKIT-HPUXIA64-FPnnnn and extracts all files into that folder.
- The contents of the folder 8.r.m.f-TIV-GSKIT-HPUXIA64-FPnnnn :
==> cd 8.r.m.f-TIV-GSKIT-HPUXIA64-FPnnnn # Use the correct name as per your download.
==> ls -1R
For example with 8.0.14.14 level of GSKit:
==> ls -1R
32/
64/
./32:
gskcrypt32-8.0.14.14.hpux.ia64.tar.Z
gskssl32-8.0.14.14.hpux.ia64.tar.Z
./64:
gskcrypt64-8.0.14.14.hpux.ia64.tar.Z
gskssl64-8.0.14.14.hpux.ia64.tar.Z
Description of the files:
For TDS 32 bit Client components:
Global Security Kit V8.r.m.f for HPUX 32 bit IA64 Crypto - gskcrypt32-8.r.m.f.hpux.ia64.tar.Z
Global Security Kit V8.r.m.f for HPUX 32 bit IA64 - gskssl32-8.r.m.f.hpux.ia64.tar.Z
For TDS 64 bit Client components:
Global Security Kit V8.r.m.f for HPUX IA 64-bit Crypto - gskcrypt64-8.r.m.f.hpux.ia64.tar.Z
Global Security Kit V8.r.m.f for HPUX IA 64-bit - gskssl64-8.r.m.f.hpux.ia64.tar.Z
Note: r.m.f are release, maintenance and fix level of GSKit V8.
- Now extract individual package files:
==> cd 32
==> uncompress gsk*Z
==> tar -xf gskcrypt32*.tar
==> tar -xf gskssl32*.tar
==> ls -1d gsk*32 # the following output will be seen
gskcrypt32
gskssl32
==> cd ../64
==> uncompress gsk*Z
==> tar -xf gskcrypt64*.tar
==> tar -xf gskssl64*.tar
==> ls -1d gsk*64 # the following output will be seen
gskcrypt64
gskssl64
- Stop Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.
- Install the packages:
For 32 bit GSKit: (From the 32 subfolder where you can see the listing of gskssl32 and gskcrypt32)
==> cd 8*-TIV-GSKIT-HPUXIA64-*/32 # this full path becomes $PWD and is set in most shells.
==> ls -1d gsk*32 # the following output will be seen
gskcrypt32
gskssl32
==> swinstall -s $PWD/gskcrypt32 gskcrypt32
==> swinstall -s $PWD/gskssl32 gskssl32
For 64 bit GSKit: (From the 64 subfolder where you can see the listing of gskssl64 and gskcrypt64)
==> cd 8*-TIV-GSKIT-HPUXIA64-*/64 # this full path becomes $PWD and is set in most shells.
==> ls -1d gsk*64
gskcrypt64
gskssl64
==> swinstall -s $PWD/gskcrypt64 gskcrypt64
==> swinstall -s $PWD/gskssl64 gskssl64
- Verify the installed fileset levels:
==> swlist | egrep "gskcrypt|gskssl"
- Start Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.
HP-UX - GSKit V8 - Uninstall Instructions
Use root login or root credentials for the following procedure.
- Stop Security/Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes (such as TAM) which use gskit.
- Uninstall the packages:
For 32 bit GSKit:
==> swremove gskssl32
==> swremove gskcrypt32
For 64 bit GSKit:
==> swremove gskssl64
==> swremove gskcrypt64
Notes:
- The above command may not uninstall the packages if any dependent software is still in place. First uninstall any dependent software before uninstalling gskit.
- In most cases an upgrade would be more suitable and uninstall is not really required.
- Verify the installed fileset levels:
==> swlist | egrep "gskcrypt|gskssl"
[{"Product":{"code":"SSVJJU","label":"IBM Security Directory Server"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"General","Platform":[{"code":"PF010","label":"HP-UX"}],"Version":"6.3;6.3.1","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21628888