Managing interim fix files when using the Trusted Computing Base

The emgr command automatically detects if a system is enabled with the Trusted Computing Base (TCB).

If TCB is enabled, the emgr command registers all of the installed interim fixes with the interim fix database. When the interim fixes are removed, the emgr command restores the original TCB data. Because mount installation operations can create variations in file attributes when interim fix files are mounted and unmounted, mount installation operations are not supported on a TCB-enabled system and are blocked by the emgr command.

If you do not want the emgr command to automatically manage TCB data, export the EMGR_IGNORE_TCB variable and set this variable to any value that is not null. When the EMGR_IGNORE_TCB variable is set, the emgr command behaves as if the system is not TCB-enabled. If the EMGR_IGNORE_TCB variable is set on a TCB-enabled system, you might be required to manually manage interim fix files within TCB.

To check if TCB is enabled on your system, run the /usr/bin/tcbck command. If a usage statement is returned, TCB is enabled. Otherwise, a message indicating that TCB is not enabled is returned.