Initial Configuration of AIXpert

Answer

To set up an initial configuration of AIXpert and set a security level of High, Medium, or Low, use one of the following methods

Using WebSM:

1. Connect to your host and navigate to <name of managed host> -> AIX Security Expert -> Overview and Tasks
2. Click on the security level you would like to set: High, Medium, Low.
3. This will bring up a screen containing checkboxes enabled for all settings at that level.
   To disable a setting on that level, uncheck the checkbox for that specific setting.
4. Hit "OK" to submit this and make the necessary changes to your system.

Using SMIT:

1. Start SMIT or use the fastpath
   # smit aixpert
2. Select the security level you wish: High, Medium, Low
3. SMIT will create that initial security level and start up a vi editor session on that security file.
4. Edit the file and comment out any settings you do not wish to enable using XML comment characters; <-- begins the comment and -\> ends the comment.
5. Exit the editor and SMIT will apply the settings immediately.

1. Set the level to High, Medium, or Low
   # /usr/sbin/aixpert -l high

1. Set the level to High, Medium, or Low and save the resulting file
   # /usr/sbin/aixpert -l high -n -o /etc/security/aixpert/core/mylevel.xml
   Using High security as an example above.
   
2. Edit the file and comment out any settings you do not wish to enable using XML comment characters; <-- begins the comment and -\> ends the comment.
   # vi /etc/security/aixpert/core/mylevel.xml
   
3. Apply the file to your system
   # aixpert -f /etc/security/aixpert/core/mylevel.xml