Trusted Execution (TE)

Under Construction

Trusted Execution (TE) can be used to verify and ensure the integrity of executables, libraries, scripts, and kernel extensions on an AIX system. For this purpose, attributes of the associated files can be stored in a database, the Trusted Signature Database (TSD). Depending on the configured policy, deviations from entries in the TSD are either logged, or the system prevents the use of the associated executables (libraries, scripts, kernel extensions).

Prerequisites for TE

Trusted Signature Database (TSD)

Listing TSD Entries

Audit of the Security Status of a System

Creating your own TSD

Adding TSD Entries

Files with frequently changing (volatile) Content

Files whose Content should be monitored

Creating a self-signed Certificate with “trustchk -k”

Creating a self-signed Certificate with OpenSSL

Adding non-volatile Files

Adding File Definitions

Enabling Trusted Execution (TE)