HP Insight Control for Linux 6.0 Installation Guide

# rpm -q gpg-pubkey

Where gpg-pubkey is the public key.

Alternatively, you can use the rpm -qi command to show more details about the certificates.

Installing the public key

To install the public key from an Insight Control for Linux ISO image, follow these steps:

1. Log in to the CMS with the superuser account (root).

2. Create a temporary mount point:

# mkdir /mnt/dirname

3. Mount the ISO image for HP Insight Control for Linux:

# mount -o loop IC-LX_release.iso /mnt/dirname

Where IC-LX_release.iso is the ISO image for HP Insight Control for Linux; the name

of your image will differ.

4. Navigate to the HP/public_keys directory on the mount point:

# cd /mnt/dirname/HP/public_keys

5. Install the public key:

# rpm --import rpm-hpPublicKey.pub

NOTE: If you do not install the HP public key, the install.sh installation script outputs the

messages shown in Section 9.1.3 (page 63). It is safe to ignore these messages, but you can avoid

them if you install the HP public key.

Validating the signature on an RPM

Use the rpm –-checksig command to validate and verify the digital signature of an RPM. The

output from the command indicates whether or not the RPM is correctly signed, as shown in

these examples:

NOTE: All RPMs can be found under /mount/dirname/HP/RPMS/*.

# rpm -checksig pdsh-hp-2.10-4.6.i386.rpm

pdsh-hp-2.10-4.6.i386.rpm: (sha1) dsa sha1 md5 gpg OK

# rpm –checksig gwt-1.4.60-1ct.src.rpm

gwt-1.4.60-1ct.src.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: key#s)

Use the following shell commands to locate any RPMs in the Insight Control for Linux ISO image

(assuming that it is mounted in a temporary mount point) that are not properly signed:

# find /mount/dirname/HP -name "*.rpm" -print > /tmp/rpm

# while read LINE

rpm --checksig $LINE

done < /tmp/rpm > /tmp/signed-rpms

# grep "NOT" /tmp/signed-rpms

Validating RPMs within the sysmgmt.bin

To check the signatures of the RPMs in the sysmgmt.bin before installing Systems Insight

Manager:

1. Enter the following commands:

# chmod +x sysmgmt.bin

# ./sysmgmt.bin --keep --confirm

2. Enter y to extract the archive, and enter n to run ./mxbundle.server.postinstall

44 Installing Systems Insight Manager and Insight Control for Linux