Administrator's Guide

that must be managed. HP-UX Containers is a component of the Virtualization Continuum
for HP-UX and offers high efficiency in resource utilization and performance.
For more information, see the HP-UX Containers (SRP) documentation:
www.hp.com/go/virtualization-manuals
Click HP-UX Containers (SRP) Software.
B.2.2 HP-UX Encrypted Volume and File System (EVFS)
EVFS (Encrypted Volume and File System) is an application-transparent technology
providing protection of data at rest.
With EVFS, critical files and data at rest (on disk) are stored in encrypted form on disk.
EVFS safeguards against compromised use of and unauthorized access to data due to
physical theft of storage devices. The data encryption is based on a secret-key
cryptosystem and runs as an integrated kernel service transparent to the user.
With HP-UX EVFS, disks and volumes can be configured to be used in one of two modes
- volume-level encryption (EVS) or file-level encryption (EFS).
For more information, see the HP-UX EVFS documentation:
http://www.hp.com/go/hpux-security-docs
Click HP-UX Encrypted Volume and File System Software.
B.2.3 HP-UX IPSec
HP-UX IPSec provides an infrastructure to allow secure communications (authentication,
integrity, confidentiality) over IP-based networks between systems and devices that
implement the IPsec protocol suite.
For more information, see the HP-UX IPSec documentation:
http://www.hp.com/go/hpux-security-docs
Click HP-UX IPSec Software.
B.2.4 HP-UX OpenSSL
HP-UX 11i operating systems implement the Secure Sockets Layer (SSL V2 and V3) and
Transport Layer Security (TLS V1) protocols using the OpenSSL Toolkit developed by the
OpenSSL Project (http://www.openssl.org/). Secure Sockets Layer (SSL) is the open
standard security protocol for the secure transfer of sensitive information over the Internet.
SSL provides three basic security services: privacy through encryption, server
authentication, and message integrity. Client authentication is available as an optional
function.
Protecting communication links to HP-UX applications over a TCP/IP connection can be
accomplished through the use of SSL. The OpenSSL APIs establish private, authenticated,
and reliable communications links between applications.
For more information, see the HP-UX OpenSSL documentation:
http://www.hp.com/go/hpux-security-docs
Click HP-UX OpenSSL Software.
B.2 Protecting Data 201