HP UX Security Products and Features Software manual Upgrading WLI

4.Log in to the target system as the root user.

5.Remove WLI:

%swremove -x autoreboot=true WhteListInf

The machine automatically reboots after rebuilding the kernel without the WLI module.

6.Manual cleanup:

WLI does not keep track of metadata files generated by WLI commands. These metadata files are listed in Section 2.3 (page 16).

4.4Upgrading WLI

WLI upgrades will become available through revisions of WLI. If you already have WLI installed on your system and are upgrading to a later revision, use the following procedure:

1.Change the security mode of WLI to maintenance:

%wlisyspolicy -s mode=maintenance -k <wli_admin_key>

2.This step is recommended by HP but not required. Back up the WLI database:

%tar -cvf wli_keydbxx.tar /etc/wli

NOTE: You can use an equivalent command.

3.Install the later WLI revision. For details, see Section 4.2 (page 21).

4.After reboot, configuration scripts execute automatically unless deferred by the swinstall command. If configuration was deferred:

%swconfig WLI

5.Configuration files stored in the WLI database and preserved from the previous revision are:

/etc/wli/wlisys.conf

/etc/wli/wlisyspolicy.conf

New versions of these files are copied to the system at the following respective locations:

/opt/wli/newconfig/etc/wlisys.conf

/opt/wli/newconfig/etc/wlisyspolicy.conf

If the new versions contain additional structure and information, copy the old versions to a safe location. Copy the new versions to the respective database locations. The administrator can also choose to set attribute values in the new files to match those in the old files.

6.Do not complete the manual configuration steps listed in “Configuring” (page 25). The WLI database is identical at this time except possibly for the file replaced in step 5.

7.If the configuration files were modified or replaced in step 5, refresh the backup archive to contain the newer file versions.

8.Set the security mode to restricted. This step requires the passphrase of a WLI administrator key:

%wlisyspolicy -s mode=restricted -k <wli_admin_key>

9.The following must be executed by root user:

# shutdown -r

4.4 Upgrading WLI 23