HP OpenVMS I64 Operating Systems manual Security

HP OpenVMS Alpha Version 8.3 and HP OpenVMS Version 8.3-1H1 for Integrity Servers SPD 82.35.13

maintain system security and deter possible intruders. The OpenVMS Audit Analysis utility allows you to gen- erate various reports from this data.

Autoconfigure and AUTOGEN Utilities

The Autoconfigure and AUTOGEN utilities automatically configure the available devices in the system tables and set system parameters based on the peripheral and memory architecture. This eliminates the need for a tra- ditional system generation process when the hardware configuration is expanded or otherwise modified.

The OpenVMS AUTOGEN command procedure sets several system parameters automatically by detecting the devices installed in a configuration. A feedback op- tion allows you to generate a report of recommended parameter settings based on previous usage patterns.

Backup Utility

The Backup utility provides both full-volume and incre- mental file backups for file-structured, mounted volumes and volume sets. Individual files, selected directory structures, or all files on a volume set can be backed up and restored. Files can be selected by various dates (such as creation or modification) and can be backed up to magnetic tape, magnetic disk, or Write Once Read Many (WORM) optical disk. The Backup utility can also be used to restore a saveset or list the contents of a saveset.

A Backup API is included for invoking backup routines from an executable procedure.

The Backup Manager for OpenVMS provides a screen- oriented interface to the Backup utility that assists users in performing routine backup operations. The Backup Manager is menu driven and provides:

•Access to the save, restore, and list operations with- out having to understand Backup command syntax

•The ability to create, modify, recall, and delete Backup Manager templates that describe the Backup save operations

Recordable DVD

OpenVMS provides the capability on Alpha and Integrity server systems to record locally mastered disk volumes or disk image files onto a CD-R, CD-RW, DVD+R or DVD+RW optical-media recording device on specific drives and configurations.

Recordable CD

OpenVMS provides the capability to write once to CD-R media using an application shipping in the base oper- ating system. The feature supports only those writable CD devices (CD-RW) that ship with supported Alpha

systems and supported Integrity servers. For the ap- plication details, please reference the OpenVMS doc- umentation set. For platforms supporting the CD-RW hardware option, please refer to the appropriate page at the following web sites:

http://h18002.www1.hp.com/alphaserver/

http://www.hp.com/products1/servers/integrity/index.html

Analyze Disk Structure Utility

The Analyze Disk Structure utility compares the struc- ture information on a disk volume with the contents of the disk, prints the structure information, and permits changes to that information. It can also be used to re- pair errors detected in the file structure of disks.

License Management Facility (LMF)

The License Management Facility allows the system manager to enable software licenses and to determine which software products are licensed on an OpenVMS system.

System Management Utility (SYSMAN)

The System Management utility allows system man- agers to define a management environment in which operations performed from the local OpenVMS system can be executed on all other OpenVMS systems in the environment.

HP Services Tools

HP Services provides web-based tools for crash dump analysis and hardware fault isolation. For more infor- mation, visit the following web site:

http://h18000.www1.hp.com/support/svctools/

SECURITY

OpenVMS provides a rich set of tools to control user ac- cess to system-controlled data structures and devices that store information. OpenVMS employs a reference monitor concept that mediates all access attempts be- tween subjects (such as user processes) and security- relevant system objects (such as files). OpenVMS also provides a system security audit log file that records the results of all object access attempts. The audit log can also be used to capture information regarding a wide variety of other security-relevant events.

User account information, privileges and quotas associ- ated with each user account is maintained in the system user authorization file (SYSUAF). Each user account is assiged a user name, password, and unique user iden- tification code (UIC). To log in and gain access to the system, the user must supply a valid user name and password. The password is encoded and does not ap- pear on terminal displays.

7