HP UX Security Products and Features Software manual Appendix E 119

Trouble Shooting HP CDSA

CDSA Start Up Errors when calling CSSM_ModuleAttach

isl_InitializeSignedListFromImage: manifest hash confirmed!!!

VerifyModuleCommon: Static integrity check of /usr/lib/cdsa/libcsp_wwb.1 requested

VerifyModuleCommon: Library hash check for /usr/lib/cdsa/libcsp_wwb.1 okay!

ISL_SelfCheck: entering ISL_SelfCheck

isl_InitializeSignedListFromImage: manifest hash confirmed!!!

VerifyModuleCommon: In memory integrity check of /usr/lib/cdsa/libcsp_wwb.1 requested

VerifyModuleCommon: Reverting to static check

VerifyModuleCommon: Library hash check for /usr/lib/cdsa/libcsp_wwb.1 okay!

ISL_SelfCheck: successfully exiting ISL_SelfCheck

VerifyModuleCommon: In memory integrity check of /usr/lib/cdsa/libcsp_wwb.1 requested

VerifyModuleCommon: Reverting to static check

VerifyModuleCommon: Library hash check for /usr/lib/cdsa/libcsp_wwb.1 okay!

cssm_AddinLoadAndCheckIntegriy: before locate proc address

cssm_AddinLoadAndCheckIntegriy: before check address within module

cssm_AddinLoadAndCheckIntegriy: Before AddInAuthenticate

isl_InitializeSignedListFromImage: manifest hash confirmed!!!

isl_CreateCertificateChain: cert-chain validated; links = 1

VerifyModuleCommon: In memory integrity check of /usr/lib/libcssm.1 requested

VerifyModuleCommon: Reverting to static check

VerifyModuleCommon: Library hash check for /usr/lib/libcssm.1 okay!

cssm_AddinLoadAndCheckIntegriy: after AddInAuthenticate

If output like the above is not obtained; or if the output prematurely terminates, it is likely that either the libcssm.1 shared library (located in /usr/lib) or the libcsp_wwb.1 shared library (located in /usr/lib/cdsa) has been changed without the update of the corresponding credential files libcssm.dsa or libcsp_wwb.dsa (located in /usr/lib/cdsa/meta-inf). This may indicate that your computer system security has been compromised or that your system administrator has not properly installed the CDSA shared libraries. In any case, inform your system administrator immediately of the situation and ask him/her for help in resolving the situation. When a trace file is no longer needed, delete the enableIntegrityTrace file from

Appendix E 119