IPsec Service Management Facility

The service management facility (SMF) provides the following services for IPsec:

• svc:/network/ipsec/policy service – Manages IPsec policy. By default, this service is enabled. The value of the config_file property determines the location of the ipsecinit.conf file. The initial value is /etc/inet/ipsecinit.conf.

• svc:/network/ipsec/ipsecalgs service – Manages the algorithms that are available to IPsec. By default, this service is enabled.

• svc:/network/ipsec/manual-key service – Activates manual key management. By default, this service is disabled. The value of the config_file property determines the location of the ipseckeysconfiguration file. The initial value is /etc/inet/secret/ipseckeys.

• svc:/network/ipsec/ike service – Manages IKE. By default, this service is disabled. For the configurable properties, see IKE Service Management Facility.

For information about SMF, see Chapter 18, Managing Services (Overview), in System Administration Guide: Basic Administration. Also see the smf(5), svcadm(1M), and svccfg(1M) man pages.