Enabling SNMP Encryption

To find the current state of SNMP encryption, run the es-config command with no arguments.

To Enable SNMP Encryption for Server Installations

1. Make sure the SUNWcry package, which contains the /usr/lib/libcrypt_d.so encryption library, is installed on the system by typing:

   % pkginfo | grep SUNWcry

   If the package is installed, the system shows:

   application SUNWcry

   ---

   Note –

   The SUNWcry package is part of the Solaris Encryption Kit. To obtain the Solaris Encryption Kit, see your Sun sales representative. For important information about administering secure systems, see your Solaris system administration documentation.

   ---

2. Type the following command as superuser from the agent host:

   # es-config -r

   The system detects whether the SUNWcry package is present and automatically stops all Sun Management Center components. The script then asks for the security seed.

3. Type the security seed.

   The script asks for the SNMPv1 community string.

4. When asked whether you want to initiate encrypted communication, type y to initiate encrypted communication or n to decline.

5. When asked whether you want to enable the auto-negotiate feature, type y to enable or n to decline.

   For details on the auto-negotiate feature, see Auto-Negotiate Feature.

If the SUNWcry package is added or is removed after the initial agent setup, use the es-config script to enable SNMP encryption for the agent.