C H A P T E R 3

Security

SMS 1.5 software provides support for Solaris Security Toolkit 4.1.1, which is downloaded automatically with installations of SMS 1.5. Security options for a system (secure by default or secure by choice) will depend upon whether the SMS software is installed fresh or as an upgrade.

Secure By Default

If the SMS version is a fresh install, the smsinstall command is used and automatic hardening is accomplished as a function of the install (secure by default). Refer to the System Management Services (SMS) 1.5 Administrator Guide for more information.

Secure By Choice

If the installation is an upgrade, automatic system hardening does not occur. In this instance, the smsupgrade command is used. Solaris Security Toolkit software is downloaded as part of the SMS zip file and can then be used to harden, undo hardening, and audit the security posture of a system (secure by choice). Refer to the System Management Services (SMS) 1.5 Administrator Guide for more information.