Security Considerations for Finish Scripts

During Sun Management Center setup, you provided a password to generate the security key, and you provided an SNMP community string. To ensure security, the security key and community string are not stored in the Sun Management Center setup response file.

To successfully install and set up the Sun Management Center base agent on an install client, you must provide the same password that was used to generate the security key in Setting Up Sun Management Center, Step b. You must also provide the same SNMP community string that you specified in Setting Up Sun Management Center, Step c. This can be performed using either of the following two methods.

• Hard-code the password seed and community string in the JumpStart finish script.

  This method presents a security risk because the security password seed and the community string are visible in the finish script. The security risk can be reduced, but not eliminated, by setting the finish script file permission to 400.

• Configure the JumpStart finish script so that the password seed and community string are manually entered on the install client during base agent setup.

  The finish script can be configured to prompt for the security password seed and SNMP community string responses on the install client. The answers are stored as variables in a temporary finish script. When the install client is rebooted, the rc3.d script executes the temporary finish script, and then restores the original finish script.

  This method requires you to manually enter the security password seed and community string at each install client.

  ---

  Caution –

  This method does not validate the password seed or the community string. Communication between the agent and server will fail if you enter the wrong password seed or community string. If base agent setup fails on any install client, or if the agent fails to communicate with the Sun Management Center server, you have to run es-setup -F individually on each install client.

  ---

Examples of JumpStart finish scripts for both methods are provided in To Create the JumpStart Finish Script.