Specifying Security and Configuration Information in the /etc/netboot Directory

You specify the security and configuration information by creating the following files and storing the files in the /etc/netboot directory.

• wanboot.conf – This file specifies the client configuration information for a WAN boot installation.

• System configuration file (system.conf) – This system configuration file specifies the location of the client's sysidcfg file and custom JumpStart files.

• keystore – This file contains the client's HMAC SHA1 hashing key, 3DES or AES encryption key, and SSL private key.

• truststore – This file contains the digital certificates of certificate signing authorities that the client should trust. These trusted certificates instruct the client to trust the server during the installation.

• certstore – This file contains the client's digital certificate.

  ---

  Note –

  The certstore file must be located in the client ID directory. See Customizing the Scope of the WAN Boot Installation for more information about subdirectories of the /etc/netboot directory.

  ---

For detailed instructions on how to create and store these files, see the following procedures.

• To Create the System Configuration File

• To Create the wanboot.conf File

• (Optional) To Create a Hashing Key and an Encryption Key

• (Optional) To Use Digital Certificates for Server and Client Authentication