Signed Patches Administration Guide for PatchPro 2.2

Overview of Signed Patches

Solaris 2.6, Solaris 7, Solaris 8, and Solaris 9 patches provided by Sun Microsystems include a digital signature. Patches with this digital signature are called signed patches.

A signed patch offers greater security than an unsigned patch. The digital signature on the patch can be verified before the patch is applied to your system. A valid digital signature ensures that the signed patch that you apply has not been modified since the signature was applied.

Signed patches are stored in Java Archive (JAR) format files. Both signed patches and unsigned patches are available from the SunSolve OnlineSM Web site at http://sunsolve.sun.com. Follow the Patchfinder link and specify the patches that you want to download. You can download signed or unsigned patches.

Signed patches can be managed with or without Solaris patch management tools. For overview information about patch management tools, see Solaris Patch Management Tools for Signed Patches. For information about managing signed patches without using Solaris patch management tools, see Appendix A, Managing Signed Patches Without Solaris Patch Management Tools (Tasks).