Managing Encryption and Certificates in Oracle^® Solaris 11.3

Refreshing or Restarting All Cryptographic Services

By default, the Cryptographic Framework is enabled. When the kcfd daemon fails for any reason, the Service Management Facility (SMF) can be used to restart cryptographic services. For more information, see the smf(5) and svcadm(1M) man pages. For the effect on zones of restarting cryptographic services, see Cryptographic Framework and Zones.

How to Refresh or Restart All Cryptographic Services

Before You Begin

You must become an administrator who is assigned the Crypto Management rights profile. For more information, see Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.3.

1. Check the status of cryptographic services.

   $ svcs cryptosvc
   STATE          STIME    FMRI
   offline         Dec_09   svc:/system/cryptosvc:default

2. Enable cryptographic services.

   $ svcadm enable svc:/system/cryptosvc

Example 24  Refreshing Cryptographic Services

In the following example, cryptographic services are refreshed in the global zone. Therefore, kernel-level cryptographic policy in every non-global zone is also refreshed.

$ svcadm refresh system/cryptosvc