Displaying AI Server Security Information
To display server security information, use the -v
and -s
options. In addition to what is typically displayed in previous Oracle Solaris versions, the output includes additional HMAC information (displayed in bold in the example):
$ installadm list -sv AI Server Parameter Value ------------------- ----- Hostname ................. hostname.example.com Architecture ............. sparc Active Networks .......... 192.0.2.0/24 198.51.100.0/24 Http Port ................ 5555 Secure Port .............. 5556 Image Path Base Dir ...... /export/auto_install Multi-Homed? ............. yes Managing DHCP? ........... yes DHCP IP Range ............ 198.51.100.0/24 - 203.0.113.0/24 Boot Server .............. 192.0.2.0/24 Web UI Enabled? .......... yes Wizard Saves to Server? .. no Security Enabled? ........ no Security Key? ............ yes Security Certificate: Subject: /C=US/O=Oracle/OU=Solaris Deployment/CN=hostname.example.com Issuer : /C=US/O=Oracle/OU=Solaris Deployment/CN=Signing CA Source : Server Certificate Valid from: Dec 12 19:48:00 2016 GMT to: Dec 10 19:48:00 2026 GMT Validates?: yes CA Certificates: f9d73b41 Subject: /C=US/O=Oracle/OU=Solaris Deployment/CN=Signing CA Issuer : /C=US/O=Oracle/OU=Solaris Deployment/CN=Root CA Source : Server CA Certificate Valid from: Dec 8 10:31:00 2016 GMT to: Dec 6 10:31:00 2026 GMT d09051e4 Subject: /C=US/O=Oracle/OU=Solaris Deployment/CN=Root CA Issuer : /C=US/O=Oracle/OU=Solaris Deployment/CN=Root CA Source : Server CA Certificate Valid from: Dec 8 10:31:00 2016 GMT to: Dec 6 10:31:00 2026 GMT Def Client Sec Key? ........... yes Def Client Sec Cert: Subject: /C=US/O=Oracle/OU=Solaris Deployment/CN=Client default Issuer : /C=US/O=Oracle/OU=Solaris Deployment/CN=Signing CA Source : Default Client Certificate Valid from: Feb 2 16:47:00 2017 GMT to: Jan 31 16:47:00 2027 GMT Validates?: yes Def Client CA Certs ........... none Def Client FW Encr Key ........ 31c88df08c958972a4b0996910539a39 Def Client FW HMAC-SHA1 Key ... (inactive) 3789ec373712f89879c575643415b386564b0e51 Def Client FW HMAC-SHA256 Key . (active) ae956c3a41d02083ca40f6125fce994d5df4a3e5077f9996d6118dce5ac74fad HMAC Policy ................... HMAC-SHA256 Number of Services ............ 25 Number of Clients ............. 3 Number of Manifests ........... 26 Number of Profiles ............ 3 Telemetry Enabled? ............ no Telemetry Success: none Telemetry Failure: all_logs Telemetry Frequency ........... 120 second(s) Telemetry Files Retention ..... 1 year(s) Telemetry Statistics Retention 1 year(s)