Installing on HP-UX
On the CD-ROM, binaries for HP-UX are located in the directory
/install/hp-ux/. Separate packages are available for HP-UX 10.20 on PA-RISC (
10.20-pa-risc), for HP-UX 11.x on PA-RISC (
11.00-pa-risc), and for HP-UX 11.x on Itanium (
11.22-itanium). Please read the
README file for any important last-minute information.
To install SSH Tectia Server on HP-UX, do the following:
- (Not necessary in "third-digit" maintenance updates.) Copy the license file as instructed in Section Licensing.
- (If installing from CD-ROM.) Copy the installation package to your machine.
- Unpack the package with
gunzip. In order to be installable, the created package must have the correct long file name. In case your system reads only the short names, check the file name from the file
- If you are upgrading from a version older than 3.2.10, you should remove your previous installation:
# swremove ssh2
This is because file locations and script names have changed.
- Install the package by running the following command with root privileges:
# swinstall -s <path>/ssh2-<v>-sd-<hpux-v>.depot ssh2
In the command,
<path> is the full path to the installation package (HP-UX requires this even when the command is run in the same directory). In the package name,
<v> is the current package version of SSH Tectia Server (for example,
<hpux-v> is the version of the HP-UX operating system (
- To start the server daemon, restart the computer or run the following command:
# /sbin/init.d/sshd2 start
Enabling FIPS (Optional)
For a list of platforms on which the FIPS library has been validated or tested, see SSH Tectia Client/Server Product Description.
To enable the FIPS-certified mode, run the following command:
# /usr/local/sbin/ssh-crypto-library-chooser fips
This will set the library symlinks, so that
ssh2 will use the FIPS-certified crypto library. You can change back to using the standard crypto library by running the following command:
# /usr/local/sbin/ssh-crypto-library-chooser std
You can query the current library status by running the script without arguments. This will show the current symlink target (
Special Considerations on HP-UX
In some systems, the option
"-x mount_all_filesystems=false" needs to be given to
If doing a fresh installation (or if the previous host key in
/etc/ssh2 has been deleted), the installation script will generate the host key, which may take over 10 minutes on slower systems. The installation may appear to hang in the execution phase because of this.