IBM Support

GSKit V7 - Install, Uninstall and Upgrade instructions for AIX systems

Question & Answer


Question

Procedures to install, uninstall or upgrade GSKit V7 for Tivoli Directory Server on AIX systems.

Cause

GSKit V7 provided with different versions of Tivoli Directory server needs to be upgraded as part of periodic preventive maintenance.

Answer

This document provides install, uninstall and upgrade instructions for GSKit V7 on Tivoli Directory Server supported AIX systems.

Refer Recommended Fixes to find the latest recommended level of GSKit for a given version of Tivoli Directory Server.

Directory Server provided GSKit V7 latest fix levels are now available on Fix Central for entitled customers. Download GSKit V7 (7.0.4.35 or later fix levels) from Fix Central.

Also refer to GSKit V7- Instructions to find current installed version details.

AIX HP-UX Linux Solaris Windows


I. AIX - Install / Upgrade Instructions :
Use root login or root credentials for the following procedure.
The same steps work for both initial installation as well as an upgrade.
a. Download the required level of GSKit V7.

a.i. If you have downloaded the GSKit V7 latest fix levels from Fix central the file name will be similar to "7.0.4.41-TIV-GSKIT-AIX-FP0041.tar.gz". Transfer the file over to the target AIX system either using scp or ftp (binary mode). Extract the file on AIX system:
    ==> cd <download_location>
    ==> ls -l
    -rw-r--r-- 1 root system 14867364 May 22 11:09 7.0.4.41-TIV-GSKIT-AIX-FP0041.tar.gz

    ==> gunzip -c 7.0.4.41-TIV-GSKIT-AIX-FP0041.tar.gz | tar -xf -
    ==> ls -l
    drwxr-sr-x 2 root system 2048 May 22 11:09 7.0.4.41-TIV-GSKIT-AIX-FP0041
    -rw-r--r-- 1 root system 14867364 May 22 11:09 7.0.4.41-TIV-GSKIT-AIX-FP0041.tar.gz

    ==> cd 7.0.4.41-TIV-GSKIT-AIX-FP0041
    ==> ls -la
    -rw-r--r-- 1 root system 1384 May 22 11:09 .toc
    -rw-r--r-- 1 root system 10792960 May 22 11:09 gsksa.rte
    -rw-r--r-- 1 root system 11173888 May 22 11:08 gskta.rte
Now directly go to Step b. below.

a.ii. If you have downloaded a fix level prior to 7.0.4.35 from gskit download site, then you will have files such as gsksa.rte and gskta.rte and transfer them over to AIX system either using scp or ftp (binary mode). Keep these files in a new folder (e.g.: /home/gsk704.28/).
    ==> cd <path_of_gskit_download_location>
    ==> ls -la
    total 41920
    drwxr-xr-x 2 root system 256 Aug 10 16:46 .
    drwxr-xr-x 28 root system 4096 Aug 10 16:45 ..
    -rw-r--r-- 1 root system 10539008 Aug 10 16:46 gsksa.rte
    -rw-r--r-- 1 root system 10919936 Aug 10 16:46 gskta.rte

Create a .toc file using inutoc command: (note the dot/period in the command below which denotes current working directory where the installable packages are available)
    ==> inutoc .

    ==> ls -la
    total 41928
    drwxr-xr-x 2 root system 256 Aug 10 16:48 .
    drwxr-xr-x 28 root system 4096 Aug 10 16:45 ..
    -rw-r--r-- 1 root system 1384 Aug 10 16:48 .toc
    -rw-r--r-- 1 root system 10539008 Aug 10 16:46 gsksa.rte
    -rw-r--r-- 1 root system 10919936 Aug 10 16:46 gskta.rte

b. Stop Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes such as secldapclntd or TAM related processes which use gskit.

c. Run the command to unload any unused shared libs:
    ==> slibclean

d. Install the filesets - before this make sure to cd into the correct folder as mentioned in a.i. OR a.ii.
(Note: The dot/period in the command below which denotes current working directory where the installable packages are available)
    ==> installp -acXgYd . gsksa gskta

e. Verify the installed fileset levels:
    ==> lslpp -l | egrep -i "gsksa|gskta"
    gsksa.rte 7.0.4.41 COMMITTED AIX Certificate and SSL Base
    gskta.rte 7.0.4.41 COMMITTED AIX Certificate and SSL Base

f. Start Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes such as secldapclntd or TAM related processes which use gskit.

II. AIX - Uninstall Instructions:
Use root login or root credentials for the following procedure.
a. Stop Tivoli Directory Server related processes (ibmdiradm and ibmslapd) and any other processes such as secldapclntd or TAM related processes which use gskit.

b. Run the command to unload any unused shared libs:
    ==> slibclean

c. Uninstall the filesets
    ==> installp -u gsksa gskta

    Note: The above command may not uninstall the filesets if any dependent software is still in place. First uninstall any dependent software before uninstalling gskit filesets. In most cases an upgrade would be more suitable.

d. Verify the installed fileset levels:
    ==> lslpp -l | egrep -i "gsksa|gskta"

Return to top of page

[{"Product":{"code":"SSVJJU","label":"IBM Security Directory Server"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"General","Platform":[{"code":"PF002","label":"AIX"}],"Version":"5.2;6.0;6.1;6.2","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21443436