Product: Xtradyne I-DBC

Version: ALL

Description:

Checking Permissions for Key Files

Solution:

After installing your own keys you should check if permissions for keys are set correctly. Only the user xtradyne should have read and write permissions. Determine permissions with the command ls -la in the adm directories of the SPS and the Proxy, for example:

root@myhost:/usr/xtradyne/sps/adm > ls -la *.der *.pem
-rw------- 1 xtradyne users 592 Jul 9 17:07 ControlConnectionCACert.der
-rw------- 1 xtradyne users 654 Jul 9 17:07 SPSCert.der
-rw------- 1 xtradyne users 677 Jul 9 17:07 SPSKey.der

The first column of output is the important one. Read and write permissions (rw) should only be set for the user (the second to fourth position apply to the user), for group (next three), and others (last three) neither read nor write permissions should be allowed (this is indicated by the dashes)!

If permissions are not ok, execute (as user root or xtradyne):

chmod 600 *.der. *.pem

Keys must be owned by the user xtradyne. If this is not the case type (as user root):

chown xtradyne *.der *.pem