Rate This Document
Findability
Accuracy
Completeness
Readability

trustattribute Installation

trustattribute is the RPM package containing the service plugin shared libraries required for running kdc_agent.

Shared Libraries (from Five Library Directories)

Source Directory

Description

trustattribute

Main library (including the implementation of four features: TRUST_STATUS, TRUST_LOG, TRUST_TIME, and TRUST_IDENTITY).

huawei_secure_c

Huawei secure C library

json

JSON processing library

openhitls

Secure communication library (OpenHiTLS)

kmc

Key management service (KMS) library

Procedure

  1. Obtain BoostKit-boostcc-kdcl_1.0.RC1.zip based on Table 1, decompress it, and extract the trustattribute RPM package.
    rpm -ivh trustattribute-<version>.aarch64.rpm
  2. Install the RPM package. After installation, all .so files are deployed to /usr/lib64/ by default.
  3. Verifying the installation.
    # List all installed .so files
    rpm -ql trustattribute | grep .so
  4. Configure the plugin under the plugins array in the kdc_agent configuration file.
    {
        "plugins": [{
            "name": "trustattribute",
            "path": "/usr/lib64/libhisec_trustattribute.so"
        }]
    }

Four Feature Modules

Feature ID

Name

Description

1

TRUST_STATUS

Trusted status (reporting and querying file access records)

2

TRUST_LOG

Trusted log (obtaining log public keys and signing logs)

3

TRUST_TIME

Trusted time (querying time synchronization status)

4

TRUST_IDENTITY

Trusted identity (generating certificate signing requests (CSRs) and signing data)