trustattribute Installation
trustattribute is the RPM package containing the service plugin shared libraries required for running kdc_agent.
Shared Libraries (from Five Library Directories)
Source Directory |
Description |
|---|---|
trustattribute |
Main library (including the implementation of four features: TRUST_STATUS, TRUST_LOG, TRUST_TIME, and TRUST_IDENTITY). |
huawei_secure_c |
Huawei secure C library |
json |
JSON processing library |
openhitls |
Secure communication library (OpenHiTLS) |
kmc |
Key management service (KMS) library |
Procedure
- Obtain BoostKit-boostcc-kdcl_1.0.RC1.zip based on Table 1, decompress it, and extract the trustattribute RPM package.
rpm -ivh trustattribute-<version>.aarch64.rpm
- Install the RPM package. After installation, all .so files are deployed to /usr/lib64/ by default.
- Verifying the installation.
# List all installed .so files rpm -ql trustattribute | grep .so
- Configure the plugin under the plugins array in the kdc_agent configuration file.
{ "plugins": [{ "name": "trustattribute", "path": "/usr/lib64/libhisec_trustattribute.so" }] }
Four Feature Modules
Feature ID |
Name |
Description |
|---|---|---|
1 |
TRUST_STATUS |
Trusted status (reporting and querying file access records) |
2 |
TRUST_LOG |
Trusted log (obtaining log public keys and signing logs) |
3 |
TRUST_TIME |
Trusted time (querying time synchronization status) |
4 |
TRUST_IDENTITY |
Trusted identity (generating certificate signing requests (CSRs) and signing data) |
Parent topic: kdc_agent RPM Package Installation