System Administration Commands                          sckmd(1M)



NAME
     sckmd - Sun cryptographic key management daemon

SYNOPSIS
     /usr/platform/sun4u/lib/sckmd


DESCRIPTION
     sckmd is a server process that resides on a high-end  system
     domain  to  maintain  the Internet Protocol Security (IPsec)
     Security Associations (SAs) needed to secure  communications
     between  a  Service  Processor or System Controller (SC) and
     platform management software running within  a  domain.  The
     cvcd(1M)  and  dcs(1M)  daemons  use these Security Associa-
     tions. See ipsec(7P) for a description of Security  Associa-
     tions.


     The sckmd daemon receives SAs from the Service Processor  or
     SC and installs these SAs in a domain's Security Association
     Database (SADB) using pfkey(7P).


     sckmd starts up at system boot time as an SMF  service.  The
     FMRI for the sckmd service is:

       svc:/platform/sun4u/sckmd:default




     A domain supports only one running sckmd process at a time.

ATRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:



     
           ATRIBUTE TYPE                   ATRIBUTE VALUE          
    
     Availability                 SUNWsckmx.u, SUNWsckmu.u, SUNWsckmr
    
     Interface Stability          Evolving                           
    


SEE ALSO
     cvcd(1M),  dcs(1M),  ipsecconf(1M),  ipsecalgs(1M),   attri-
     butes(5), ipsec(7P), ipsecah(7P), ipsecesp(7P), pfkey(7P)




SunOS 5.11          Last change: 25 Apr 2006                    1






System Administration Commands                          sckmd(1M)



NOTES
     The sckmd service is used only on Sun Fire high-end  systems
     and  the  SPARC  Enterprise  Server  family.  It  provides a
     mechanism for exchanging IPsec keys between a domain and its
     System Controller (SC) or Service Processor. These platforms
     use IPsec to secure the communications  between  the  SC  or
     Service  Processor  and certain platform-specific daemons in
     the domain. Such  daemons  currently  include  cvcd(1M)  and
     dcs(1M).


     The documentation for  each  platform  that  supports  sckmd
     describes how to configure its use of IPsec for such commun-
     ications. Also, the documentation for each specific applica-
     tion  describes  how  to configure its security policies and
     IPsec options in a manner appropriate for the  target  plat-
     form.  Refer to the platform- and application-specific docu-
     mentation for detailed information.





































SunOS 5.11          Last change: 25 Apr 2006                    2