lssecmode Command

Purpose

Displays the current or pending security mode configuration and key types in a formatted output.

Syntax

lssecmode [ -p ] [ -d | -D delim ] [ -x ] [ -T ] [ -V ] [ -h ]

Description

The lssecmode command displays information about the current or pending security mode configuration and key types. This information consists of the compliance mode, public or private key type, and default symmetric key types.

Note: If no flag is specified, the current security configuration mode and key types are displayed.

Flags

Item Description
-d Displays the delimiter-formatted output. The default delimiter is a colon (:).

You can use the -D flag to change the default delimiter.
-D delim Specifies the delimiter to be used in the formatted output.

By default, the colon (:) character is used as the delimiter in the output. You can use this flag to format the output with another delimiter that can contain one or more characters. For example, if the output data already contains colons, the default delimiter might result in confusion.
-h Displays the command usage.
-p Displays the pending security mode configuration and key types.
-T Writes the command trace messages to standard output.
-V Writes the command verbose messages to standard output.
-x Specifies that the header information must not be displayed.

Exit status

0
Successful.
1
Missing argument error.
2
Invalid option error.
3
API error.

Examples

  1. To display the current security configuration mode and key types, enter the following command:
    # lssecmode
    An output similar to the following example is displayed:
    Current Security Mode Configuration
Compliance Mode : none
Asymmetric Key Type : rsa512
Symmetric Key Type : default
  2. To display the pending security configuration mode and key types, enter the following command:
    # lssecmode -p
    If there is no pending security configuration mode and if the staging file is not present, the following output is displayed:
    2650-384 There are no pending configuration available
  3. To format the output with a delimiter ::, enter the following command:
    # lssecmode -D "::"
    An output similar to the following example is displayed:
    Current Security Mode Configuration
Compliance Mode :: none
Asymmetric Key Type :: rsa512
Symmetric Key Type :: default
  4. To display the pending security configuration mode and key types with command verbose messages and without header information, enter the following command:
    # lssecmode -p -x -V -D "::" -T
    An output similar to the following example is displayed:
    Invoked with parameters: -p -x -V -D :: -T
Invoking lssecmode to get the pending security mode and key types....
No header information required..
Compliance Mode :: none
Asymmetric Key Type :: rsa512
Symmetric Key Type :: default
Checking lssecmode log file size and backup if necessary....
No log file exist. No backup is needed

Location

/opt/rsct/bin/lssecmode
Contains the lssecmode command.