Trusted SSH

In a PCI environment, trusted ssh is a must for admin servers. You can pass an audit with trusted host if you still have root protected. Use wisely.

You will need to replace "SERVERA, SERVERB, and MYID" with values that fit for your environment.

Encrypt

If you need to have a file encrypted while at rest, Solaris 10 has a built in solution. You will need to store the "key" file in a safe place and it can have anything in it.

# Create the key file. vi /tmp/key # Encrypt the file. cat /tmp/file | encrypt -a arcfour -k /tmp/key > /tmp/file2 # Decrypt the file. decrypt -a arcfour -k /tmp/key /tmp/file2