Notes On A Case Where Openssl Is Used - Fujitsu M10 Product Notes

■
■
The migration with the ldm migrate-domain command is not supported if the
■
logical domain at the migration source is in the OpenBoot PROM state.
Perform migration with the ldm migrate-domain command after changing the
logical domain at the migration source to either of the following states: (CR
15858731)
■
■
Be sure to start the ldmd service (svc:/ldoms/ldmd:default) of the control domain.
■

Notes on a case where openssl is used

Oracle Solaris provides accelerated cryptographic libraries for SPARC M10 systems.
These libraries are accessible for OpenSSL users through PKCS11 engine. Please
consult man pages openssl(5), engine(3openssl), and evp(3openssl), or following
OpenSSL documents:
http://www.openssl.org/docs/crypto/engine.html
http://www.openssl.org/docs/crypto/evp.html
Please note:
The PKCS11 engine is the only way in OpenSSL to obtain the acceleration of
■
cryptographic functions from the encryption arithmetic unit of the SPARC64 X
processor.
The implementation of PKCS11 engine for OpenSSL in Oracle Solaris requires the
■
enabling of EVP model for digest and encryption methods supported by engine.
■
■
Here is an example on calling the accelerated version of AES method on SPARC64-X:
# openssl speed -engine pkcs11 -evp AES-256-CBC
Applications which are using OpenSSL libraries (libssl, libcrypto) for optimized
■
digest or encryption methods in PKCS11 engine, must enable EVP interfaces
Fujitsu M10/SPARC M10 Systems Product Notes for XCP Version 2043 ･ October 2013
14
When resetting a guest domain by using the reset(8) command, another guest
domain may be reset. If you reset the guest domain, execute from the guest
domain, and not from XSCF.
If SNMP is set, the name of the guest domain sent in the trap notification may
be incorrect.
Stopped state (bound state)
A state where Oracle Solaris is running
The following is the list of digest methods are optimized on SPARC64-X:
SHA1, SHA224, SHA256, SHA384, SHA512
The following is the list of encryption methods are optimized on SPARC64 X:
DES-CBC, DES-EDE3-CBC, DES-ECB, DES-EDE3
AES-128-CBC, AES-192-CBC, AES-256-CBC
AES-128-ECB, AES-192-ECB, AES-256-ECB
AES-128-CTR, AES-192-CTR, AES-256-CTR