This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
aix:vios_release [2024/01/29 20:42] manu |
aix:vios_release [2024/09/13 15:14] (current) manu |
||
---|---|---|---|
Line 3: | Line 3: | ||
===== PowerVM v4.1 ===== | ===== PowerVM v4.1 ===== | ||
- | AIX 7.3TL2 Benefits for VIOS 4.1 | + | AIX 7.3TL2 Benefits for VIOS 4.1 supported on Power 8, 9 and 10 |
**Performance** | **Performance** | ||
Line 18: | Line 18: | ||
* Out of the box long password support (up to 255 chars) | * Out of the box long password support (up to 255 chars) | ||
* LVM Encryption option for VIOS rootvg and dump devices | * LVM Encryption option for VIOS rootvg and dump devices | ||
+ | |||
+ | **Security features** | ||
+ | * Supports Trusted Execution, Trusted Update and Secure Boot. | ||
+ | * VIOS boot is made more secure (Secure Boot) and only administrator allowed programs and Kernel Extensions can run with the Trusted Execution feature. This protects system from malicious software & trojans. | ||
+ | * Trusted Update feature ensures that only images that are digitally signed by IBM are allowed to update the existing filesets on the system. | ||
+ | * Default passwords are stronger with the SHA-256 algorithm and also support out of the box long passwords with the maximum of 255 characters. | ||
+ | * Physical volumes that uses the SCSI protocol can be encrypted with hdcryptmgr command (under oem_setup_env), using data encryption key. | ||
+ | * Data protection is enhanced with LVM encryption for rootvg and dump devices. | ||
+ | * Services that are not secure like rexec, rsh are removed. Telnet / ftp services are disabled. If required, users can enable telnet / ftp services. | ||
+ | * ksh93 is used as the default shell in VIOS commands and scripts | ||
**Enhanced Availability** | **Enhanced Availability** | ||
Line 25: | Line 35: | ||
* Reduced boot time | * Reduced boot time | ||
* Enhanced concurrent change management | * Enhanced concurrent change management | ||
- | * | + | |
**Automation and Modernization** | **Automation and Modernization** | ||
* Python bundled for Ansible readiness | * Python bundled for Ansible readiness |