This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
aix:vios_release [2024/01/29 20:42] manu |
aix:vios_release [2024/09/13 15:14] (current) manu |
||
|---|---|---|---|
| Line 3: | Line 3: | ||
| ===== PowerVM v4.1 ===== | ===== PowerVM v4.1 ===== | ||
| - | AIX 7.3TL2 Benefits for VIOS 4.1 | + | AIX 7.3TL2 Benefits for VIOS 4.1 supported on Power 8, 9 and 10 |
| **Performance** | **Performance** | ||
| Line 18: | Line 18: | ||
| * Out of the box long password support (up to 255 chars) | * Out of the box long password support (up to 255 chars) | ||
| * LVM Encryption option for VIOS rootvg and dump devices | * LVM Encryption option for VIOS rootvg and dump devices | ||
| + | |||
| + | **Security features** | ||
| + | * Supports Trusted Execution, Trusted Update and Secure Boot. | ||
| + | * VIOS boot is made more secure (Secure Boot) and only administrator allowed programs and Kernel Extensions can run with the Trusted Execution feature. This protects system from malicious software & trojans. | ||
| + | * Trusted Update feature ensures that only images that are digitally signed by IBM are allowed to update the existing filesets on the system. | ||
| + | * Default passwords are stronger with the SHA-256 algorithm and also support out of the box long passwords with the maximum of 255 characters. | ||
| + | * Physical volumes that uses the SCSI protocol can be encrypted with hdcryptmgr command (under oem_setup_env), using data encryption key. | ||
| + | * Data protection is enhanced with LVM encryption for rootvg and dump devices. | ||
| + | * Services that are not secure like rexec, rsh are removed. Telnet / ftp services are disabled. If required, users can enable telnet / ftp services. | ||
| + | * ksh93 is used as the default shell in VIOS commands and scripts | ||
| **Enhanced Availability** | **Enhanced Availability** | ||
| Line 25: | Line 35: | ||
| * Reduced boot time | * Reduced boot time | ||
| * Enhanced concurrent change management | * Enhanced concurrent change management | ||
| - | * | + | |
| **Automation and Modernization** | **Automation and Modernization** | ||
| * Python bundled for Ansible readiness | * Python bundled for Ansible readiness | ||