• Please help support our sponsors by considering their products and services.
    Our sponsors enable us to serve you with this high-speed Internet connection and fast webservers you are currently using at ADSM.ORG.
    They support this free flow of information and knowledge exchange service at no cost to you.

    Please welcome our latest sponsor Tectrade . We can show our appreciation by learning more about Tectrade Solutions
  • Community Tip: Please Give Thanks to Those Sharing Their Knowledge.

    If you receive helpful answer on this forum, please show thanks to the poster by clicking "LIKE" link for the answer that you found helpful.

  • Community Tip: Forum Rules (PLEASE CLICK HERE TO READ BEFORE POSTING)

    Click the link above to access ADSM.ORG Acceptable Use Policy and forum rules which should be observed when using this website. Violators may be banned from this website. This notice will disappear after you have made at least 3 posts.

How to validate IBM rpms?

ldmwndletsm

ADSM.ORG Member
#1
We need to download the lin_tape device driver rpm and daemon rpm from IBM for IBM LTO tape drives. I can get to the download no problem, but there's no checksums. This is not under Passport Advatange wherein SHA1s are provided for each file, instead under Downloads>Fix Central where I see no checksums. How can we validate the download or signature? Does anyone know if IBM has a public key anywhere that we can use to validate their rpms?

I see nothing in the IBM Tape Device Drivers User's Guide (GC27-2130-23_0.pdf) or any of the associated readme files
(lin_tape.ReadMe, install.README), not that I expected to find anything in those, of course.

Thanks.
 

ldmwndletsm

ADSM.ORG Member
#2
To be clear, I'm not referring to validating that the file was not corrupted during download but rather how can we validate the signature on these? Are they signed? If so, where can we get the builder's key public key?
 

ldmwndletsm

ADSM.ORG Member
#3
None of these rpms appears to be signed (`rpm -qip` reports: "Signature : (none)"). The only information I can find on IBM's site pertaining to signatures and public keys is for BigFix 9.5. If there are no signed copies of their rpms then do they maintain any checksums anywhere on their site for these? Or is this something that the customer must make a special request for?
 

moon-buddy

ADSM.ORG Moderator
#4
None of these rpms appears to be signed (`rpm -qip` reports: "Signature : (none)"). The only information I can find on IBM's site pertaining to signatures and public keys is for BigFix 9.5. If there are no signed copies of their rpms then do they maintain any checksums anywhere on their site for these? Or is this something that the customer must make a special request for?
I haven't heard nor seen any request for signed RPM files.

On one hand, why do you need to have these signed? These are just drivers.
 

Advertise at ADSM.ORG

If you are reading this, so are your potential customer. Advertise at ADSM.ORG right now.

UpCloud high performance VPS at $5/month

Get started with $25 in credits on Cloud Servers. You must use link below to receive the credit. Use the promo to get upto 5 month of FREE Linux VPS.

The Spectrum Protect TLA (Three-Letter Acronym): ISP or something else?

  • Every product needs a TLA, Let's call it ISP (IBM Spectrum Protect).

    Votes: 18 20.0%
  • Keep using TSM for Spectrum Protect.

    Votes: 55 61.1%
  • Let's be formal and just say Spectrum Protect

    Votes: 10 11.1%
  • Other (please comement)

    Votes: 7 7.8%

Forum statistics

Threads
31,505
Messages
134,278
Members
21,590
Latest member
madebi
Top