AIX endpoints are not supported for use with Tanium as a Service.
The IBM JRE is usually already installed on AIX endpoints and supported versions can be used with Comply scans.
You can deploy supported versions of OpenJDK JRE version 8 through Comply to endpoints running AIX 7.1 TL1SP10 and later or AIX 7.2. Check the OpenJDK release site for supported service pack levels for a particular OpenJDK JRE release: AdoptOpenJDK: Latest release.
The OpenJDK JRE version 8 does not support AIX 6.1; therefore, you must use the IBM JRE on AIX 6.1 endpoints.
If needed, you can deploy IBM Java SE Version 8 (64-bit) to AIX endpoints through Comply, but you must repackage it first to a format that is compatible with Comply.
You must complete these steps on an AIX machine.
- Download IBM Java SE Version 8 (64-bit): IBM: Developer Kits for Java Standard Edition on AIX.
- Complete the following steps from a command line on an AIX machine:
- Move the downloaded JRE file to the directory where you want to extract the files.
- Change directory to the directory where you moved the file.
- Run the following commands, which use these variables:
- <downloaded file name>: the file that you downloaded from the IBM website. For example, Java8_64.jre.22.214.171.1240.tar.gz.
- <extracted file name>: the extracted file. For example, Java8_64.jre.
- <extracted file path>: the directory to which the file was extracted. For example, Java8_64.
- <file name for resulting file>: Name that you specify for the resulting file. This name must reflect the exact JRE version. For example, Java8_64.jre.126.96.36.1995.tar.gz.
gzip -dc <downloaded file name> | tar -xof -
restore -qxvdf <extracted file name> .
cp -R usr/lpp/<extracted file name>/inst_root/etc/<extracted file path>/jre/lib/* usr/<extracted file path>/jre/lib/
cd usr/<extracted file path>/
tar -cvf /tmp/<file name for resulting file>.tar jre
//If you downloaded the original file to /tmp, you must delete that file using the following command
// before you can create the resulting .tar file since the two files have the same name.
//If you downloaded the file to a location other than /tmp, skip to the last command
rm -rf <downloaded file name>
gzip <file name for resulting file>.tar
The subsequent example shows the commands with actual filenames and paths.
You must name the file so that it reflects the exact JRE version. For example, Java8_64.jre.188.8.131.525.tar.gz. In most cases, the file name will match the file name of the original JRE that you downloaded.
ExampleThe following example shows the commands to generate the file that can be deployed through Comply.
This example uses these inputs:
- The version of the downloaded JRE is 184.108.40.2065
- The file name for the downloaded JRE is Java8_64.jre.220.127.116.115.tar.gz
- The directory for file extraction is /tmp/jre_extract
- The resulting JRE file is Java8_64.jre.18.104.22.1685.tar.gz (the same as the original downloaded JRE file)
gzip -dc Java8_64.jre.22.214.171.1245.tar.gz | tar -xof -
restore -qxvdf Java8_64.jre .
cp -R usr/lpp/Java8_64.jre/inst_root/etc/java8_64/jre/lib/* usr/java8_64/jre/lib/
tar -cvf /tmp/Java8_64.jre.126.96.36.1995.tar jre
These commands produce a file, Java8_64.jre.188.8.131.525.tar.gz, that can be deployed to AIX endpoints through Comply.
Last updated: 7/28/2021 1:11 PM | Feedback