Traditionally, the  /usr/lpp/bosinst/bosinst.template  file provides guidance to configure a  bosinst.data  file for an automated non-prompted installation of the OS. Figure 2-7 shows the  new  SIGN_POLICY  stanza in the  CONTROL_FLOW STANZA  section. More information about the  SIGN_POLICY  stanza is provided by the  /usr/lpp/bosinst/bosinst.templage.README  files, as  shown in Figure 2-8. Figure 2-7 New sample SIGN_POLICY control flow stanza in the bosinst.template file Figure 2-8 The /usr/lpp/bosinst/bosinst.README information about the SIGN_POLICY stanza usage Chapter 2. Security enhancements  79 # vi /usr/lpp/bosinst/bosinst.template.README [ ... omitted lines ... ] # SIGN_POLICY: # Determines the digital signature security policy setting for # installing AIX packages. # When set to none, it does not check for any signatures on packages # when they are installed. # When set to low, it will install the package and issue a warning # message if the signature is invalid. # When set to medium, the user will be required to confirm the # installation of the package if its signature is invalid. # When set to high, the package will not be installed if its # signature is invalid. # [ ... omitted lines ... ] # vi /usr/lpp/bosinst/bosinst.template [ ... omitted lines ... ] # TRUSTED_AIX = no,yes (defaults to no, enables Multilevel security) # TRUSTED_AIX_LSPP = no,yes (defaults to no, Trusted AIX in LSPP/EAL4+ mode) # TRUSTED_AIX_SYSMGT = yes,no (defaults to yes, installs Java with Tr.AIX # SECURE_BY_DEFAULT = no,yes (defaults to no, a minimal AIX Security # Expert install # SIGN_POLICY = none,low,medium,high (defaults to none, sets digital # signature policy for installing packages) # ADAPTER_SEARCH_LIST = a space separated list of adapters, that can be # used to limit the disk selection choices. # # PLEASE READ /usr/lpp/bosinst/bosinst.template.README for more information