IBM Support

Attempt to start IPSec fails with kernel extension error on AIX 6.1/7.1

Question & Answer


Question

Why does an attempt to start IPSec on AIX 6.1/7.1 fail with the following error? Method error (/usr/lib/methods/cfgipsec): 0514-038 Error loading kernel extension. cfgipsec: The sysconfig (SYS_SINGLELOAD) system call failed.

Answer

IPSec on AIX 6.1/7.1 requires the CryptoLite for C software to also be installed. This is documented AIX v6.1 man page at the following URL:
http://publib.boulder.ibm.com/infocenter/aix/v6r1/index.jsp?topic=/com.ibm.aix.security/doc/security/ipsec_installation.htm

To check for the CryptoLite for C software, run this command:
# lslpp -l | grep clic
clic.rte.kernext 4.10.0.1 COMMITTED CryptoLite for C Kernel
clic.rte.lib 4.10.0.1 COMMITTED CryptoLite for C Library

The latest version of the "clic" software can be obtained on the latest 6.1 base technology level.
For example, version 4.10.0.1 as shown above, is found on AIX 6.1 TL9 SP6.

AIX 7.1 TL4 also ships the same clic version 4.10.1.1.

If you have additional questions, please contact IBM AIX Support.
http://www14.software.ibm.com/webapp/set2/sas/f/handbook/home.html

[{"Product":{"code":"SWG10","label":"AIX"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Component":"--","Platform":[{"code":"PF002","label":"AIX"}],"Version":"6.1;7.1","Edition":"","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}}]

Document Information

Modified date:
17 June 2018

UID

isg3T1012173

Page Feedback