


NSRNOTD(8)                                             NSRNOTD(8)


NNAAMMEE
       nsrnotd - daemon providing the NetWorker notary service

DDEESSCCRRIIPPTTIIOONN
       The  nnssrrnnoottdd  daemon provides an RPC-based notary service,
       and can only  be  invoked  from  an  enabled  nnssrrdd.   This
       requires that the archive feature of NetWorker be enabled.
       This service allows users to notarize their files across a
       network  via  nnoottaarryyaassmm  --  see uuaassmm(8).  The RPC program
       number used by nnssrrnnoottdd is 390400.

       The NNSSRR resource on the  server  contains  the  parameters
       needed  by  nnssrrnnoottdd  to  talk to the Surety service on the
       internet.  If archive services are enabled (or you have an
       unexpired  evaluation  license),  you  can turn on digital
       notarization    by    contacting    Surety    Technologies
       (_w_w_w_._s_u_r_e_t_y_._c_o_m  or 201-701-0600).  Surety will supply you
       (for a fee) the following information:
       _S_u_r_e_t_y _I_P _a_d_d_r_e_s_s
       This is the IP address of the Surety server.
       _S_u_r_e_t_y _U_s_e_r _I_d
       This 12-digit number (dddd-dddd-dddd) identifies you to Surety.
       _S_u_r_e_t_y _U_s_e_r _K_e_y
       This 16-digit number (dddd-dddd-dddd-dddd) authenticates the Surety user.

       When you enter these  quantities  into  the  NSR  resource
       (available  in  the _s_e_r_v_e_r _s_e_t_u_p menu), NetWorker will try
       to validate them.  Within a minute or less, NetWorker will
       either display a message that the parameters were accepted
       (and digital notarization should now work)  or  a  pending
       message  that  the  parameters  were  invalid.  If so, you
       should re-enter the correct parameters.   If  you  already
       have  correct  parameters,  but have difficulty contacting
       the Surety server for other  reasons,  you  will  need  to
       either restart NetWorker or delete and re-enter one of the
       parameters once the  network  difficulty  is  cleared  up.
       Note  that  on  networks  with  firewalls that a NetWorker
       server that provides notary service will need external UDP
       access to port 2065.

       The  basic mechanism for nnoottaarryyaassmm is to compute a one-way
       hash on the file being backed up  (the  _f_i_n_g_e_r_p_r_i_n_t),  and
       send  this  fingerprint to Surety (note that the file con-
       tents are never sent to Surety's server).   In  return,  a
       cryptographic  token (the _S_u_r_e _I_d) is returned and stored,
       in ASCII format, along with the file in the form of a _c_e_r_-
       _t_i_f_i_c_a_t_e.   This  certificate  can later be proved defini-
       tively to match the file or not, by  supplying  it,  along
       with  the file, to a Surety-supplied utility.  Without the
       certificate, the validity cannot be proved as  it  is  the
       Sure  Id  that is used to locate cryptographic information
       on the Surety server, not the fingerprint.  The key infor-
       mation contained in a certificate is the time.  If a vali-
       dated certificate corresponds to a file, you can  be  sure



NetWorker rt_1998_4Q.Build.MMaJrFcehra0l8_,0021000                        1





NSRNOTD(8)                                             NSRNOTD(8)


       that  the  file's contents existed exactly as the file now
       appears at that certification time, _r_e_g_a_r_d_l_e_s_s of any mod-
       ification or create time (which are easy to forge) associ-
       ated with the file.  For more information on  the  details
       of how this works, contact Surety (_w_w_w_._s_u_r_e_t_y_._c_o_m).


SSEEEE AALLSSOO
       uuaassmm(8) nnssrrdd(8),
















































NetWorker rt_1998_4Q.Build.MMaJrFcehra0l8_,0021000                        2


