SunScreen 3.1 Lite Installation Guide

Finishing the Installation

The software is installed on the Screen. To finish the installation you need to:

To Set the PATH
  1. On the Screen, open a terminal window and become root, if not already.

  2. Set the PATH and MANPATH by editing your shell initialization file (such as .profile or .login file).

    PATH=/opt/SUNWicg/SunScreen/bin:$PATH export PATH MANPATH=$MANPATH:/opt/SUNWicg/SunScreen/man export MANPATH

To Install SKIP Upgrades

    By default, SunScreen 3.1 Lite comes with the Global version of SKIP, which supports the RC2, RC4, and DES cryptography modules and key lengths up to 1024 bits. If the security profile at your site requires additional cryptography packages and greater key lengths, you have to add these packages from the SKIP Domestic CD. For more information, see "Upgrading Cryptography Modules."

To Display the AdminSetup.readme File

    To display the AdminSetup.readme file, in a terminal window, type:

    # more /etc/opt/SUNWicg/SunScreen/AdminSetup.readme

    The AdminSetup.readme file contains the Screen's certificate ID as well as the command you run in order to give the Administration Station the Screen's certificate ID (as shown in the following figure). Write the command down for later use, which begins with skiphost -a.

    Figure 4-13 AdminSetup.readme File


    Note -

    If you trust that the network between the Screen and the Administration Station is secure, you can ftp the AdminSetup.readme file from the Screen to the Administration Station. This saves you the task of writing down the information that is required in the next procedure.