Trusted Solaris Installation and Configuration

Installing From a CD-ROM

See your hardware manual, such as the Solaris 8 Sun Hardware Platform Guide for full instructions. The following are examples.

Insert the First Trusted Solaris 8 4/01 CD and Boot

Installing the first two systems requires using the 2 Trusted Solaris 8 4/01 installation CDs. The following are examples of booting from a CD on a SPARC and on an Intel machine.

Insert the first of two (2) Trusted Solaris 8 4/01 Installation CDs and type the boot command.

Example 3-1 SPARC: Typical Boot Command
boot cdrom
For more detail, see the Solaris 8 (SPARC Platform Edition) Installation Guide.

Example 3-2 IA: Typical Boot Procedure

Do one of the following:
- OPTION 1: Enable the system to boot from a CD by using the system's BIOS setup tool.
- OPTION 2: Insert the provided floppy, then insert the first CD.
For more detail, see the Solaris 8 (Intel Platform Edition) Installation Guide. Keep in mind that Solaris Web Start and upgrade are not supported, and that you are using Trusted Solaris CDs, not Solaris CDs.

Read Booting Messages

After you type the boot command, the system goes through a booting phase where hardware and system components are checked. The following screen provides an example of what you see. You may have to answer a language and a locale question.

Type b (boot), c (continue), or n (new command mode)
>n
Type help for more information
ok boot cdrom Rebooting with command: boot cdrom
Boot device: /pci@1f,0/pci@1,1/ide@3/cdrom@2,0:f    File and args:
SunOS Release 5.8 Version Trusted_Solaris_8 64-bit
Copyright 1983-2001, Sun Microsystems, Inc. All rights reserved.
Configuring /dev and /devices
Skipping interface hme0
Select a Language
Please make a choice (0-9): 0
Select a Locale
Please make a choice (0-47) or press ? or help: 45
Starting OpenWindows...

The booting phase will last for a few minutes. Then a Welcome to Trusted Solaris screen briefly appears, then the screen turns blue-gray and a Solaris Install Console is displayed in the upper left corner. Messages display in the Install Console during installation.

The Trusted Solaris installation program is running.

Answer Installation Questions

If you are installing from CD-ROM, the program guides you step by step through installing Trusted Solaris software. Online help is also available.

Use "Root NIS+ Master Installation Program Example" for guidance in answering the questions the first time that you install. In particular, note the following:

When asked whether to use DHCP (Dynamic Host Configuration Protocol), choose No, unless you have a reason to select it.
When installing the name service master, choose None when asked for the name service. The name service domain is configured after installing the first system.
Implement the "Recommendations for the Trusted Solaris Environment" during installation.

For screenshots of the installation program questions, see "Using the Solaris 8 Interactive Installation Program" in Solaris 8 Advanced Installation Guide.

Enter a root Password

Users must not disclose their passwords to another person, as that person may then have access to the data of the user and will not be uniquely identified or accountable. Note that disclosure can be direct, through the user deliberately disclosing her/his password to another person, or indirect, for example, through writing it down, or choosing an insecure password. The Trusted Solaris software provides protection against insecure passwords, but cannot prevent a user disclosing her/his password or writing it down.

Caution -

A Trusted Solaris system must have a root password in order for the root role to work. The root role is required for successful configuration.

Choose a root password by answering the password prompts.
Root password: rootpassword Re-enter your root password: rootpassword
Caution -
Do not forget the root password. The software cannot be configured without it.

System identification is completed.

When asked if you want the system to automatically shut down after 30 minutes of idle time, type y or n.

The Web Start Launcher starts in command-line mode.

Insert the Second Trusted Solaris 8 4/01 CD

The second CD installs packages only; it does not contain installation questions.

When prompted, type 1 to continue installing using a CD.

Note -
The prompts are misleading. The installation program asks for Solaris 8 CD-ROM #2. You should insert Trusted Solaris 8 4/01 CD-ROM #2.

Insert the second Trusted Solaris 8 4/01 installation CD.

Upon insertion, the CD prints out that it is a Solaris 8 CD-ROM. If you inserted a CD-ROM with the Trusted Solaris 8 4/01 Installation CD label, you inserted the correct CD.

Note -
The screen may display overwriting for the second CD. However, the packages are installing.

Answer yes to installing the software.

Package installation is displayed in 25% increments:
Installing Solaris Software 2 |-1%-----25%-----50%-----75%-----100%

Type 1 or 2 when prompted.

Remove the CD and press Return.

If you manually reboot your system, type:
# halt ok boot disk

Read the Log

Before reboot, the install log is in the file /tmp/install_log. After reboot, the install log is in the file /var/sadm/system/logs/install_log.

Read the install log and check for successful package installatio.

Configure the Trusted Solaris System

Finish system setup by configuring the system. To work properly, a Trusted Solaris system requires machine, label, and network configuration after installation.

To configure the system, follow the instructions for the system you are installing:

A system that will be administered through its local files only: "No Name Service Configuration Tasks"
A system that will be the master server for a name service domain: "Name Service Master Configuration Tasks"
A system that will be a client on the name service domain: "Client Configuration Tasks"