Sun Logo




Sun Secure Global Desktop 4.5 Gateway Administration Guide

820-6691-10


Contents

Preface

Installing the SGD Gateway

About the SGD Gateway

System Requirements

Known Issues

Performing the Installation

procedure iconsmall spaceHow To Install the SGD Gateway

Configuring the SGD Gateway

Deploying the SGD Gateway

Basic Deployment

Load-Balanced Deployment

SGD Gateway Configuration Tasks

Client Device to SGD Gateway Connections

procedure iconsmall spaceHow to Configure the Ports and Connections for the SGD Gateway

procedure iconsmall spaceHow to Install an SSL Certificate for Client Connections Into the Client Keystore

SGD Gateway to SGD Server Connections

procedure iconsmall spaceHow to Install SGD Server Certificates

procedure iconsmall spaceHow to Install SGD Gateway Certificates on the SGD Array

procedure iconsmall spaceHow to Configure SGD Client Connections

Client Device to Load Balancer Connections

Load Balancer to SGD Gateway Connections

Controlling the SGD Gateway

Starting the SGD Gateway

Stopping the SGD Gateway

Restarting the SGD Gateway

Removing the SGD Gateway

procedure iconsmall spaceHow To Remove the SGD Gateway

SGD Gateway Architecture Overview

SGD Gateway Architecture

Components of the SGD Gateway

About Routing Tokens

Keystores Used By the SGD Gateway

Routing Proxy Configuration File

Apache Web Server Configuration Files

Configuring Reverse Proxying and Load Balancing

Apache Modules Used by the SGD Gateway

Supported Cipher Suites

Command-Line Reference

The gateway Command

Syntax

Description

Examples

gateway start

Syntax

Description

Examples

gateway stop

Syntax

Description

Examples

gateway restart

Syntax

Description

Examples

gateway config

Syntax

Description

Examples

gateway config create

Syntax

Description

Examples

gateway config list

Syntax

Description

Examples

gateway config edit

Syntax

Description

Examples

gateway config enable

Syntax

Description

Examples

gateway config disable

Syntax

Description

Examples

gateway server

Syntax

Description

Examples

gateway server add

Syntax

Description

Examples

gateway server remove

Syntax

Description

Examples

gateway server list

Syntax

Description

Examples

gateway status

Syntax

Description

Examples

gateway version

Syntax

Description

Examples

gateway sslcert

Syntax

Description

Examples

gateway sslcert export

Syntax

Description

Examples

gateway sslcert print

Syntax

Description

Examples

gateway sslkey

Syntax

Description

Examples

gateway sslkey import

Syntax

Description

Examples

gateway sslkey export

Syntax

Description

Examples

gateway cert export

Syntax

Description

Examples

gateway key import

Syntax

Description

Examples

gateway setup

Syntax

Description

Examples

gateway uninstall

Syntax

Description

Examples

The tarantella gateway Command

Syntax

Description

Examples

tarantella gateway add

Syntax

Description

Examples

tarantella gateway list

Syntax

Description

Examples

tarantella gateway remove

Syntax

Description

Examples

The security-gateway Attribute

Advanced Configuration

Tuning the SGD Gateway

Changing the Maximum Number of AIP Connections

Calculating the Number of AIP Connections

Changing the Maximum Number of HTTP Connections

Changing the JVM Memory Size

Calculating the JVM Memory Size

Configuring HTTP Redirection

Changing the Binding Port for the SGD Gateway

Enabling the Balancer Manager Application

Using Unencrypted Connections to the SGD Array

Using Unencrypted Incoming Connections to the SGD Gateway

The Reflection Service

Enabling the Reflection Service

procedure iconsmall spaceHow to Enable Unauthorized Access to the Reflection Service

procedure iconsmall spaceHow to Enable Authorized Access to the Reflection Service

Using the Reflection Service

About the RESTful Web Services

Examples of Using the Reflection Service

Troubleshooting the SGD Gateway

Logging and Diagnostics

About SGD Gateway Logging

Changing the Logging Level

Log File Locations

Displaying SGD Gateway Process Information

Checking the Configuration From the Command Line

SGD Gateway Error Messages