Web Browser Requirements

SunScreen allows any machine with a Java-enabled web browser compliant with JDK 1.1.3 or later to function as as an Administration Station. But, the version of the JVM or plug-in you are using with the browser dictates the operations you are able to perform on the Administration Station. You can use any supported browser to look at status information and logs as well as modify and save policy configurations. However, some browser configurations do not support local system access.

Accessing Local System Resources

Because Netscape Navigator and Internet Explorer do not support the Java mechanism for applet signing, the administration GUI cannot get access to your system's local resources (browser security mechanisms prevent this type of access.)

The operations that require access to your local system resources are:

• Loading certificates from a diskette

• Backing up all policies

• Restoring all policies

• Saving log files

• Loading jar signatures

If you do not need to perform any of these operations, you can use any of the supported browsers without local file access. To work around local access limitation you can use one of the following options:

• Use the Java plug-in.

• Use the HotJava browser version 1.1.

Browsers Without Local File Access

• Netscape Navigator 4.5, or higher, with its own Java VM has the limitation that you cannot read or write files.

• IE 4.01 with its own JVM has the limitation that you cannot read or write files.

Browsers With Local File Access

The following Web browsers support local file access using the required Java plug-in.

• Netscape Navigator 4.x with the Java^TM plug-in.

• Internet Explorer (IE) 4.x with the Java plug-in on Windows 95/98 or NT only.

• HotJava browser.

• IE 5.0 with its own JVM, this configuration can read or write files but is not a supported configuration.

  ---

  Note -

  The Netscape Navigator default Java plug-in provided with Solaris 8 is not compatible with the SunScreen administration applet. To save log files and load certificates using Netscape Navigator 4.5 or 4.7, you must install the older version of the Java plug-in or use the HotJava browser (included).

  ---

SunScreen 3.1 provides the required Java plug-in (version 1.1.2) as part of its distribution. The plug-in is located in the directory javaplugins.To install it, see the following plug-in installation instructions.

To Install the Required Java Plug-In

This procedure shows how to install the Java plug-in 1.1.2, save the identitydb.obj file, and set the NPX_PLUGIN_PATH environment variable.

1. Ensure that the SunScreen CD-ROM is inserted in the CD-ROM drive.

2. Navigate down the SunScreen directory structure to the plug-in location.

3. Install the Java plug-in by typing:

   "% cp plugin-112i-solsparc.sh /tmp ""% cd /tmp ""% sh plugin-112i-solsparc.sh"

4. Save the identitydb.obj file by typing:

   "% cd /opt/SUNWicg/SunScreen/admin/htdocs/plugin/plugins/""% cp identitydb.obj $HOME""% cd"

5. Set the environment variable if using sh or ksh by typing:

   "$ NPX_PLUGIN_PATH=$HOME/.netscape/plugins:$NPX_PLUGIN_PATH""$ export NPX_PLUGIN_PATH""or if using csh:""% setenv NPX_PLUGIN_PATH $HOME/.netscape/plugins:$NPX_PLUGIN_PATH"

6. Run the Netscape browser and use the URL for the plug-in version of the administration GUI:

   % netscape http://localhost:3852/plugin &