Appendix B Upgrading Cryptography Modules

By default, SunScreen 3.1 ships with the Global version of SunScreen SKIP, which only contains the RC2 , RC4(x), and DES(x) Cryptography modules and key lengths up to 1028 bits. To add additional modules (for example 3DES) and support for greater key lengths (up to 4096 bits), you must add packages from the SunScreen Domestic release CD. Use the following procedure when you want to add additional Cryptography modules to your SKIP configuration.

You must take some care to install only the packages you need. The End System SKIP modules (SUNWes and SUNWesx) should not be added to a Screen.

To Install SKIP Upgrades

1. If you have a Global version of SKIP and you want to upgrade to the Domestic Use Only version, use pkgadd to install these packages from the Domestic SKIP CD-ROM.

   • SUNWkdsup -- SKIP D-Support module

   • SUNW3des -- SKIP 3DES Crypto Module

   • SUNW3desx -- SKIP 3DES Crypto Module (64-bit in SPARC only)

   • SUNWrc4x -- SKIP RC4-128 Crypto Module

   • SUNWrc4x -- SKIP RC4-128 Crypto Module (64-bit in SPARC only)

   • SUNWsafe -- SKIP SAFER Crypto Module

   • SUNWsafex -- SKIP SAFER Crypto Module (64-bit in SPARC only

2. After you install a SKIP upgrade, reboot by typing:

   # sync; init 6