SunScreen 3.1 Installation Guide

To Install the Screen

  1. Open a terminal window on the Screen and become root.

  2. Insert the SunScreen CD-ROM into the Screen's CD-ROM drive.

  3. Add the software by typing:


    For SPARC systems:
    # pkgadd -d /cdrom/cdrom0/sparc
    
    For Intel systems:
    # pkgadd -d /cdrom/cdrom0/i386
    

    For SPARC systems, you are prompted with a menu of packages to install:


    The following packages are available:
      1  NSCPcom       Netscape Communicator
                       (sparc) 20.4.70,REV=1999.08.20.17.43
      2  SUNWbdc       SKIP Bulk Data Crypt
                       (sparc) 1.5.1
      3  SUNWbdcx      SKIP Bulk Data Crypt (64-bit)
                       (sparc) 1.5.1
      4  SUNWdes       SKIP DES Crypto Module
                       (sparc) 1.5.1
      5  SUNWdesx      SKIP DES Crypto Module (64-bit)
                       (sparc) 1.5.1
      6  SUNWdthj      HotJava Browser for Solaris
                       (sparc) 1.1.5,REV=1998.12.03
      7  SUNWdtnsc     Netscape Componentization Support for CDE
                       (sparc) 1.0,REV=1999.06.14.15.50
      8  SUNWes        SKIP End System
                       (sparc) 1.5.1
      9  SUNWesx       SKIP End System (64-bit)
                       (sparc) 1.5.1
     10  SUNWfwcnv     SunScreen Firewall conversion
                       (sparc) 3.1
     11  SUNWhttp      Sun WebServer daemon and supporting binaries
                       (sparc) 2.0
     12  SUNWicgSA     SunScreen Administration Software
                       (sparc) 3.1
     13  SUNWicgSD     SunScreen online documentation
                       (sparc) 3.1
     14  SUNWicgSF     SunScreen full function
                       (sparc) 3.1
     15  SUNWicgSM     SunScreen man pages
                       (sparc) 3.1
     16  SUNWicgSS     SunScreen Firewall
                       (sparc) 3.1
     17  SUNWkeymg     SKIP Key Manager Tools
                       (sparc) 1.5.1
     18  SUNWkusup     SKIP U-Support module
                       (sparc) 1.5.1
     19  SUNWrc2       SKIP RC2 Crypto Module
                       (sparc) 1.5.1
     20  SUNWrc4       SKIP RC4 Crypto Module
                       (sparc) 1.5.1
     21  SUNWrc4x      SKIP RC4 Crypto Module (64-bit)
                       (sparc) 1.5.1
     22  SUNWsman      SKIP Man Pages
                       (sparc) 1.5.1
    Select package(s) you wish to process (or 'all' to process
    all packages). (default: all) [?,??,q]: 

    For Intel systems, you are prompted with a menu of packages to install:


    The following packages are available:
      1  NSCPcom       Netscape Communicator
                       (i386) 20.4.70,REV=1999.08.20.17.56
      2  SUNWbdc       SKIP Bulk Data Crypt
                       (i386) 1.5.1
      3  SUNWdes       SKIP DES Crypto Module
                       (i386) 1.5.1
      4  SUNWdthj      HotJava Browser for Solaris
                       (i386) 1.1.5,REV=1998.12.03
      5  SUNWdtnsc     Netscape Componentization Support for CDE
                       (i386) 1.0,REV=1999.06.14.15.53
      6  SUNWes        SKIP End System
                       (i386) 1.5.1
      7  SUNWfwcnv     SunScreen Firewall conversion
                       (i386) 3.1
      8  SUNWhttp      Sun WebServer daemon and supporting binaries
                       (i386) 2.0
      9  SUNWicgSA     SunScreen Administration Software
                       (i386) 3.1
     10  SUNWicgSD     SunScreen online documentation
                       (i386) 3.1
     11  SUNWicgSF     SunScreen full function
                       (i386) 3.1
     12  SUNWicgSM     SunScreen man pages
                       (i386) 3.1
     13  SUNWicgSS     SunScreen Firewall
                       (i386) 3.1
     14  SUNWkeymg     SKIP Key Manager Tools
                       (i386) 1.5.1
     15  SUNWkusup     SKIP U-Support module
                       (i386) 1.5.1
     16  SUNWrc2       SKIP RC2 Crypto Module
                       (i386) 1.5.1
     17  SUNWrc4       SKIP RC4 Crypto Module
                       (i386) 1.5.1
     18  SUNWsman      SKIP Man Pages
                       (i386) 1.5.1
  4. For a full SPARC installation, type: 2-5, 10-22. For a full Intel installation, type: 2-3, 7-18.

  5. Follow the program prompts, answering all the questions with y.

    When completed, you return to the same menu of packages.

  6. Enter q to quit pkgadd.

  7. Set the PATH and MANPATH by editing your shell initialization file (such as .profile or.login file).

    PATH=/opt/SUNWicg/SunScreen/bin:$PATH export PATH MANPATH=$MANPATH:/opt/SUNWicg/SunScreen/man export MANPATH

  8. Eject the CD-ROM from the CD-ROM drive by typing:


    # eject cdrom0
    
  9. Install any SKIP upgrades (see "Upgrading Cryptography Modules").

  10. Reboot by typing:


    # sync; init 6
    
  11. Open a terminal window and become root, if not already.

  12. Complete the installation by typing:


    # ss_install
    

    Answer the questions that appear. The questions and text are similar to those that appear when installing using the installation wizard. Review the procedures for installing the software on the Screen in "Installing in Routing Mode With Remote Administration" or "Installing in Stealth Mode" if more details are needed.

    If you are using issued certificates, you need all of your certificate diskettes.


    Note -

    The SKIP command to run on the Administration Station is displayed at the end. It is contained in the AdminSetup.readme file, found in the directory /etc/opt/SUNWicg/SunScreen. Write this command down for use in the following procedure.

    If you trust that the network between the Screen and the Administration Station is secure, you can ftp the AdminSetup.readme file from the Screen to the Administration Station. This saves you the task of writing down the information that is required in the next procedure.


  13. Reboot by typing:


    # sync; init 6