SunScreen 3.1 Installation Guide

To Upgrade the Remote Administration Station


Note -

This is a manual procedure. Do not run the upgrade script on the Administration Station.


  1. Open a terminal window on the Administration Station and become root.

  2. Remove each SunScreen EFS 1.1, 2.0, or 3.0, package individually by typing:


    For SunScreen EFS 1.1:
    # pkgrm SUNWicgSA 
     
    For SunScreen EFS 2.0:
    # pkgrm SUNWicgSA SUNWicgSD SUNWicgSM SUNWHJicg
     
    For SunScreen EFS 3.0:
    # pkgrm SUNWicgSA SUNWicgSD SUNWicgSM SUNWicgSS SUNWdthj SUNWhttp 
    
  3. Follow the program prompts and answer all the questions with y.

    The pkgrm program ends with the statement: Removal of name_of_package was successful.


    Note -

    If you did not originally install any of these packages, omit them from the string or else remove the packages one at a time.


  4. Remove the SKIP software packages by typing:


    For SunScreen EFS 1.1 and 2.0:
    # pkgrm SICGcrc2 SICGcrc4 SICGes SICGkeymg SICGkisup SICGbdcdr
     
    For SunScreen EFS 3.0:
    # pkgrm SUNWbcd SUNWbdcx SUNWrc2 SUNWrc4 SUNWrc4x SUNWes SUNWesx SUNWkeyman SUNWkisup
  5. (EFS 1.1 and 2.0 only) You can leave any SunScreen EFS 3.0 cryptography upgrades on your system. Remove any SKIP cryptography upgrades by typing:


    For SunScreen EFS 1.1 and 2.0:
    #pkgrm SICGcdes SICGc3des SICGcsafe SICGkdsup SICGkusup
    
  6. Insert the SunScreen 3.1 CD-ROM into the Administration Station's CD-ROM drive.

  7. Add the SunScreen 3.1 packages by typing:


    For SPARC systems:
    # pkgadd  -d /cdrom/cdrom0/sparc
     
    For Intel systems:
    # pkgadd  -d /cdrom/cdrom0/i386
    

    For SPARC systems, you are prompted with a menu of packages to install:


    The following packages are available:
    1  NSCPcom       Netscape Communicator
                       (sparc) 20.4.70,REV=1999.08.20.17.43
      2  SUNWbdc       SKIP Bulk Data Crypt
                       (sparc) 1.5.1
      3  SUNWbdcx      SKIP Bulk Data Crypt (64-bit)
                       (sparc) 1.5.1
      4  SUNWdes       SKIP DES Crypto Module
                       (sparc) 1.5.1
      5  SUNWdesx      SKIP DES Crypto Module (64-bit)
                       (sparc) 1.5.1
      6  SUNWdthj      HotJava Browser for Solaris
                       (sparc) 1.1.5,REV=1998.12.03
      7  SUNWdtnsc     Netscape Componentization Support for CDE
                       (sparc) 1.0,REV=1999.06.14.15.50
      8  SUNWes        SKIP End System
                       (sparc) 1.5.1
      9  SUNWesx       SKIP End System (64-bit)
                       (sparc) 1.5.1
     10  SUNWfwcnv     SunScreen Firewall conversion
                       (sparc) 3.1
    11  SUNWhttp      Sun WebServer daemon and supporting binaries
                       (sparc) 2.0
     12  SUNWicgSA     SunScreen Administration Software
                       (sparc) 3.1
     13  SUNWicgSD     SunScreen online documentation
                       (sparc) 3.1
     14  SUNWicgSF     SunScreen full function
                       (sparc) 3.1
     15  SUNWicgSM     SunScreen man pages
                       (sparc) 3.1
     16  SUNWicgSS     SunScreen Firewall
                       (sparc) 3.1
     17  SUNWkeymg     SKIP Key Manager Tools
                       (sparc) 1.5.1
     18  SUNWkusup     SKIP U-Support module
                       (sparc) 1.5.1
     19  SUNWrc2       SKIP RC2 Crypto Module
                       (sparc) 1.5.1
     20  SUNWrc4       SKIP RC4 Crypto Module
                       (sparc) 1.5.1
    21  SUNWrc4x      SKIP RC4 Crypto Module (64-bit)
                       (sparc) 1.5.1
     22  SUNWsman      SKIP Man Pages
                       (sparc) 1.5.1
    Select package(s) you wish to process (or 'all' to process
    all packages). (default: all) [?,??,q]:

    For Intel systems, you are prompted with a menu of packages to install:


    The following packages are available:
    1  NSCPcom       Netscape Communicator
                       (i386) 20.4.70,REV=1999.08.20.17.56
      2  SUNWbdc       SKIP Bulk Data Crypt
                       (i386) 1.5.1
      3  SUNWdes       SKIP DES Crypto Module
                       (i386) 1.5.1
      4  SUNWdthj      HotJava Browser for Solaris
                       (i386) 1.1.5,REV=1998.12.03
      5  SUNWdtnsc     Netscape Componentization Support for CDE
                       (i386) 1.0,REV=1999.06.14.15.53
      6  SUNWes        SKIP End System
                       (i386) 1.5.1
      7  SUNWfwcnv     SunScreen Firewall conversion
                       (i386) 3.1
      8  SUNWhttp      Sun WebServer daemon and supporting binaries
                       (i386) 2.0
      9  SUNWicgSA     SunScreen Administration Software
                       (i386) 3.1
     10  SUNWicgSD     SunScreen online documentation
                       (i386) 3.1
    11  SUNWicgSF     SunScreen full function
                       (i386) 3.1
     12  SUNWicgSM     SunScreen man pages
                       (i386) 3.1
     13  SUNWicgSS     SunScreen Firewall
                       (i386) 3.1
     14  SUNWkeymg     SKIP Key Manager Tools
                       (i386) 1.5.1
     15  SUNWkusup     SKIP U-Support module
                       (i386) 1.5.1
     16  SUNWrc2       SKIP RC2 Crypto Module
                       (i386) 1.5.1
     17  SUNWrc4       SKIP RC4 Crypto Module
                       (i386) 1.5.1
     18  SUNWsman      SKIP Man Pages
                       (i386) 1.5.1
  8. For a minimum SPARC installation, type: 2-5, 8-9, 12, 17-21 For a minimum Intel installation, type: 2-3, 6, 9, 14-17

  9. Follow the program prompts, answering all the questions with y.

    When completed, you return to the same menu of packages.

  10. Type q to quit pkgadd.

  11. (EFS 1.1 and 2.0 only) Move the SKIP keys by typing:


    # cp -rp /etc/opt/SUNWicg/skip/* /etc/skip/.
    
  12. Eject the CD-ROM from the CD-ROM drive by typing:


    # eject cdrom0
    
  13. Install any SKIP upgrades (see "Upgrading Cryptography Modules").

  14. Reboot to complete the upgrade by typing:


    # sync; init 6
    
  15. Open a terminal window and become root.

  16. To configure and manage your Screen from your Administration Station, run a Java-enabled Web browser compliant with JDK 1.1.3 or later, and launch the administration GUI by typing the following URL:


     http://name_of_screen:3852
    

To configure and manage your Screen, see the SunScreen 3.1 Administration Guide.