Web Browser Requirements

SunScreen 3.1 Lite allows any machine with a Java-enabled Web browser compliant with JDK 1.1.3 or later to function as an Administration Station. But, the version of the JVM or plug-in you are using with the browser dictates the operations you are able to perform on the Administration Station. You can use any supported browser to look at status information and logs, as well as modify and save policy configurations. However, some browser configurations do not support local system access.

Accessing Local System Resources

Because Netscape Navigator and Internet Explorer do not support the Java mechanism for applet signing, the administration GUI cannot get access to your system's local resources (browser security mechanisms prevent this type of access.)

The operations that require access to your local system resources are:

• Loading certificates from a diskette

• Backing up all policies

• Restoring all policies

• Saving log files

• Loading jar signatures

If you do not need to perform any of these operations, you can use any of the supported browsers without local file access. To work around local access limitations you can use one of the following options:

• Use the Java plug-in.

• Use the HotJava browser, version 1.1.

Browsers Without Local File Access

• Netscape Navigator 4.5, or higher, with its own Java VM has the limitation that you cannot read or write files.

• IE 4.01 with its own JVM has the limitation that you cannot read or write files.

  ---

  Note -

  You can find compliant versions of the Netscape Navigator and HotJava browsers on the Solaris 8 Easy Access CD in the SunScreen directory in package format.

  ---

Browsers With Local File Access

The following Web browsers support local file access using the required Java Plug-in.

• Netscape Navigator^TM 4.x with the Java^TM plug-in.

• Internet Explorer (IE) 4.x with the Java plug-in on Windows 95/98 or NT only.

• HotJava browser.

• IE 5.0 with its own JVM, this configuration can read or write files but is not a supported configuration.

  ---

  Note -

  The Netscape Navigator default Java plug-in provided with Solaris 8 is not compatible with the SunScreen 3.1 Lite administration applet. To save log files and load certificates using Netscape Navigator 4.5 or 4.7, you must install the older version of the Java plug-in that is included on the CD-ROM or use the HotJava browser (also included).

  ---

SunScreen 3.1 Lite provides the required Java plug-in (version 1.1.2) as part of its distribution. The plug-in is located in the directory javaplugins.To install it, see the following plug-in installation instructions.

To Install the Required Java Plug-In

1. Ensure that the SunScreen 3.1 CD-ROM is inserted in the CD-ROM drive.

2. Navigate down the SunScreen 3.1 directory structure to the plug-in location.

3. Install the Java plug-in by typing:

   "% cp plugin-112i-solsparc.sh /tmp ""% cd /tmp ""% sh plugin-112i-solsparc.sh"

4. Save the identitydb.obj file by typing:

   "% cd /opt/SUNWicg/SunScreen/admin/htdocs/plugin/plugins/""% cp identitydb.obj $HOME""% cd"

5. Set the environment variable if using sh or ksh by typing:

   "$ NPX_PLUGIN_PATH=$HOME/.netscape/plugins:$NPX_PLUGIN_PATH""$ export NPX_PLUGIN_PATH""or if using csh:""% setenv NPX_PLUGIN_PATH $HOME/.netscape/plugins:$NPX_PLUGIN_PATH"

6. Run the Netscape browser and use the URL for the plug-in version of the SunScreen 3.1 administration GUI:

   % netscape http://localhost:3852/plugin &