Installing the Administration Packages

When installing the administration packages, the following limitations and requirements are present

The following is a list of limitations and requirements:

• To correct a known problem on the screen address object in the administration GUI, use the command line to revise the addr.

• Remote administration is affected by a known fragmentation problem on locally generated packets. To correct this problem, change the screen admin interface mtu to 1400.

• You must use the command-line interface to create IKE self-generated certificates on an administrative Screen.

• Due to a known problem in stealth mode in a temporary kmcookies file that causes the compiler to not create an ike config file, you must manually create an ike config file.

• If you are using SKIP CA-issued certificates for encryption, you need all of your certificate diskettes.

• Before proceeding, clean the state on both systems using the -f and -fs statetables.

To Install the Administration Packages

1. Open a terminal window on your system and become root, if not already.

2. Go to the location of the SunScreen software.

   #cd /cdrom/cdrom0/Solaris_9/ExtraValue/CoBundled/SunScreen_3.2/sparc

3. Add the software by typing:

   # pkgadd -d .

4. Select the adm9nistration packages.

   For a Remote Administration Station, specify: 1-8, 10-19, 24, and 27.

5. Type q to quit pkgadd.

6. Reboot by typing:

   # sync; init 6

After installing the software packages, set up encrypted communication between the Administration Station and the Screen.

Both the Administration Station and the Screen need certificates before encrypted communication can begin.