SunScreen 3.2 Installation Guide

Create an IKE Certificate on the Administration Station

The first step ijn this process is to create an IKE certificate on the remote Administration Station and to export it to a file.

To Create the Certificate on a Trusted Solaris 8 Administrative Screen
  1. Open a terminal window and become root, if not already.

  2. Create the IKE self-generated certificate.


    # ssadm certlocal -Iks -m 512 -t rsa-md5 -D "C=US, 
    O=YOUR_ORG, CN=admin_name"
    
  3. Export the Administration Station's certificate to a file.


    # ssadm certdb -I -e "C=US, O=YOUR_ORG, 
    CN=admin_name" > /tmp/admin_cert
    
  4. Set up the Screen.

To Create the Certificate on a Solaris 9 Administration Station
  1. Open a terminal window and become root, if not already.

  2. Create the IKE self-generated certificate.


    # ikecert certlocal  -ks -m 512 -t rsa-md5 -D "C=US, 
    O=YOUR_ORG, CN=admin_name"
    
  3. Export the Administration Station's certificate to a file.


    # ikecert certdb  -e "C=US, O=YOUR_ORG, 
    CN=admin_name" > /tmp/admin_cert
    
  4. Set up the Screen.