Getting Started as a Trusted Extensions Administrator (Task Map)

Familiarize yourself with the following procedures before administering Trusted Extensions.

The following task map describes common procedures and pointers to instructions.

Task	Description	For Instructions
Log in.	Logs you in securely.	Logging In to Trusted Extensions in Oracle Solaris Trusted Extensions User Guide
Perform common user tasks on a desktop.	These tasks include: Configuring your workspaces Using workspaces at different labels Accessing Trusted Extensions man pages	Working on a Labeled System in Oracle Solaris Trusted Extensions User Guide
Perform tasks that require the trusted path.	These tasks include: Allocating a device Changing your password Changing the label of a workspace	Performing Trusted Actions in Oracle Solaris Trusted Extensions User Guide
Create useful roles.	Creates administrative roles for your site. The Security Administrator role is a useful role.	Role Creation in Trusted Extensions Create the Security Administrator Role in Trusted Extensions
Use the `root` role.	Prevents anonymous login by `root`. This task is done once per system.	The `root` role is created at installation by the install media.
Assume a role.	Enters the global zone in a role. All administrative tasks are performed in the global zone.	How to Enter the Global Zone in Trusted Extensions
Exit a role workspace and become regular user.	Leaves the global zone.	How to Exit the Global Zone in Trusted Extensions
Administer device allocation.	Uses the Device Manager – Administration GUI.	Managing Devices in Trusted Extensions (Task Map)

How to Enter the Global Zone in Trusted Extensions

By assuming a role, you enter the global zone in Trusted Extensions. Administration of the entire system is possible only from the global zone. Only superuser or a role can enter the global zone.

After assuming a role, the role can create a workspace at a user label to edit administration files in a labeled zone.

For troubleshooting purposes, you can also enter the global zone by starting a Failsafe session. For details, see How to Log In to a Failsafe Session in Trusted Extensions.

Before You Begin

You have created one or more roles, or you plan to enter the global zone as superuser. For pointers, see Role Creation in Trusted Extensions.

Use a trusted mechanism.
Click your user name in the trusted stripe and choose a role.
If you have been assigned a role, the role names are displayed in a list.
For the location and significance of Trusted Extensions desktop features, see Chapter 4, Elements of Trusted Extensions (Reference), in Oracle Solaris Trusted Extensions User Guide.
At the prompt, type the role password.
In Trusted GNOME, the current workspace changes to the role workspace.
Click the role name on the trusted stripe, and from the menu, select a different role or user. This action changes the current workspace to the process of the new role or user.

How to Exit the Global Zone in Trusted Extensions

Before You Begin

You are in the global zone.

On the Trusted GNOME desktop, click your role name in the trusted stripe.
When you click the role name, your user name and a list of roles that you can assume is displayed. When you select your user name, all subsequent windows that you create in that workspace are created by the selected name. The windows that you previously created on the current desktop continue to display at the name and label of the role.

Skip Navigation Links
Exit Print View
	Oracle Solaris Trusted Extensions Configuration and Administration Oracle Solaris 11 Express 11/10