Go to main content

Trusted Extensions Configuration and Administration

Exit Print View

Updated: March 2019
 
 

Creating Labeled Zones

The instructions in this section configure labeled zones. You have the option of creating two labeled zones automatically or manually creating zones.


Note -  If you plan to use LDAP, go to Configuring LDAP for Trusted Extensions. You must configure LDAP before you create labeled zones.

Tip  - To create a kernel or an immutable zone that is running Trusted Extensions, follow the instructions for creating a kernel or immutable zone: As part of zone configuration, add the Trusted Extensions packages, enable Trusted Extensions, and then complete the configuration required for Trusted Extensions. Do not make a zone immutable until after configuration is complete.
Table 5  Creating Labeled Zones
Task
Description
For Instructions
1a. Create a default Trusted Extensions configuration.
The txzonemgr -c command creates two labeled zones from the label_encodings file.
1b. Create a default Trusted Extensions configuration by using a GUI.
The txzonemgr script creates a GUI that presents the appropriate tasks as you configure your system.
1c. Manually step through zone creation.
The txzonemgr script creates a GUI that presents the appropriate tasks as you configure your system.
Create a labeled zone by using zone commands.
Creates one labeled zone.
2. (Optional) Link to other systems on your network.
Configure labeled zone network interfaces and connect the global zone and labeled zones to other systems.