Manuels d'utilisation pour Sun Microsystems Sun Crypto Accelerator 4000

Table des matières

• Declaration of Conformity (Fiber MMF)

  3
• Declaration of Conformity (Copper UTP)

  4
• Regulatory Compliance Statements

  7
• Contents

  11
• Tables

  19
• Preface

  23
• Product Overview

  27
  • Product Features

    27
    • Key Protocols and Interfaces

      27
    • Key Features

      28
    • Supported Applications

      28
    • Supported Cryptographic Protocols

      28
    • Diagnostic Support

      29
    • Cryptographic Algorithm Acceleration

      29
      • Supported Cryptographic Algorithms

        29
      • Bulk Encryption

        30
  • Hardware Overview

    31
    • IPsec Hardware Acceleration

      31
    • Sun Crypto Accelerator 4000 MMF Adapter

      32
      • LED Displays

        32
    • Sun Crypto Accelerator 4000 UTP Adapter

      33
      • LED Displays

        34
    • Dynamic Reconfiguration and High Availability

      35
    • Load Sharing

      35
  • Hardware and Software Requirements

    36
    • Required Patches

      36
      • Apache Web Server Patch

        36
    • Solaris 8 Patches

      37
    • Solaris 9 Patches

      37
• Installing the Sun Crypto Accelerator 4000 Board

  39
  • Handling the Board

    39
  • Installing the Board

    40
    • To Install the Hardware

      40
  • Installing the Sun Crypto Accelerator 4000 Software

    42
    • To Install the Software

      42
    • Installing the Optional Packages

      44
  • Directories and Files

    45
  • Removing the Software

    47
    • To Remove the Software

      47
• Configuring Driver Parameters

  49
  • Sun Crypto Accelerator 4000 Ethernet Device Driver (vca) Parameters

    49
    • Driver Parameter Values and Definitions

      50
    • Advertised Link Parameters

      51
    • Flow Control Parameters

      53
    • Gigabit Forced Mode Parameter

      54
    • Interpacket Gap Parameters

      54
    • Interrupt Parameters

      56
    • Random Early Drop Parameters

      56
    • PCI Bus Interface Parameters

      58
  • Setting vca Driver Parameters

    59
    • Setting Parameters Using the ndd Utility

      59
      • To Specify Device Instances for the ndd Utility

        59
      • Noninteractive and Interactive Modes

        60
      • Setting Autonegotiation or Forced Mode

        62
      • To Disable Autonegotiation Mode

        63
    • Setting Parameters Using the vca.confFile

      64
    • To Set Driver Parameters Using a vca.conf File

      64
      • Setting Parameters for All Sun Crypto Accelerator 4000 vca Devices With the vca.conf File

        65
      • To Set Parameters for All Sun Crypto Accelerator 4000 vca Devices With the vca.conf File

        66
      • Example vca.conf File

        66
  • Enabling Autonegotiation or Forced Mode for Link Parameters With the OpenBoot PROM

    67
  • Sun Crypto Accelerator 4000 Cryptographic and Ethernet Driver Operating Statistics

    69
    • Cryptographic Driver Statistics

      69
    • Ethernet Driver Statistics

      70
    • Reporting the Link Partner Capabilities

      74
      • To Check Link Partner Settings

        77
  • Network Configuration

    78
    • Configuring the Network Host Files

      78
• Administering the Sun Crypto Accelerator 4000 Board With the vcaadm and vcadiag Utilities

  81
  • Using vcaadm

    81
    • Modes of Operation

      82
      • Single-Command Mode

        83
      • File Mode

        83
      • Interactive Mode

        84
  • Logging In and Out With vcaadm

    84
    • Logging In to a Board With vcaadm

      85
      • Logging In to a New Board

        85
      • Logging In to a Board With a Changed Remote Access Key

        86
      • vcaadm Prompt

        87
    • Logging Out of a Board With vcaadm

      87
  • Entering Commands With vcaadm

    89
    • Getting Help for Commands

      90
    • Quitting the vcaadm Program in Interactive Mode

      91
  • Initializing the Sun Crypto Accelerator 4000 Board With vcaadm

    91
    • To Initialize the Sun Crypto Accelerator 4000 Board With a New Keystore

      92
    • Initializing the Sun Crypto Accelerator 4000 Board to Use an Existing Keystore

      93
    • To Initialize the Sun Crypto Accelerator 4000 Board to Use an Existing Keystore

      94
  • Managing Keystores With vcaadm

    95
    • Naming Requirements

      95
    • Password Requirements

      95
      • Setting the Password Requirements

        96
    • Populating a Keystore With Security Officers

      96
    • Populating a Keystore With Users

      97
    • Listing Users and Security Officers

      98
    • Changing Passwords

      98
    • Enabling or Disabling Users

      99
    • Deleting Users

      100
    • Deleting Security Officers

      100
    • Backing Up the Master Key

      100
    • Locking the Keystore to Prevent Backups

      101
  • Managing Boards With vcaadm

    102
    • Setting the Auto-Logout Time

      102
    • Displaying Board Status

      103
    • Loading New Firmware

      104
    • Resetting a Sun Crypto Accelerator 4000 Board

      104
    • Rekeying a Sun Crypto Accelerator 4000 Board

      105
    • Zeroizing a Sun Crypto Accelerator 4000 Board

      106
    • Using the vcaadm diagnostics Command

      106
  • Using vcadiag

    107
• Configuring Sun ONE Server Software for Use With the Sun Crypto Accelerator 4000 Board

  111
  • Administering Security for Sun ONE Web Servers

    111
    • Concepts and Terminology

      112
    • Tokens and Token Files

      113
      • Token Files

        113
    • Enabling and Disabling Bulk Encryption

      114
  • Configuring Sun ONE Web Servers

    115
    • Passwords

      115
    • Populating a Keystore

      116
      • To Populate a Keystore

        116
    • Overview for Enabling Sun ONE Web Servers

      117
  • Installing and Configuring Sun ONE Web Server 4.1

    118
    • Installing Sun ONE Web Server 4.1

      118
      • To Install Sun ONE Web Server 4.1

        118
      • To Create a Trust Database

        119
      • To Generate a Server Certificate

        121
      • To Install the Server Certificate

        124
    • Configuring Sun ONE Web Server 4.1 for SSL

      125
      • To Configure the Sun ONE Web Server 4.1

        125
  • Installing and Configuring Sun ONE Web Server 6.0

    127
    • Installing Sun ONE Web Server 6.0

      127
      • To Install Sun ONE Web Server 6.0

        127
      • To Create a Trust Database

        128
      • To Generate a Server Certificate

        130
      • To Install the Server Certificate

        133
    • Configuring Sun ONE Web Server 6.0 for SSL

      134
      • To Configure the Sun ONE Web Server 6.0

        134
• Configuring Apache Web Servers for Use With the Sun Crypto Accelerator 4000 Board

  137
  • Enabling the Board for Apache Web Servers

    138
    • Enabling Apache Web Servers

      138
      • To Enable the Apache Web Server

        138
    • Creating a Certificate

      140
      • To Create a Certificate

        141
• Diagnostics and Troubleshooting

  145
  • SunVTS Diagnostic Software

    145
    • Installing SunVTS netlbtest and nettest Support for the vca Driver

      146
    • Using SunVTS Software to Perform vcatest, nettest, and netlbtest

      147
    • To Perform vcatest

      147
      • Test Parameter Options for vcatest

        149
      • vcatest Command-Line Syntax

        149
    • To Perform netlbtest

      150
    • To Perform nettest

      151
  • Using kstat to Determine Cryptographic Activity

    154
  • Using the OpenBoot PROM FCode Self- Test

    155
    • Performing the Ethernet FCode Self-Test Diagnostic

      155
  • Troubleshooting the Sun Crypto Accelerator 4000 Board

    158
    • show-devs

      158
    • .properties

      159
    • watch-net

      160
• Specifications

  161
  • Sun Crypto Accelerator 4000 MMF Adapter

    161
    • Connectors

      161
    • Physical Dimensions

      163
    • Performance Specifications

      163
    • Power Requirements

      163
    • Interface Specifications

      164
    • Environmental Specifications

      164
  • Sun Crypto Accelerator 4000 UTP Adapter

    164
    • Connectors

      164
    • Physical Dimensions

      166
    • Performance Specifications

      166
    • Power Requirements

      166
    • Interface Specifications

      167
    • Environmental Specifications

      167
• SSL Configuration Directives for Apache Web Servers

  169
• Building Applications for Use With the Sun Crypto Accelerator 4000 Board

  177
• Software Licenses

  179
  • Third Party License Terms

    182
• Manual Pages

  187
• Zeroizing the Hardware

  189
  • Zeroizing the Sun Crypto Accelerator 4000 Hardware to the Factory State

    189
    • To Zeroize the Sun Crypto Accelerator 4000 Board With the Hardware Jumper

      190
• Frequently Asked Questions

  193
  • How Do I Configure the Web Server to Startup Without User Interaction on Reboot?

    193
  • To Create an Encrypted Key for Automatic Startup of Apache Web Servers on Reboot

    193
  • To Create an Encrypted Key for Automatic Startup of Sun ONE Web Servers on Reboot

    194
  • How Do I Assign Different MAC Addresses to Multiple Boards Installed in the Same Server?

    194
  • To Assign Different MAC Addresses From a Terminal Window

    195
  • To Assign Different MAC Addresses From the OpenBoot PROM Level

    195
  • How Can I Configure the Sun Crypto Accelerator 1000 for Use With Apache After I Have Installed th...

    195
  • How Do I Self-Sign a Certificate for Testing?

    196
• Index

  197