Справочник ПользователяСодержаниеDeclaration of Conformity (Fiber MMF)3Declaration of Conformity (Copper UTP)4Regulatory Compliance Statements7Contents11Tables19Preface23Product Overview27Product Features27Key Protocols and Interfaces27Key Features28Supported Applications28Supported Cryptographic Protocols28Diagnostic Support29Cryptographic Algorithm Acceleration29Supported Cryptographic Algorithms29Bulk Encryption30Hardware Overview31IPsec Hardware Acceleration31Sun Crypto Accelerator 4000 MMF Adapter32LED Displays32Sun Crypto Accelerator 4000 UTP Adapter33LED Displays34Dynamic Reconfiguration and High Availability35Load Sharing35Hardware and Software Requirements36Required Patches36Apache Web Server Patch36Solaris 8 Patches37Solaris 9 Patches37Installing the Sun Crypto Accelerator 4000 Board39Handling the Board39Installing the Board40To Install the Hardware40Installing the Sun Crypto Accelerator 4000 Software42To Install the Software42Installing the Optional Packages44Directories and Files45Removing the Software47To Remove the Software47Configuring Driver Parameters49Sun Crypto Accelerator 4000 Ethernet Device Driver (vca) Parameters49Driver Parameter Values and Definitions50Advertised Link Parameters51Flow Control Parameters53Gigabit Forced Mode Parameter54Interpacket Gap Parameters54Interrupt Parameters56Random Early Drop Parameters56PCI Bus Interface Parameters58Setting vca Driver Parameters59Setting Parameters Using the ndd Utility59To Specify Device Instances for the ndd Utility59Noninteractive and Interactive Modes60Setting Autonegotiation or Forced Mode62To Disable Autonegotiation Mode63Setting Parameters Using the vca.confFile64To Set Driver Parameters Using a vca.conf File64Setting Parameters for All Sun Crypto Accelerator 4000 vca Devices With the vca.conf File65To Set Parameters for All Sun Crypto Accelerator 4000 vca Devices With the vca.conf File66Example vca.conf File66Enabling Autonegotiation or Forced Mode for Link Parameters With the OpenBoot PROM67Sun Crypto Accelerator 4000 Cryptographic and Ethernet Driver Operating Statistics69Cryptographic Driver Statistics69Ethernet Driver Statistics70Reporting the Link Partner Capabilities74To Check Link Partner Settings77Network Configuration78Configuring the Network Host Files78Administering the Sun Crypto Accelerator 4000 Board With the vcaadm and vcadiag Utilities81Using vcaadm81Modes of Operation82Single-Command Mode83File Mode83Interactive Mode84Logging In and Out With vcaadm84Logging In to a Board With vcaadm85Logging In to a New Board85Logging In to a Board With a Changed Remote Access Key86vcaadm Prompt87Logging Out of a Board With vcaadm87Entering Commands With vcaadm89Getting Help for Commands90Quitting the vcaadm Program in Interactive Mode91Initializing the Sun Crypto Accelerator 4000 Board With vcaadm91To Initialize the Sun Crypto Accelerator 4000 Board With a New Keystore92Initializing the Sun Crypto Accelerator 4000 Board to Use an Existing Keystore93To Initialize the Sun Crypto Accelerator 4000 Board to Use an Existing Keystore94Managing Keystores With vcaadm95Naming Requirements95Password Requirements95Setting the Password Requirements96Populating a Keystore With Security Officers96Populating a Keystore With Users97Listing Users and Security Officers98Changing Passwords98Enabling or Disabling Users99Deleting Users100Deleting Security Officers100Backing Up the Master Key100Locking the Keystore to Prevent Backups101Managing Boards With vcaadm102Setting the Auto-Logout Time102Displaying Board Status103Loading New Firmware104Resetting a Sun Crypto Accelerator 4000 Board104Rekeying a Sun Crypto Accelerator 4000 Board105Zeroizing a Sun Crypto Accelerator 4000 Board106Using the vcaadm diagnostics Command106Using vcadiag107Configuring Sun ONE Server Software for Use With the Sun Crypto Accelerator 4000 Board111Administering Security for Sun ONE Web Servers111Concepts and Terminology112Tokens and Token Files113Token Files113Enabling and Disabling Bulk Encryption114Configuring Sun ONE Web Servers115Passwords115Populating a Keystore116To Populate a Keystore116Overview for Enabling Sun ONE Web Servers117Installing and Configuring Sun ONE Web Server 4.1118Installing Sun ONE Web Server 4.1118To Install Sun ONE Web Server 4.1118To Create a Trust Database119To Generate a Server Certificate121To Install the Server Certificate124Configuring Sun ONE Web Server 4.1 for SSL125To Configure the Sun ONE Web Server 4.1125Installing and Configuring Sun ONE Web Server 6.0127Installing Sun ONE Web Server 6.0127To Install Sun ONE Web Server 6.0127To Create a Trust Database128To Generate a Server Certificate130To Install the Server Certificate133Configuring Sun ONE Web Server 6.0 for SSL134To Configure the Sun ONE Web Server 6.0134Configuring Apache Web Servers for Use With the Sun Crypto Accelerator 4000 Board137Enabling the Board for Apache Web Servers138Enabling Apache Web Servers138To Enable the Apache Web Server138Creating a Certificate140To Create a Certificate141Diagnostics and Troubleshooting145SunVTS Diagnostic Software145Installing SunVTS netlbtest and nettest Support for the vca Driver146Using SunVTS Software to Perform vcatest, nettest, and netlbtest147To Perform vcatest147Test Parameter Options for vcatest149vcatest Command-Line Syntax149To Perform netlbtest150To Perform nettest151Using kstat to Determine Cryptographic Activity154Using the OpenBoot PROM FCode Self- Test155Performing the Ethernet FCode Self-Test Diagnostic155Troubleshooting the Sun Crypto Accelerator 4000 Board158show-devs158.properties159watch-net160Specifications161Sun Crypto Accelerator 4000 MMF Adapter161Connectors161Physical Dimensions163Performance Specifications163Power Requirements163Interface Specifications164Environmental Specifications164Sun Crypto Accelerator 4000 UTP Adapter164Connectors164Physical Dimensions166Performance Specifications166Power Requirements166Interface Specifications167Environmental Specifications167SSL Configuration Directives for Apache Web Servers169Building Applications for Use With the Sun Crypto Accelerator 4000 Board177Software Licenses179Third Party License Terms182Manual Pages187Zeroizing the Hardware189Zeroizing the Sun Crypto Accelerator 4000 Hardware to the Factory State189To Zeroize the Sun Crypto Accelerator 4000 Board With the Hardware Jumper190Frequently Asked Questions193How Do I Configure the Web Server to Startup Without User Interaction on Reboot?193To Create an Encrypted Key for Automatic Startup of Apache Web Servers on Reboot193To Create an Encrypted Key for Automatic Startup of Sun ONE Web Servers on Reboot194How Do I Assign Different MAC Addresses to Multiple Boards Installed in the Same Server?194To Assign Different MAC Addresses From a Terminal Window195To Assign Different MAC Addresses From the OpenBoot PROM Level195How Can I Configure the Sun Crypto Accelerator 1000 for Use With Apache After I Have Installed th...195How Do I Self-Sign a Certificate for Testing?196Index197Размер: 1,6 МБСтраницы: 204Язык: EnglishПросмотреть