Sun Microsystems 4000 manual Please Recycle

Page 2

Copyright 2003 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, CA 95054 U.S.A. All rights reserved.

This product or document is distributed under licenses restricting its use, copying, distribution, and decompilation. No part of this product or document may be reproduced in any form by any means without prior written authorization of Sun and its licensors, if any. Third-party software, including font technology, is copyrighted and licensed from Sun suppliers.

Parts of the product may be derived from Berkeley BSD systems, licensed from the University of California. UNIX is a registered trademark in the U.S. and other countries, exclusively licensed through X/Open Company, Ltd.

Sun, Sun Microsystems, the Sun logo, SunVTS, AnswerBook2, docs.sun.com, Sun ONE, Sun Enterprise, Sun Enterprise Volume Manager, Sun Fire, SunSolve, Netra, and Solaris are trademarks, registered trademarks, or service marks of Sun Microsystems, Inc. in the U.S. and other countries. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. in the U.S. and other countries. Products bearing SPARC trademarks are based upon an architecture developed by Sun Microsystems, Inc. Netscape is a trademark or registered trademark of Netscape Communications Corporation. This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/). This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software developed by Ralf S. Engelschall <rse@engelschall.com> for use in the mod_ssl project (http://www.modssl.org/).

The OPEN LOOK and Sun™ Graphical User Interface was developed by Sun Microsystems, Inc. for its users and licensees. Sun acknowledges the pioneering efforts of Xerox in researching and developing the concept of visual or graphical user interfaces for the computer industry. Sun holds a non-exclusive license from Xerox to the Xerox Graphical User Interface, which license also covers Sun’s licensees who implement OPEN LOOK GUIs and otherwise comply with Sun’s written license agreements.

DOCUMENTATION IS PROVIDED “AS IS” AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID.

Copyright 2003 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, CA 95054 Etats-Unis. Tous droits réservés.

Ce produit ou document est distribué avec des licences qui en restreignent l’utilisation, la copie, la distribution, et la décompilation. Aucune partie de ce produit ou document ne peut être reproduite sous aucune forme, par quelque moyen que ce soit, sans l’autorisation préalable et écrite de Sun et de ses bailleurs de licence, s’il y en a. Le logiciel détenu par des tiers, et qui comprend la technologie relative aux polices de caractères, est protégé par un copyright et licencié par des fournisseurs de Sun.

Des parties de ce produit pourront être dérivées des systèmes Berkeley BSD licenciés par l’Université de Californie. UNIX est une marque déposée aux Etats-Unis et dans d’autres pays et licenciée exclusivement par X/Open Company, Ltd.

Sun, Sun Microsystems, le logo Sun, SunVTS, AnswerBook2, docs.sun.com, Sun ONE, Sun Enterprise, Sun Enterprise Volume Manager, Sun Fire, SunSolve, Netra, et Solaris sont des marques de fabrique ou des marques déposées, ou marques de service, de Sun Microsystems, Inc. aux Etats-Unis et dans d’autres pays. Toutes les marques SPARC sont utilisées sous licence et sont des marques de fabrique ou des marques déposées de SPARC International, Inc. aux Etats-Unis et dans d’autres pays. Les produits portant les marques SPARC sont basés sur une architecture développée par Sun Microsystems, Inc. Netscape est une marque de Netscape Communications Corporation aux Etats-Unis et dans d’autres pays. Ce produit comprend le logiciel développé par le Project OpenSSL pour l’utilisation dans le Toolkit OpenSSL (http://www.openssl.org/). Ce produit comprend le logiciel cryptographique écrite par Eric Young (eay@cryptsoft.com). Ce produit comprend le logiciel développé par Ralf S. Engelschall <rse@engelschall.com> pour l’utilisation dans le projet mod_ssl (http://www.modssl.org/).

L’interface d’utilisation graphique OPEN LOOK et Sun™ a été développée par Sun Microsystems, Inc. pour ses utilisateurs et licenciés. Sun reconnaît les efforts de pionniers de Xerox pour la recherche et le développement du concept des interfaces d’utilisation visuelle ou graphique pour l’industrie de l’informatique. Sun détient une licence non exclusive de Xerox sur l’interface d’utilisation graphique Xerox, cette licence couvrant également les licenciés de Sun qui mettent en place l’interface d’utilisation graphique OPEN LOOK et qui en outre se conforment aux licences écrites de Sun.

LA DOCUMENTATION EST FOURNIE “EN L’ETAT” ET TOUTES AUTRES CONDITIONS, DECLARATIONS ET GARANTIES EXPRESSES OU TACITES SONT FORMELLEMENT EXCLUES, DANS LA MESURE AUTORISEE PAR LA LOI APPLICABLE, Y COMPRIS NOTAMMENT TOUTE GARANTIE IMPLICITE RELATIVE A LA QUALITE MARCHANDE, A L’APTITUDE A UNE UTILISATION PARTICULIERE OU A L’ABSENCE DE CONTREFAÇON.

Please

Recycle

Image 2
Contents Page Please Recycle European Union Product Family Name Sun Crypto Accelerator 4000 Fiber X4012ASupplementary Information EN 609502000, 3rd Edition IEC 609502000, 3rd EditionSafety Page FCC Class B Notice Regulatory Compliance StatementsFCC Class a Notice ICES-003 Class a Notice Avis NMB-003, Classe a ICES-003 Class B Notice Avis NMB-003, Classe BBsmi Class a Notice Page Contents Installing the Sun Crypto Accelerator 4000 Board Configuring Driver ParametersContents Page Contents Diagnostics and Troubleshooting 119 Third Party License Terms Specifications134 Frequently Asked Questions Manual Pages Zeroizing the HardwareTables 123 106108 137145 141144 146Page Preface How This Book Is OrganizedUsing Unix Commands Solaris Hardware Platform GuideTypographic Conventions Shell PromptsAccessing Sun Documentation Online Sun Welcomes Your CommentsProduct Features Key Protocols and InterfacesSupported Cryptographic Protocols Key FeaturesSupported Applications Supported Cryptographic Algorithms Diagnostic SupportCryptographic Algorithm Acceleration 1IPsec Cryptographic Algorithms# touch /etc/opt/SUNWconn/cryptov2/sslreg Bulk Encryption3Supported SSL Algorithms # rm /etc/opt/SUNWconn/cryptov2/sslregHardware Overview IPsec Hardware Acceleration4Front Panel Display LEDs for the MMF Adapter Sun Crypto Accelerator 4000 MMF AdapterLED Displays Sun Crypto Accelerator 4000 UTP Adapter 2Sun Crypto Accelerator 4000 UTP Adapter5Front Panel Display LEDs for the UTP Adapter Dynamic Reconfiguration and High Availability Load SharingApache Web Server Patch Hardware and Software RequirementsRequired Patches 6Hardware and Software RequirementsThere are currently no required Solaris 9 patches Solaris 8 PatchesSolaris 9 Patches Page Installing the Sun Crypto Accelerator 4000 Board Handling the BoardOk show-devs Installing the BoardTo Install the Hardware Ok cd /pci@8,600000/network@1 Ok .properties # mount -F hsfs -o ro /dev/dsk/c0t6d0s2 /cdrom Installing the Sun Crypto Accelerator 4000 SoftwareTo Install the Software VCA Firmware VCA Administration1Files in the /cdrom/cdrom0 Directory # prtdiag Installing the Optional PackagesInstall the required software packages by typing # modinfo grep CryptoDirectories and Files 2Sun Crypto Accelerator 4000 DirectoriesApplication executables Apache configuration supportEncrypted keys Development Application Support librariesRemoving the Software To Remove the SoftwarePage Configuring Driver Parameters Driver Parameter Values and Definitions 1vca Driver Parameter, Status, and DescriptionsAdvertised Link Parameters 2Operational Mode Parameters Flow Control Parameters 3Read-Write Flow Control Keyword DescriptionsInterpacket Gap Parameters Gigabit Forced Mode Parameter4Gigabit Forced Mode Parameter 5Parameters Defining enable-ipg0and ipg0 7describes the receive interrupt blanking values Interrupt ParametersRandom Early Drop Parameters 7RX Blanking Register for Alias ReadWhen Fifo threshold is greater than 6,144 bytes PCI Bus Interface Parameters 9PCI Bus Interface ParametersTo Specify Device Instances for the ndd Utility Setting vca Driver ParametersSetting Parameters Using the ndd Utility Use the instance number to select the deviceTo modify a parameter value, use the -setoption Noninteractive and Interactive ModesDevice remains selected until you change the selection # ndd -set /dev/vcaN parameter valueNdd utility then prompts you for the name of the parameter # ndd /dev/vcaNSetting Autonegotiation or Forced Mode # ndd /dev/vca# ndd -set /dev/vcaNadv-autoneg-cap To Disable Autonegotiation ModeSet the adv-autoneg-capparameter to Refer to the online manual pages for pathtoinst4 Setting Parameters Using the vca.conf FileTo Set Driver Parameters Using a vca.conf File # grep vca /etc/driveraliases vca pci108e,3de810Device Path Name Example vca.conf File Following is an example vca.conf file11Local Link Network Device Parameters Ok boot netspeed=100,duplex=half Ok boot netspeed=1000,duplex=half,link-clock=masterCryptographic Driver Statistics Ok boot netspeed=10,duplex=autoOk boot netspeed=10 Refer to the Ieee 802.3 documentation for further details13Ethernet Driver Statistics Ethernet Driver Statistics13describes the Ethernet driver statistics 14describes the transmit and receive MAC counters 14TX and RX MAC CountersTx-underrun 15Current Ethernet Link Properties 16Read-Only vca Device Capabilities17Read-Only Link Partner Capabilities Reporting the Link Partner Capabilities17describes the read-only link partner capabilities 18Driver-Specific Parameters Ethernet Transmit CountersEthernet Receive Counters # kstat vcaN To Check Link Partner SettingsAs superuser, type the kstat vcaN command Locate the correct vca interfaces and instance numbers Network ConfigurationConfiguring the Network Host Files Instance number in the previous example is# cat /etc/hosts # Internet host table Localhost Zardoz Loghost Zardoz-11Page Using vcaadm $ PATH=$PATH/opt/SUNWconn/bin $ export Path1shows the options for the vcaadm utility Vcaadm command-line syntax isModes of Operation $ vcaadm -s secofficer create user webadmin Single-Command ModeFile Mode $ vcaadm show user$ vcaadm -f deluser.scr -y Interactive ModeLogging In and Out With vcaadm Logging In to a Board With vcaadm Logging In to a New BoardLogging In to a Board With a Changed Remote Access Key # vcaadm -h hostnameFollowing table describes the vcaadm prompt variables Vcaadm prompt in Interactive mode is displayed as followsLogging Out of a Board With vcaadm 2vcaadm Prompt Variable Definitions3connect Command Optional Parameters Vcaadm connect host hostname dev vca2Tom Entering Commands With vcaadmWebadmin Getting Help for Commands VcaadmvcaN@hostname, secofficer set ?Quitting the vcaadm Program in Interactive Mode Select Fips 140-2 mode or non-FIPS mode Create a keystore name Refer to Naming Requirements onVerify the configuration information Enter the path and password to the backup file Naming Requirements Password RequirementsManaging Keystores With vcaadm Populating a Keystore With Security Officers Setting the Password Requirements5Password Requirement Settings Populating a Keystore With Users Changing Passwords Listing Users and Security OfficersTo enable an account, enter the enable user command Enabling or Disabling UsersBacking Up the Master Key Deleting UsersDeleting Security Officers Locking the Keystore to Prevent Backups Setting the Auto-Logout Time Managing Boards With vcaadmDisplaying Board Status VcaadmvcaN@hostname, secofficer show status Board StatusResetting a Sun Crypto Accelerator 4000 Board Loading New FirmwareRekeying a Sun Crypto Accelerator 4000 Board Key TypesUsing the vcaadm diagnostics Command Zeroizing a Sun Crypto Accelerator 4000 BoardVcadiag command-line syntax is VcaadmvcaN@hostname, secofficer diagnosticsFollowing is an example of the -Foption 1shows the options for the vcadiag utilityFollowing is an example of the -Doption # vcadiag -D vca0Following is an example of the -Roption Following is an example of the -KoptionFollowing is an example of the -Qoption Following is an example of the -ZoptionPage Administering Security for Sun ONE Web Servers Concepts and Terminology Tokens and Token Files Token FilesFollowing is an example of the contents in a token file Enabling and Disabling Bulk Encryption1Passwords Required for Sun ONE Web Servers Configuring Sun ONE Web ServersPasswords To Populate a Keystore Refer to Using vcaadm onPopulating a Keystore Populate the board’s keystore with usersExit vcaadm Create a user with the create user commandOverview for Enabling Sun ONE Web Servers To Install Sun ONE Web Server Installing and Configuring Sun ONE Web ServerInstalling Sun ONE Web Server To Create a Trust Database Start the Sun ONE Web Server 4.1 Administration ServerResponse provides the URL for connecting to your servers Select OK# /opt/SUNWconn/bin/iplsslcfg To Generate a Server Certificate Type 0 to quitCreate Trust Database page is displayed 2Requestor Information Fields This password is the usernamepassword TableSelect the Cryptographic Module you want to use To Install the Server Certificate Fill out the form to install your certificate Configuring Sun ONE Web Server 4.1 for SSLTo Configure the Sun ONE Web Server 3Fields for the Certificate to InstallWeb server is now configured to run in secure mode Set encryption to OnUsr/iplanet/servers # /usr/iplanet/servers/https-admserv/start Start the Sun ONE Web Server 6.0 Administration ServerCreate the trust database for the web server instance # /opt/SUNWconn/crypto/bin/iplsslcfg To Generate a Server Certificate Create Trust Database window is displayed 4Requestor Information Fields To Install the Server Certificate Configuring Sun ONE Web Server 6.0 for SSL 5Fields for the Certificate to InstallSelect the OK button to apply these changes Page 111 Enabling the Board for Apache Web Servers To Enable the Apache Web ServerCreate an httpd configuration file Enabling Apache Web ServersSelect 1 to configure your Apache Web Server to use SSL Create an RSA keypair for your systemProvide a key length between 512 and 2048 bits Creating a CertificateChoose a base name for the key material Create your PEM pass phraseTo Create a Certificate Modify the /etc/apache/httpd.conf file as directed Select 0 to quit when you finish with apsslcfg # /usr/apache/bin/apachectl start Copy your certificate request with the headers fromStart the Apache Web Server Diagnostics and Troubleshooting SunVTS Diagnostic SoftwarePage # /opt/SUNWvts/bin/sunvts To Perform vcatestAs superuser, start SunVTS Page 2describes the vcatest subtests Vcatest Command-Line SyntaxTest Parameter Options for vcatest To Perform netlbtest To Perform nettest VcaN up inet ip-addressplumb Diagnostics and Troubleshooting Using kstat to Determine Cryptographic Activity # kstat Vca0Ok setenv auto-boot? false Using the OpenBoot Prom FCode Self- TestPerforming the Ethernet FCode Self-Test Diagnostic Shut down the systemOk reset-all Reset the systemPerform the self-test using the test command Ok show-netsType the following Set the auto-boot?configuration parameter to trueReset and reboot the system If the test passes, you see the following messagesTroubleshooting the Sun Crypto Accelerator 4000 Board Show-devsProperties Watch-net Connectors Sun Crypto Accelerator 4000 MMF AdapterFigure A-1Sun Crypto Accelerator 4000 MMF Adapter Connector Table A-1SC Connector Link Characteristics Ieee P802.3zPower Requirements Physical DimensionsPerformance Specifications Table A-5Interface Specifications Interface SpecificationsEnvironmental Specifications Table A-6Environmental SpecificationsFigure A-2Sun Crypto Accelerator 4000 UTP Adapter Connector Table A-7Cat-5 Connector Link CharacteristicsTable A-9Performance Specifications Table A-10Power RequirementsTable A-11Interface Specifications Table A-12Environmental SpecificationsPage SSL Configuration Directives for Apache Web Servers Table B-1SSL Protocols Preceding statement is equivalent to SSL Aliases Table B-3SSL Aliases Default value of cipher-specisTable B-4Special Characters to Configure Cipher Preference Context Global, virtual host Table B-5SSL Verify Client LevelsTable B-6SSL Log Level Values Options are listed and described in Table B-7 Table B-7Available SSL OptionsOpt/SUNWconn/cryptov2/include Page Software Licenses Page Appendix D Software Licenses Openssl License Issues Third Party License TermsOriginal SSLeay License Modssl License Appendix D Software Licenses Page Man -M /opt/SUNWconn/man Table E-1Sun Crypto Accelerator 4000 Online Manual PagesKcl2 device driver is a multithreaded loadable kernel module Zeroizing the Hardware Page Reconnect to Sun Crypto Accelerator 4000 board with vcaadm Page Frequently Asked Questions # chmod 400 password.conf Enter the following command at the OBP prompt Enter the following commandReboot the system Boot the operating environmentHow Do I Self-Sign a Certificate for Testing? Advertised link parameters IndexExtension Commands Failsafe mode Page Pause capability Vca driver Command-line syntax, 123 test parameter optionsRx-intr-pktsparameter, 25 URL Vca.conf file, exampleWatch-netcommand Zeroize command, 163 zeroizing the hardware
Related manuals
Manual 334 pages 12.65 Kb Manual 72 pages 39 Kb Manual 28 pages 54.7 Kb

4000 specifications

Sun Microsystems, a pivotal player in the computing industry during the late 20th and early 21st centuries, was renowned for its innovative hardware and software solutions. Among its notable offerings were the Sun-6000, Sun-5000, and Sun-4000 series, powerful workstations and servers designed for a range of enterprise-level applications.

The Sun-6000 series, introduced in the early 1990s, marked a significant advancement in computing performance. These systems were built on the SPARC architecture, which facilitated high levels of processing power and multitasking capabilities. One of the main features of the 6000 series was its scalability, allowing organizations to increase their processing power by adding more modules. It also offered robust graphics performance, making it ideal for scientific visualization and complex data analysis.

Next in line was the Sun-5000 series. Launched shortly after the 6000 series, the 5000 line was celebrated for its reliability and ease of management. This series emphasized a balanced architecture, which combined processing capabilities with ample memory and storage options. Key characteristics included support for multiple processors, leading to improved performance for demanding applications. Additionally, the 5000 systems featured advanced input/output capabilities, ensuring fast data transfers—crucial for database applications and web servers.

Finally, the Sun-4000 series targeted businesses seeking affordable yet potent computing solutions. These servers boasted a modular design, allowing for easy upgrades and maintenance. The 4000 series was particularly notable for its support for various operating systems, including SunOS and Solaris. These systems were engineered to handle a range of workloads, from enterprise resource planning to web hosting, while still fitting into a value-driven budget.

Across all three series, Sun Microsystems prioritized compatibility and integration, ensuring that each system offered seamless connectivity with Sun's software solutions and third-party applications. Their commitment to open standards and interoperability set them apart in the competitive landscape of enterprise computing. Additionally, the use of high-quality components lent the systems durability, making them a wise investment for organizations looking to future-proof their IT infrastructure.

In summary, the Sun-6000, 5000, and 4000 series exemplified Sun Microsystems' ethos of innovation and reliability. These powerful systems catered to diverse business needs, setting benchmarks in performance and functionality that continue to influence modern computing.