Date: 26-Nov-2009 URL: global/training/catalog/courses/SC-325-S10.xml

Solaris Trusted Extensions Installation and Setup (SC-325-S10)

The Solaris Trusted Extensions Installation and Setup course provides students with the knowledge to install Solaris Trusted Extensions software onto a system running the Solaris 10 Operating System. The course provides an overview of the features and functionality of Solaris Trusted Extensions. The factors that affect installation and configuration decisions are covered in detail. Various configuration options are presented along with the advantages and disadvantages of each option. After installing the Trusted Extensions software, the systems are configured with labeled zones and the course begins to examine different network configurations. The course teaches students how to design and configure the security label mechanisms, and how to use extended security features of the two supported window managers: Trusted CDE and Trusted JDS.

»	Details below

Languages

English

Who Can Benefit

Students who can benefit from this course are system administrators and security administrators who are responsible for installing, configuring and managing labeled systems. Systems integrators and designers of classified government systems or commercial systems with high-security data protection needs will also benefit.

Prerequisites

To succeed in this course, students should be able to:

Install the Solaris 10 operating system
Administer Solaris 10 systems
Display an understanding of data separation requirements in high-security environments
Perform basic Solaris network configuration tasks
Configure Solaris 10 system features such as zones and file systems

Skills Gained

Upon completion of this course, students should be able to:

Install the Trusted Extensions package onto a Solaris 10 system
Create labeled zones
Configure labeled zones
Configure labeled networking in the labeled zones
Login to Trusted Extensions and use the TX-specific features of the Trusted CDE and Trusted JDS window environments
Design a security labeling scheme
Implement a security labeling scheme with the label_encodings data base

Related Courses

Before:

Solaris 10 Features for Experienced Solaris System Administrators (SA-225-S10)
Solaris 10 ZFS Administration (SA-229-S10)
Solaris 10 Containers (SA-230-S10)

After:

Course Content

Module 1 - Introducing Trusted Extensions Features

Describe the history of Trusted Solaris and Trusted Extensions
Describe the Common Criteria requirements
Examine the importance of Mandatory Access Controls
Describe the features of Trusted Extensions

Module 2 - Trusted Extensions Installation

Understand the relationship between Trusted Extensions (TX) software and the Solaris 10 Operating System
Determine the pre-installation implementation considerations
Install the Trusted Extensions packages

Module 3 - Trusted Extensions Configuration

Use the Solaris Management Console and other Trusted Extensions GUIs to configure TX options
Configure the network options for TX systems
Create labeled zones
Create system and security administration roles
Add users to assume roles

Module 4 - Access Controls

Describe the differences between Discretionary Access Controls (DAC) and Mandatory Access Controls (MAC)
Use Mandatory Access Control) components and features
Use the Trusted Extensions commands for manipulating and displaying labels

Module 5 - User Interface Changes: Trusted CDE and TJDS

Log in to a TX system and use the CDE window manager
Log in to a TX system and use the TJDS window manager
Understand how to change workspace labels
Log in to the Trusted Path (global zone)
Understand the capabilities of the global zone versus the labeled zones
Set up automatic dotfile creation

Module 6 - Configuring and Installing the label_encodings File

Understand the purpose and uses of the label_encodings file
Understand the required and optional sections of the label_encodings file
Modify the label_encodings file to use your site labels, clearances and settings