Sun Secure Global Desktop 4.5 User Guide Sun Microsystems, Inc. www.sun.com Part No. 820-6690-10 April 2009, Revision 01 Submit comments about this document at: http://docs.sun.
Copyright 2007-2009 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, California 95054, U.S.A. All rights reserved. Sun Microsystems, Inc. has intellectual property rights relating to technology that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed at http://www.sun.com/patents and one or more additional patents or pending patent applications in the U.S. and in other countries. U.S.
Contents Preface 1.
Session Toolbars for Controlling an Application Resumability Settings for Applications 12 Do I Lose My Work If I Close My Browser? 13 Changing the Way an Application is Displayed 13 Copying Information Between Applications 11 14 Running Applications Using a Different User Name and Password Using a Single-Button Apple Macintosh Mouse Printing 14 15 15 Managing Your Print Jobs 15 Printing From UNIX Platform Applications 16 Printing from UNIX Platform Applications to UNIX, Linux, or Mac OS X P
Displaying a Webtop Running Applications Printing 25 26 26 Using Application Groups Using My Desktop Logging Out 26 26 27 Logging Out of the SGD Webtop 27 Logging Out Using the Start or Launch Menu A. Installing the SGD Client Manually Installing the SGD Client 29 29 ▼ How to Install the SGD Client Manually on Microsoft Windows Platforms 30 ▼ How to Install the SGD Client Manually on Solaris OS and Linux Platforms 31 Logging In Using the SGD Client ▼ B.
Glossary Index vi 43 47 Sun Secure Global Desktop 4.
Preface The Sun Secure Global Desktop 4.5 User Guide provides an introduction to using Sun Secure Global Desktop software (SGD). The manual provides information on how you can use SGD to run applications. This document is intended for both new and existing users of SGD. How This Book Is Organized Chapter 1 describes how to use SGD to run applications from your computer. Appendix A describes how to install the SGD Client manually on your computer.
http://docs.sun.com/app/docs/coll/1706.4 Application Title Part Number Format Location Release Notes Sun Secure Global Desktop 4.5 Release Notes 820-6687-10 HTML PDF Online Software CD and online Installation Sun Secure Global Desktop 4.5 Installation Guide 820-6688-10 HTML PDF Online Software CD and online Administration Sun Secure Global Desktop 4.5 Administration Guide 820-6689-10 HTML PDF Online User Sun Secure Global Desktop 4.
CHAPTER 1 Using Sun Secure Global Desktop Sun Secure Global Desktop software (SGD) provides you with secure, remote access to desktop applications running on application servers. You can be writing a report on a computer in the office, administering UNIX® platform servers on your PC at home, or checking stock databases with a laptop on the train, SGD enables you do all this. SGD also enables you to run applications over a secure network connection to safeguard corporate and private data.
The following table describes the user names and passwords you might require when using SGD. User Name and Password Description SGD server When you log in to SGD, you need to type a user name and password so that the SGD server knows who you are and can display your webtop. You do not need to type this password again until the next time you log in to SGD. You might also be able to log in to SGD anonymously, that is, without typing a user name and password.
FIGURE 1-1 SGD Login Dialog Box Note – If JavaScript is not enabled in your browser, a warning message is displayed beneath the login dialog box. 2. Type in your SGD user name and password. 3. Click the Login button. While SGD is starting up, the splash screen is shown. See FIGURE 1-2.
FIGURE 1-2 SGD Splash Screen The Initial Connection dialog box is shown. This is a security message that is shown the first time you connect to an SGD server. See FIGURE 1-3. FIGURE 1-3 Initial Connection Dialog Box 4. (Optional) Click the View Certificate button. The Certificate Details dialog box is shown. This screen enables you to view security certificate details, to ensure that the server you are connecting to can be trusted. See FIGURE 1-4. 4 Sun Secure Global Desktop 4.
FIGURE 1-4 Certificate Details Dialog Box a. Check that the Validity and Subject fields are correct. b. Click Close. The Initial Connection dialog box is redisplayed. 5. If the certificate details are correct, click Yes to agree to the connection. Once you have clicked Yes, you do not see the security message again unless there is a problem with the connection. The SGD Client icon is displayed in the task bar, as shown in FIGURE 1-5. FIGURE 1-5 SGD Client Task Bar Icon The SGD webtop is displayed.
FIGURE 1-6 Potentially Unsafe Connection Message If you see a Potentially Unsafe Connection message, do the following. ▼ How To Deal With a Potentially Unsafe Connection Message 1. Click the View Certificate button and make a note of the certificate details. 2. Click the Reject button to cancel the connection and contact your SGD Administrator. The SGD Webtop Your webtop is a special web page that lists the applications you can run through SGD and enables you to run them.
FIGURE 1-7 SGD Webtop # Name Description 1 Menu bar Includes Logout, Help, and Info buttons 2 Applications area Lists the applications that you can run 3 Printing area Enables you to manage your print jobs 4 Information area Displays error messages and system information The different areas of the webtop are described in the following sections. Menu Bar This area of the webtop includes buttons for logging out and for displaying help and diagnostics information.
From the webtop, you can display a page containing diagnostics information. This is useful if you need to contact Support. Click the Info button on your webtop and then click the Detailed Diagnostics link in the Information area. Applications Area The Applications area of the webtop is used to display the list of applications that you can run through SGD. See “Using Applications” on page 9 for more information about running applications.
FIGURE 1-8 User Name Displayed on the Webtop Toolbar If the toolbar says you are logged in as “Guest user” then you either logged in without typing a user name and password, known as an anonymous login, or you are using a webtop that is shared with other users. These details also display on the webtop when you first log in. Secure Connection Status If you have a secure connection, the locked padlock symbol is displayed below the webtop menu bar.
You do not have to exit an application before starting another. Just click another link. SGD Administrators configure how the applications display. Note – You cannot start a Windows application using a different Windows domain name. Ask an SGD Administrator to do this for you. If you have difficulties, contact your SGD Administrator. You can also run your applications using links in the desktop Start or Launch Menu. See “Using SGD From Your Desktop Start or Launch Menu” on page 23 for more details.
■ Make sure you supplied the correct user name and password for the application server. If SGD does not prompt you for this information, hold down the Shift key and click the link to force the prompt to appear. ■ Log out of SGD and exit your browser, then restart it and log in to SGD again. Click the application’s link. ■ Contact an SGD Administrator, supplying all the information shown in the error message.
■ Click the Resume All link to resume all suspended applications ■ Click the Cancel All link to end all running or suspended applications FIGURE 1-12 Links for Managing All Application Sessions Resumability Settings for Applications To see if an application is resumable or not, point to its link on your webtop and look at the popup window that is displayed. The available resumability settings for an application are described in the following table.
However, if the SGD Client exits unexpectedly, or if you close down the SGD Client, your ability to resume an application depends upon how your SGD Administrator configured the application and how you logged in to SGD. ■ If an application is configured to be “Not Resumable”, then it exits when the SGD Client exits or is closed down. Typically, applications are configured to be Not Resumable if they are used only for short periods at a time, and are not business-critical functions.
Sun Secure Global Desktop Software: Copied data not available to this application For character applications, click with the right mouse button, and then click Copy or Paste as appropriate. To select a column of text, hold down the Shift key while selecting the text. You can copy information between different types of application, for example from an xterm running on an application server to a text editor running on your computer. You can only copy and paste graphics to or from Windows applications.
■ To simulate a right mouse button click, press Command while clicking the mouse button Printing SGD enables you to print from your applications to a printer attached to your computer. Usually, you can choose the printer you want to print to. However, for some applications you might only be able to print to your default printer. Managing Your Print Jobs You use the Printing area of the webtop to manage your print jobs.
To manage print jobs individually, click the List All Jobs button. The webtop displays a list of all the print jobs in the queue, along with information about the job. For example, the number of copies and the printer to use. If you have paused printing, click To cancel a print job, click to print just that one print job. . Printing From UNIX Platform Applications SGD enables you to print from UNIX platform applications to a printer attached to your computer.
You can also print by specifying the universal naming convention (UNC) name of a network printer that is accessible from the computer. To use a UNC name, you must enclose the printer name in quotes and escape backslashes as appropriate for the shell. For example: $ lp -d ’\\\\PRTSERVER\\HPLJ5’ file To avoid problems with UNC names, you can print using a “friendly” name such as: $ lp -d label-printer file In this case, the friendly name must be configured by your SGD Administrator.
FIGURE 1-15 Microsoft Windows Print Dialog Box, With an SGD Client Printer Selected See “Configuring Your Client Printers” on page 37 for more information on how you can configure your own client printers. Printing from Windows Applications to a Windows Computer If you print from a Microsoft Windows application to a Microsoft Windows computer, you see some, all, or none of the printers that are attached to the client and also the printers that are attached directly to the application server.
On Microsoft Windows computers, the Universal PDF Printer printer displays the print job as a PDF file in Adobe Reader, which then prints the PDF file to your default printer. The Universal PDF Viewer printer displays the print job as a PDF file in Adobe Reader. You can then decide whether to print or save the PDF file.
Printing Troubleshooting If you print from an application and the output does not appear, check the following. Possible Cause More Information Have You Paused Printing? Make sure that your webtop indicates that printing is not paused. See “Printing Paused Icon” on page 16. Is Your Printer Set Up Correctly? Make sure your printer is set up correctly. For example, by printing a web page to the printer from a browser. Have You Printed To the Correct Printer? You can choose a printer to print to.
Client Settings Each time the SGD Client starts it uses a profile. A profile is a group of configuration settings that control the SGD Client. The settings in a profile define the following: ■ How the SGD Client connects to an SGD server. For example, the URL to connect to and the proxy server to use. ■ The operating mode of the SGD Client.
▼ How To Create a Group 1. On the webtop, click the Edit button. 2. Click the Edit Groups tab. 3. Click the Add New Group button. Type a name for the group. In Choose Your Content, select the check boxes for the applications and documents you want to include in the group. 4. Set the display options for the group. To hide the applications and the group so that they do not display on your webtop, you deselect the check box next to I Want to See This Group on My Webtop When I Log In.
FIGURE 1-17 Group Displayed on a Webtop, Showing Group Contents A separator line to show you which applications are in the group is also displayed. 7. Click the triangle to hide and show the applications in the group. FIGURE 1-18 Group Displayed on a Webtop, Hiding Group Contents You can add as many groups as you like. You can change or delete a group whenever you like. After making a change you must click Update.
1. Start a browser and go to the SGD login URL. The SGD login URL is at http://server.example.com/sgd, where server.example.com is the name of the SGD server. 2. Log in and display a webtop. 3. Edit your profile as follows. a. Click the Edit button in the Applications area of the webtop, and then click the Client Settings tab. b. Select the Add Applications to Start Menu check box. c. To start the SGD Client when you log in to your desktop, select the Connect on System Login check box. d.
FIGURE 1-19 Logging In Using the Desktop Start or Launch Menu Note – If you log in to more than one SGD server, there is a Login link for each server in the Start or Launch Menu. Once you have logged in to SGD, the Start or Launch Menu is updated with the links for the applications you can run through SGD, as shown in FIGURE 1-20. To use SGD in Integrated mode, you always log in using the Start or Launch Menu.
Unlike the webtop, you cannot suspend and resume individual applications. Instead, when you log out of SGD, your running applications are either suspended or ended, depending on their resumability settings. See “Suspending and Resuming Applications” on page 11. When you log in again, any suspended applications you have are resumed automatically. See “Using Applications” on page 9 for more information about running applications using SGD.
Note – You cannot suspend or resume your My Desktop application. You must log out of the desktop application as normal. Logging Out The log out procedure varies, depending on whether you are using the SGD webtop or you are using SGD from the desktop Start or Launch Menu. Logging Out of the SGD Webtop Always log out of SGD before closing your browser. Click the Logout button on your webtop and click OK when prompted for confirmation. See FIGURE 1-21.
28 Sun Secure Global Desktop 4.
APPENDIX A Installing the SGD Client Manually To use Sun Secure Global Desktop (SGD) with a browser that does not have Java technology enabled, you must download the SGD Client manually and install it on your computer. Installing the SGD Client The SGD Client is usually installed automatically when you connect to an SGD server using a browser with Java technology enabled. Follow these instructions only if you want to install the SGD Client manually.
▼ How to Install the SGD Client Manually on Microsoft Windows Platforms 1. In a browser, go to an SGD web server. For example, http://server.example.com. The SGD web server Welcome page is displayed, as shown in FIGURE A-1. FIGURE A-1 SGD Welcome Page 2. (Optional) Select your preferred language. Click one of the flags at the top of the Welcome page. The Welcome page is displayed in the selected language. 3. Click Install the Sun Secure Global Desktop Client.
4. Download the SGD Client installation program. Click Download the Secure Global Desktop Client for Microsoft Windows. Save the installation program to a temporary directory on the PC. The SGD Client installation program is sgdcwin-lang.exe, where lang is the selected language. 5. Change to the temporary directory and install the SGD Client. Double-click sgdcwin-lang.exe and follow the instructions on the screen. ▼ How to Install the SGD Client Manually on Solaris OS and Linux Platforms 1.
FIGURE A-2 SGD Welcome Page 2. (Optional) Select your preferred language. Click one of the flags at the top of the Welcome page. The Welcome page is displayed in the selected language. 3. Click Install the Sun Secure Global Desktop Client. The Sun Secure Global Desktop Client page is displayed. 4. Download the SGD Client tar file. Click Download the Secure Global Desktop Client for platform, where platform is the operating system for your computer platform.
5. Change to the temporary directory and extract the tar file. $ cd /tempdir $ tar xvf tarfile 6. Install the SGD Client. $ sh sgdc/install Follow the instructions on the screen. Logging In Using the SGD Client On UNIX and Linux platforms, you start the SGD Client with the ttatcc command. On Microsoft Windows platforms, you can either start the SGD Client as part of the installation or click Start → Programs → Sun Secure Global Desktop → Login.
FIGURE A-3 Client Connection Settings Dialog Box 2. Type in the Server URL for the SGD server. 3. Select a Proxy Settings option. If you select the Use HTTP Proxy Server option, type the proxy server host name and port in the fields provided. 4. Click the Connect button to connect to the SGD server. Your default browser is loaded and the SGD Login dialog is displayed. 5. Log in to SGD. Type in your SGD user name and password at the SGD Login dialog. Click the Login button to log in to SGD. 6.
APPENDIX B Advanced Configuration This appendix includes configuration information for advanced users of Sun Secure Global Desktop (SGD).
Changing the Login Page URL You use the Login URL setting to specify the location of the login page on the SGD server. This client setting applies when you are logging in to SGD from the desktop Start or Launch Menu. The Login URL is usually http://server.example.com/sgd/index.jsp, where server.example.com is the name of an SGD server. Changing the Language You use the Preferred Language setting to specify the language used for the login page and on-screen messages.
Printing If you are using a UNIX, Linux, or Mac OS X computer, you can override the settings made by the SGD Administrator and configure printers on the computer. Configuring Your Client Printers Typically, your SGD Administrator configures the available client printers for you to use. However, if you are printing from a UNIX, Linux, or Mac OS X platform computer, you can override these settings and configure your own client printers.
Accessing the Drives on Your Computer Your SGD Administrator configures whether you can access the drives on your computer from applications running through SGD. If you are using a UNIX, Linux, or Mac OS X platform computer, by default your home directory is mapped to a drive called “My Home.” But you can configure the drives you want to use with applications. This is done by editing your client configuration file, $HOME/.tarantella/native-cdm-config.
APPENDIX C Profile Settings This appendix describes the settings you can configure in a profile. Description of Profile Settings Each time the SGD Client starts it uses a profile. A profile is a group of configuration settings that control the SGD Client. The following table lists the settings available in a profile, with a description of what they do.
If you are unsure about a setting, ask your SGD Administrator for help. Setting Description Login URL The SGD Uniform Resource Locator (URL) to use for the profile. This is usually http://server.example.com/sgd, where server.example.com is the name of an SGD server. If you use a browser to display the SGD webtop, the URL is loaded automatically in your default browser so that you can log in and access your webtop.
Setting Description Check for Local X Server If enabled, the SGD Client checks whether there is an X server running on the computer. Enabling this option can improve performance when launching X applications that are configured to display using an X server on the computer. This setting only applies to Windows computers. This setting is disabled by default. Proxy Settings Settings that control how the SGD Client determines what proxy servers to use.
42 Sun Secure Global Desktop 4.
Glossary This chapter defines terms used with the Sun Secure Global Desktop (SGD) software. A application A program running on a server. SGD lets you access your applications using a browser on any computer. B browser Software you run on your computer to access SGD. For example, Microsoft Internet Explorer or Mozilla Firefox. I Integrated mode The mode of operation when you run SGD from the desktop Start or Launch Menu. Applications are started by clicking links in the Start or Launch Menu.
L link Provides access to documents and applications on your webtop. Usually an icon with a label. P password profile A secret set of characters that, together with your user name, proves your identity to a server. You can have different passwords, and user names, on different servers. A group of configuration settings that control the SGD Client. S server SGD Administrators SGD server A computer, or software, that provides services to other computers. The SGD server enables you to see your webtop.
W webtop The special web page you see when you log in to SGD. The webtop provides access to your applications.
46 Sun Secure Global Desktop 4.
Index A C Alternative PDF Viewer, specifying, 36 anonymous users closing the browser, 13 webtop username, 9 Apple Macintosh mouse, single-button, 15 applications adding to the webtop, 8 authentication, 14 cancelling, 11 copying and pasting between, 14 error messages, 11 groups, 21 number of instances, 10 printing, 16, 17 resuming, 11 running, 9 running from the Start Menu, 10, 26 scaling the display, 13 starting, 9 suspending, 11 Applications area, 8 authentication applications, 14 cancelling applicatio
J Java technology-enabled web browser, 2 JavaScript, 2 L language, changing, 36 logging out of SGD, 27 login URL, 2 changing, 36 M Menu bar, 7 My Desktop, 26 P pasting, 14 PDF printing, 19 changing the default viewer, 36 Potentially Unsafe Connection, 5 printing managing print jobs, 15 PDF files, 19 troubleshooting problems with, 20 UNIX platform applications, 16 user configuration, 37 Windows applications, 17 Printing area, 8 proxy settings, changing, 36 R resuming applications, 10, 11 S scalable wind
