Chat now with support
Chat mit Support

Identity Manager 9.1.3 - Password Capture Agent Administration Guide

The One Identity Manager Password Capture Agent Managing the Password Capture Agent Fine-tuning automated password synchronization The Password Capture Agent Windows PowerShell module Event log for the Password Capture Agent Customizing security for the Password Capture Agent service Achieving high availability for the web service with Windows Network Load Balancing Installing the Password Capture Agent with MSIEXEC Certificate lookup options Known error codes

Step 1: Install the Windows Network Load Balancing service

This step shows you how to install the required Windows feature to allow the configuration of Network Load Balancing. You should complete this task on all hosts that are to be part of this cluster before continuing with the next step.

To install the required Windows feature (manually)

  1. Start the Server Manager.

  2. Click Add roles and Features.

  3. Skip the first page of the wizard.

  4. Select Role-based or feature-based installation.

  5. Select the server on which you want to install the Network Load Balancing feature.

  6. On the Server roles page, click next.

  7. On the Features page, check Network Load Balancing.

  8. Click Add-Feature.

  9. On the Features page, click next.

  10. On the confirmation page, click install.

To install the required Windows feature (with Windows PowerShell)

  1. Start a Windows PowerShell as administrator.

  2. Enter Install-Windows Feature NLB.

Step 2: Configure Windows Network Load Balancing

This step shows you how to configure the Network Load Balancing process. This task runs on one of the hosts that should be clustered for Network Load Balancing. These settings require you to have administrative privileges on the selected hosts.

To configure Network Load Balancing (manually)

  1. Start Network Load Balancing Manager.

  2. In the Cluster menu, click New.

  3. In the New Cluster: Connect window, perform the following tasks:

    1. Connect to your first host, for example: web01.democorp.com, and click Connect.

    2. In the list of network interfaces, select Ethernet 2 with the IP that is dedicated to Network Load Balancing and set to static.

    3. Click Next.

  4. In the New Cluster: Host Parameters window, click Next.

  5. In the New Cluster: Cluster IP Addresses window, perform the following tasks:

    1. Click Add and enter the Cluster IP, for example: 192.168.0.50 with matching subnet mask.

    2. Click Next.

  6. In the New Cluster: Cluster Parameters window, perform the following tasks:

    1. Enter the Full Internet Name, for example: ServiceCluster.democorp.com.

    2. Click Next.

  7. in the New Cluster: Port Rules window, perform the following tasks:

    1. Select the existing rule and click Remove.

    2. Click Add.

  8. In the Add/Edit Port Rule window, perform the following tasks:

    1. Set the Port range to From 443 to 443.

    2. Select TCP as protocol.

    3. Set the Filtering Mode to Multiple Host.

    4. Set the Affinity to match your requirements or leave it at Single (*).

    5. Click OK.

    6. Click Finish.

(*) The affinity is used to determine to which back-end server a client is connected. The web service uses a stateless architecture, so any affinity will work.

To add additional hosts to the Network Load Balancing cluster

  1. Start Network Load Balancing Manager.

  2. In the Cluster menu, click Connect to existing.

  3. In the Connect to Existing: Connect window, enter the Cluster IP / FQDN, and click Connect.

  4. In the Clusters list, select the cluster, and click Finish.

  5. In the tree view, select the cluster.

  6. In the Cluster menu, click Add Host.

  7. In the Add Host to Cluster: Connect window, perform the following tasks:

    1. Connect to your next host, for example: web02.democorp.com, and click Connect.

    2. In the list of network interfaces, select Ethernet 2 with the IP that is dedicated to Network Load Balancing and set to static.

    3. Click Next.

  8. In the Add Host to Cluster: Host Parameters window, click Next.

  9. In the Add Host to Cluster: Port Rules window, click Finish.

Step 3: Configuration validation

Before changing the configuration of the Password Capture Agent, you must validate the configuration. After the previous steps, you should be able to access https://ServiceCluster.democorp.com and see the IIS welcome screen.

Step 4: Applying Password Capture Agent web service URL on the Password Capture Agent

To set the Password Capture Agent web service URL

  1. Start an elevated command line.

  2. Run the following command to modify the web service URL at the Password Capture Agent.

    REG ADD "\\<COMPUTERNAME>\HKLM\Software\One Identity\One Identity Manager\Password Capture Agent" /v "WebService_URL" /t REG_SZ /d "https://ServiceCluster.democorp.com/AppServer/"

  3. Run the following commands to restart the Password Capture Agent service.

    sc \\<COMPUTERNAME> stop "Password Capture Agent"

    sc \\<COMPUTERNAME> start "Password Capture Agent"

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen