Chat now with support
Chat with Support

Enterprise Single Sign-On 8.0.6 - Installation Guide

1. Overview 2. Preparing the Storage of Security Data in the LDAP Directory
2.1 Active Directory 2.2 Active Directory + ADAM or AD LDS 2.3 OpenLDAP 2.4 Netscape iPlanet / Sun Java System / Red Hat / Fedora Directory Server 2.5 Novell eDirectory 2.6 IBM Tivoli Directory Server 2.7 Deploying a Workstation LDAP User Account
3 Installing Quest ESSO Controllers and Audit Databases 4 Installing and Configuring the Software Modules on the Workstations 5 Enabling the Self Service Password Request (SSPR) Capability 6. Enabling OTP Authentication 7 Enabling the Group Membership Modification Feature 8 Centralizing Parameters Using Group Policy Objects (GPO) 9 Installing Quest ESSO MSI Packages in Silent Mode Appendix A: Advanced Configuration: Audit Appendix B: Activating Traces Appendix C: Retrieving the Serial Number on a MiFARE RFID Badge

A.2 Audited Events

The list of audited events is available on all Quest ESSO Controllers and Clients by opening the Errors and Events tool, available in
Start | Programs | Quest Software | Enterprise SSO | Errors and Events
For more information on this tool, see Quest ESSO Console Administrator Guide.

Appendix B: Activating Traces

Subject
To diagnose unexpected result from an installation program, you can activate traces as described in the following procedure.
Before Starting
•
Create the folder that will store your trace files (C:\Traces for example).
•
If you want to trace Password Reset, create a specific folder (C:\TracesRP for example).
Procedure
1.
Start Registry Editor.
2.
Create the HKEY_LOCAL_MACHINE\SOFTWARE\Enatel\WiseGuard\Debug key.
3.
Create the following values:
Value Type
Value Name
Value
String
TraceDir
Location of the trace files (C:\Traces for example)
DWORD
TraceLevel
Enter a value between 0 and 5:
0: no trace.
5: traces return highly detailed information.
DWORD
MaxFileSize
Maximum size in KB of the trace files.
DWORD
LimitedLogFiles
2 by default.
Maximum number of trace files (enter a value between 2 and 10).
4.
If you want to trace Password Reset, create the HKEY_LOCAL_MACHINE\SOFTWARE\Enatel\WiseGuard\Framework\ResetPassword key, with the following value:
Value Type
Value Name
Value
String
TraceDir
Location of the trace files (C:\TracesRP for example)
5.
Restart your workstation.
When the user logs on his/her workstation, the following trace files are created in the specified directory:
•
WGSSxxxx.log: traces of the Quest ESSO Security Services service.
•
ssoenginexxxx.log: traces of the SSOWatch engine.
•
GinaSSOWatch.log: traces of the SSOWatch module GINA.
•
WGSafeGina and winlogonxxxx.log: Advanced Login traces.
•
WGConfigxxxx.log: traces of WGConfig.exe, which allows you to configure the Quest ESSO Security Services on the Quest ESSO workstations.
•
SSOBuilderxxxx.log: traces of Enterprise SSO Studio.
•
TokenManagerxxxx.log: traces of the Token Manager software module.

Appendix C: Retrieving the Serial Number on a MiFARE RFID Badge

Subject
This section explains how to retrieve the serial number of an RFID badge from a specific memory block of the badge, in sector 1.
On MiFARE badges, a sector is a set of 4 blocks, each block containing 16 bytes. Reading serial number from sector 1 means reading serial number from block 4.
Description
To locate the serial number in the block of data, a given number of Most Significant Bytes or MSB (the left part of the block) and a given number of Least Significant Bytes or LSB (the right part of the block) are ignored. The remaining middle set of bytes is then written in ASCII to build the serial number. All leading 0 are removed.
Example
If...
Then...
the block of data contains:
00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
MSB ---> <--- LSB
AND
the MSB is 6
AND
the LSB is 5
only 7 bytes are used to build the serial number. The serial number value is then 60708090A.
no block number is set
the default serial number (extracted from the UID of the badge) is used.
a valid block number is set and an error occurs
no serial number is returned: the badge is ignored.
Before Starting
•
Configuration parameters define how the serial number must be extracted from a MiFARE RFID badge.
•
All configuration parameters are stored in the Windows registry.
Also in this chapter:
•
C.1 Parameters
•
C.2 Configuring the MiFARE RFID Parameters
•
C 3 Resetting the MiFARE RFID Parameters

C.1 Parameters

Description
The parameters can be defined as a GPO. In this case, they are located in the following registry key:
HKEY_LOCAL_MACHINE\Software\Policies\Enatel\WiseGuard\
FrameWork\PCSC
If parameters are defined locally on the workstation, they are located in:
HKEY_LOCAL_MACHINE\Software\Enatel\WiseGuard\FrameWork\PCSC
A GPO-defined configuration parameter overrules a local parameter.
The following registry values can be defined in the above GPO or local keys.
Name
Type
Description
MiFAREBlockNumber
REG_DWORD
Mandatory.
The block number to read.
Values: 0 … 15
MiFAREBlockKey
REG_SZ
The encrypted value of the key used to read the data block. Once decrypted, the key must contain 12 hexadecimal digits.
Default key value: FFFFFFFFFFFF
MiFAREBlockMask
REG_SZ
The mask applied to ignore invalid badges. Must contain 32 hexadecimal digits.
Default (no mask): FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
MiFAREIgnoreMSB
REG_DWORD
The number of MSB (left) bytes to ignore when extracting the serial number from the block of data.
Values: 0 … 15
Default: 6
MiFAREIgnoreLSB
REG_DWORD
The number of LSB (right) bytes to ignore when extracting the serial number from the block of data.
Values: 0 … 15
Default: 5
Conditions
If...
Then...
the MiFAREBlockNumber registry value is not set or set to 0xFFFFFFFF
the default serial number extracted from the UID of the badge is used.
the MiFAREBlockNumber is set to a valid value between 0 and 15 inclusive and an error occurs, such as wrong key or configuration
no serial number is returned: the badge is ignored.
Set the MiFAREBlockNumber to a block number, not a sector number.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating