Safeguard Authentication Services 5.0.2 - Installation Guide

Installing Defender

In order to use strong authentication, you must download and install Safeguard Authentication Services Defender. See the Defender Installation Guide to obtain detailed steps for installing Safeguard Authentication Services Defender.

The following steps outline the basic procedure for installing Defender. See the

To install Defender

1. Insert the Safeguard Authentication Services distribution media.

   The Autorun Home page displays.

   Note: If the Autorun Home page does not display, navigate to the root of the distribution media and double-click autorun.exe.

2. From the Home page, click the Setup tab.
3. From the Setup tab, click One Identity Defender.

   The One IdentityDefender web page opens.

4. Click the Download on the left navigation panel.
5. Follow the online instructions to gain access to the Trial Download page.
6. From the Trial Download: Defender page, click the Defender Documentation Archive link.
7. Once you have installed One Identity Defender, see the One Identity Defender Integration Guide for detailed configuration instructions about integrating Safeguard Authentication Services Defender with Safeguard Authentication Services.

Troubleshooting

To help you troubleshoot, One Identity recommends the following resolutions to some of the common problems you might encounter as you deploy and use Safeguard Authentication Services.

Getting help from technical support

If you are unable to determine the solution to a problem, contact Technical Support for help.

Before you contact Support, please collect the following information:

1. Take a system information snapshot. To do this, run the following command as root:

   /opt/quest/libexec/vas/scripts/vas_snapshot.sh

   This produces an output file in /tmp.

2. Make note of the Unix attributes for the user that cannot log in (if applicable). To do this, capture the output from the following commands:

   vastool -u host/ attrs <username>
   id <username>

   Note: Depending on your platform, you may need to run id -a instead of id.

3. Copy the text from any error messages that you see.
4. Save the results of running a "double su." To do this, log in as root and run su <username> note any error messages. Then run su <username> again and note any error messages.

Once you have collected the information listed above, contact Support at https://support.oneidentity.com/authentication-services/.

Disaster recovery

Since Safeguard Authentication Services relies on Active Directory, follow Microsoft’s best practices for keeping the database highly available. The Management Console for Unix and other administration tools, are not critical to the operation of Safeguard Authentication Services and can quickly be reinstalled from scratch if needed.