Previous Topic: Install the GINA or Credential Provider

Next Topic: Configure the Credential Provider

Configure the GINA

You can use the GINA configuration tool to edit default GINA values and export them to a registry (.reg) file for repackaging. The settings can also be applied to the current system.

To configure GINA

  1. In Windows Explorer, go to the location where you installed the GINA. For example:
    C:\Program Files\CA\Identity Manager\Provisioning GINA
    
  2. Double-click the following executable:
    ginaconfig.exe
    
  3. Enter information in the GINA settings fields:
    Link1 Command

    The complete command line to execute when a user clicks the Forgot Password link. This link should load a URL to a web interface for password resetting. For example, the command could be:

    C:\Program Files\CA\Identity Manager\Provisioning GINA\cube.exe
    http://eastern.local:8080/iam/im/environment/ca12/index.jsp?
    task.tag=forgottenpassword&facesViewId=/app/page/screen/
    fp_identify_user.jsp&action.forgottenpassword.identify=1&USER_ID=%username%
    

    Occurrences of %username% are replaced by the value in the username field on the Logon dialog. For this URL, self enrollment must be working on the environment. Also, verify the Self Service URL for the Identity Manager environment works from the system where you are installing the GINA.

    Link2 Command

    The complete command line to execute when a user clicks on the Unlock Account link. This link should load the full path to the cube.exe command followed by a URL to a web interface allowing a user to unlock an account.Occurrences of %username% are replaced by the value in the username field on the Logon dialog.

    Link3 Command

    The complete command line to execute when a user clicks on the New Account link. This link should load the full path to the cube.exe command followed by a URL to a web interface allowing a user to create an account. The %username% tag is not expected to be part of the URL.

    Use Floating Dialog

    An alternative to the Link commands, providing the same features and appearing during Window logon. This dialog can also render a BMP, WMF, or ICO image in the background. An example of a floating dialog follows:

    gina

    Domain

    The Provisioning domain name.

    Section 508 Compliance (Use Return in menu)

    Enables the Return function in a menu. If unchecked, the Return dialog is used.

  4. Fill in the Secure Browser Settings fields as follows:
    Default URL

    The default page to navigate to when no command line is given for the link1_cmd or link2_cmd.

    Allow List

    A regular expression pattern matching URLs to which access should always be allowed.

    Deny List

    A regular expression pattern matching URLs to which access should always be denied.

  5. (Optional) Click Export to export your settings to another system.
  6. Click OK to save your settings.
  7. Restart the system.