Web Agent Guides › Web Agent Configuration Guide › Manage User Access with IIS › Store Encrypted Credentials in a Page File (IIS 5.0 Only)

Store Encrypted Credentials in a Page File (IIS 5.0 Only)

If you have Web Agents running on IIS 5.0 web servers, you can enforce the native IIS security mechanisms by having the Web Agent provide a Windows user security context. Use the following parameter:

• InsecureServer

  Allows Web Agents for IIS 5 to enforce native IIS security mechanisms by providing a Windows user security context. Add this parameter to the Agent Configuration Object or local configuration file with the value you want.

  If this parameter is set to yes, the Web Agent stores encrypted credentials in paged memory, which can be written to the operating system's page file and saved to a hard disk.

  Important! If your hard disk is stolen or compromised, confidential data could be exposed.

  If this parameter is no, the Web Agent stores encrypted credentials in protected kernel memory. This setting is more secure, but it places more demands on the physical memory of your IIS server.

  Default: No

  Note: This parameter applies to IIS 5.0 Web Agents only. It is not used in Framework Web Agents.

To store encrypted user credentials in paged memory, add the InsecureServer parameter to the Agent's Configuration Object (or file), and set this parameter to yes.