Web Agent Guides › Web Agent Configuration Guide › Advanced Authentication Scheme Configuration › Protect IIS 6.0 Web Server Resources with Passport Authentication

Protect IIS 6.0 Web Server Resources with Passport Authentication

For IIS 6.0 web server resources protected by Passport authentication, you must enable the Passport application on the IIS 6.0 web server itself in addition to performing the SiteMinder configuration steps for Passport authentication.

To enable the Passport authentication

1. Open the IIS Manager.
2. From the appropriate website, right-click the directory or file for which the Passport application should be enabled and select Properties.

   The Properties dialog box opens.

3. Do one of the following tasks:
   • If you right-clicked a directory in Step 2, click the Directory Security tab.
   • If you right-clicked a file in Step 2, click the File Security tab.

   The appropriate tab opens.

4. Click Edit.

   The Authentication Methods dialog appears.

5. Select the .NET Passport authentication check box.
6. Click OK.

   The Authentication Methods dialog closes.

7. Click OK.

   The dialog closes and Passport Authentication is enabled for the item you chose.

Delete Certificates from Stronghold (Apache Agent Only)

Stronghold web servers write client certificates to a local, temporary file, which the Web Agent uses for certificate-based authentication. The Stronghold server uses this file to make information in the client certificate available for authentication. As users visit a website, these certificate files increase, taking up space on your server. You can configure the Web Agent to delete a certificate file after the Agent has finished using it.

To delete certificate files, set the DeleteCerts parameter to yes.

Accommodate Legacy URL Encoding

The legacy URL encoding used by CA uses dollar sign ($) characters. If the dollar signs cause problems, you can make the Web Agent use hyphen (-) characters instead of dollar signs with the following parameter:

LegacyEncoding

Forces the Web Agent to replace any dollar sign ($) characters in legacy URLs with a hyphen (-). This also ensures backwards comparability with MSR, Password Services, and DMS. When this parameter is set to no, a Web Agent converts the string $SM$ to -SM-. When this parameter is set to yes, the Web Agent does not convert the dollar sign ($) character.

Default: (Framework Agents) No

Default: (Traditional Agents) Yes

To encode legacy URLs using hyphens instead of dollar signs, set the value of the LegacyEncoding parameter to no.