Validating the IIS Configuration
Verify that an Internet Information Services (IIS) agent has installed successfully.
About this task
For a minimal configuration of the PingAccess agent for IIS, the following steps outline the changes made during installation that might need to be verified if the installer fails. Use this procedure as a guide for what to check if the installation did not complete successfully.
Steps
-
Stop Microsoft IIS.
-
Run the command
net stop w3svc
. -
Run the command
net stop was
.
-
-
Edit
C:\Windows\System32\inetsrv\config\applicationHost.config
and add the following line to thesectionGroup
container withname=system.webServer
underconfigSections
.Example:
<section name="paa" overrideModeDefault="Deny" allowDefinition="AppHostOnly" allowLocation="false" />
-
Add the following XML block to the
<system.webServer>
element inC:\Windows\System32\inetsrv\config\applicationHost.config
.Example:
<paa> <paaCertificateDir value="C:\Program Files\Ping Identity\PingAccess Agent for IIS\certs\" /> <paaPropertyFiles> <file path="C:\Program Files\Ping Identity\PingAccess Agent for IIS\agent.properties" /> </paaPropertyFiles> </paa>
-
Open IIS Manager and go to Management → Configuration Editor.
-
Select the
system.webServer/paa
section and validate that the paths added toapplicationHost.config
are correct. -
Register the agent module with IIS.
-
Open IIS Manager, then select the web server the agent is being added to.
-
Click Modules.
-
Click Configure Native Modules.
-
Click Register and enter the following information.
Name
PingAccessAgentModule
Path
C:\Program Files\Ping Identity\PingAccess Agent for IIS\paa-iis-module.dll
-
Click OK.
-
Click OK.
-
Run the command
iisreset /restart
.
-