PingAccess

Validating the IIS Configuration

Verify that an Internet Information Services (IIS) agent has installed successfully.

About this task

For a minimal configuration of the PingAccess agent for IIS, the following steps outline the changes made during installation that might need to be verified if the installer fails. Use this procedure as a guide for what to check if the installation did not complete successfully.

Steps

  1. Stop Microsoft IIS.

    Run the following commands:

    • net stop w3svc

    • net stop was

  2. Edit the C:\Windows\System32\inetsrv\config\applicationHost.config file.

    Add the following line to the sectionGroup container with name=system.webServer under configSections:

    <section name="paa" overrideModeDefault="Deny" allowDefinition="AppHostOnly" allowLocation="false" />

  3. Add the following XML block to the <system.webServer> element in C:\Windows\System32\inetsrv\config\applicationHost.config:

    <paa>
 <paaCertificateDir value="C:\Program Files\Ping Identity\PingAccess Agent for IIS\certs\" />
 <paaPropertyFiles>
  <file path="C:\Program Files\Ping Identity\PingAccess Agent for IIS\agent.properties" />
 </paaPropertyFiles>
</paa>

  4. Open IIS Manager and go to Management → Configuration Editor.

  5. Select the system.webServer/paa section and validate that the paths added to applicationHost.config are correct.

  6. Register the agent module with IIS.

    1. Open IIS Manager, then select the web server the agent is being added to.

    2. Click Modules.

    3. Click Configure Native Modules.

    4. Click Register and enter the following information.

      • Name PingAccessAgentModule

      • Path C:\Program Files\Ping Identity\PingAccess Agent for IIS\paa-iis-module.dll

    5. Click OK.

    6. Click OK.

    7. Run the command iisreset /restart.