---
title: Validating the IIS Configuration
description: Verify that an Internet Information Services (IIS) agent has installed successfully.
component: pingaccess
version: 9.0
page_id: pingaccess:agents_and_integrations:pa_validating_the_iis_config
canonical_url: https://docs.pingidentity.com/pingaccess/9.0/agents_and_integrations/pa_validating_the_iis_config.html
revdate: February 6, 2023
section_ids:
  about-this-task: About this task
  steps: Steps
  example: Example:
  example-2: Example:
---

# Validating the IIS Configuration

Verify that an Internet Information Services (IIS) agent has installed successfully.

## About this task

For a minimal configuration of the PingAccess agent for IIS, the following steps outline the changes made during installation that might need to be verified if the installer fails. Use this procedure as a guide for what to check if the installation did not complete successfully.

## Steps

1. Stop Microsoft IIS.

   1. Run the command `net stop w3svc`.

   2. Run the command `net stop was`.

2. Edit `C:\Windows\System32\inetsrv\config\applicationHost.config` and add the following line to the `sectionGroup` container with `name=system.webServer` under `configSections`.

   ### Example:

   ```
   <section name="paa" overrideModeDefault="Deny" allowDefinition="AppHostOnly" allowLocation="false" />
   ```

3. Add the following XML block to the `<system.webServer>` element in `C:\Windows\System32\inetsrv\config\applicationHost.config`.

   ### Example:

   ```
   <paa>
    <paaCertificateDir value="C:\Program Files\Ping Identity\PingAccess Agent for IIS\certs\" />
    <paaPropertyFiles>
     <file path="C:\Program Files\Ping Identity\PingAccess Agent for IIS\agent.properties" />
    </paaPropertyFiles>
   </paa>
   ```

4. Open IIS Manager and go to **Management → Configuration Editor**.

5. Select the `system.webServer/paa` section and validate that the paths added to `applicationHost.config` are correct.

6. Register the agent module with IIS.

   1. Open IIS Manager, then select the web server the agent is being added to.

   2. Click **Modules**.

   3. Click **Configure Native Modules**.

   4. Click **Register** and enter the following information.

      |      |                                                                              |
      | ---- | ---------------------------------------------------------------------------- |
      | Name | `PingAccessAgentModule`                                                      |
      | Path | `C:\Program Files\Ping Identity\PingAccess Agent for IIS\paa-iis-module.dll` |

   5. Click **OK**.

   6. Click **OK**.

   7. Run the command `iisreset /restart`.