For a minimal configuration of the PingAccess agent for IIS, the following steps outline the changes made during installation that might need to be verified if the installer fails. Use this procedure as a guide for what to check if the installation did not complete successfully.

  1. Stop Microsoft IIS.
    1. Run the command net stop w3svc.
    2. Run the command net stop was.
  2. Edit C:\Windows\System32\inetsrv\config\applicationHost.config and add the following line to the sectionGroup container with name=system.webServer under configSections. 
    <section name="paa" overrideModeDefault="Deny" allowDefinition="AppHostOnly" allowLocation="false" />
  3. Add the following XML block to the <system.webServer> element in C:\Windows\System32\inetsrv\config\applicationHost.config. 
    <paa>
 <paaCertificateDir value="C:\Program Files\Ping Identity\PingAccess Agent for IIS\certs\" />
 <paaPropertyFiles>
  <file path="C:\Program Files\Ping Identity\PingAccess Agent for IIS\agent.properties" />
 </paaPropertyFiles>
</paa>
  4. Open IIS Manager and go to Management > Configuration Editor.
  5. Select the system.webServer/paa section and validate that the paths added to applicationHost.config are correct.
  6. Register the agent module with IIS.
    1. Open IIS Manager, then select the web server the agent is being added to.
    2. Click Modules.
    3. Click Configure Native Modules.
    4. Click Register and enter the following information.

      Name

      PingAccessAgentModule

      Path

      C:\Program Files\Ping Identity\PingAccess Agent for IIS\paa-iis-module.dll
    5. Click OK.
    6. Click OK.
    7. Run the command iisreset /restart.