Sanity checks on failures after VIP integration for Microsoft NPS

Products

• VIP Service

Issue/Introduction

This document discusses a few checks if VIP Integration for Microsoft Network Policy Server (NPS) fails with the following error.

Wed, 28 Jul 2021 15:07:58GMT] [symc_nps_plugin.dll] [Process:376][ERROR] : Missing password for user

Environment

Component: NPS Integration

Resolution

Per the NPS integration guide, please make sure of these two things:

1. Before integrating the NPS plugin for VIP, make sure that after configuring NPS with a third-party application first-factor authentication works correctly. If there are issues with first-factor authentication when using NPS, contact Microsoft support.

2. The NPS plugin supports only the RADIUS PAP protocol. When using a client, ensure that the communication between the client and the NPS server occurs over RADIUS using PAP.

After the above two checks please confirm the following.

a. Cert Location Check -The VIP certificate (downloaded in PEM format from VIP Manager) should be placed in the same location where the NPS plugin will be installed. For example, C:\Program Files\Symantec\NPS\certs.

b. “Run as Administrator” Check - Confirm that the NPS plugin installer setup.exe is run as an Administrator.

c. RRAS check - Ensure RRAS (Routing and Remote Access is not running on the same Windows system where NPS is installed.