The VIP Enterprise Gateway Credential Provider is a tool used for online authentication of users on Windows servers. It can be deployed manually or using a large-scale deployment method through Microsoft Active Directory group policy. This article aims to provide answers to some common doubts that may arise when deploying the Credential Provider, especially when using the large-scale deployment method.
- Do I need to install Visual C++ individually on each machine?
No, the Visual C++ runtime is included in the installer package for the Credential Provider. Therefore, you do not need to install it separately on each machine.
- How do I specify the RADIUS server settings on each machine?
In the large-scale deployment method, the RADIUS server settings are included in the MSI transform file created in step 6. The transform file is applied during the installation of the Credential Provider on each machine, and it includes the RADIUS server settings, so the final machines will know which RADIUS server to use for validation.
- Which versions of Windows Server are compatible with the Credential Provider?
According to the Operating system requirements document, all versions of Windows Server 2008 R2, including Standard, Datacenter, and SP1 Latest, are compatible with the Credential Provider. The same goes for the other versions of Windows Server listed in the document.
- Do I need to create a separate installer for each version of the camouflage utility?
Yes, if you have machines that require different versions of the camouflage utility to encrypt the RADIUS server's password, you'll need to create a separate VIP Enterprise Gateway Credential Provider installer for each version of the utility. However, you only need one RADIUS server to authenticate all the computers.
- How do I create the transform file, and why is the registry involved?
The transform file is created using a computer that has the same version of the Credential Provider installed as the one you plan to deploy. The registry is involved because the transform file modifies the registry settings on the target machines during installation. The creation of the transform file is a one-time process, and you can use it to install the Credential Provider on all the target machines.
The VIP Enterprise Gateway Credential Provider is a useful tool for online authentication of users on Windows servers. By understanding the deployment process and the requirements, you can successfully deploy the Credential Provider on your servers using the large-scale deployment method.