Page History

...

It is now recommended to update this key to 2048 Bits.  There are quite a few steps to this process.  All the instructions in this guide should be followed precisely.

Upgrade DualShield

Upgrade to DualShield 7.3.0 or later version, 7.3.4 is recommended.

(Optional) Setup OAuth Agent Authentication

...

Expand
title Enable OAuth for SSO and DAC
As a fail-safe it is advisable to enable OAuth on Single Sign-On and Admin Console modules On the Admin Console go to Authentication>Agents Edit Single Sign-on Server Image Added In the edit screen select the OAUTH2.0 tab and click Generate Secrets Image Added Image Added Keep this window open and edit the sso6.properties file which can be found in C:\Program Files\Deepnet DualShield\config. For best results use notepad++ to edit the properties file. For SSO6.Properties use the following template... Panel borderColor #9EBEE5 bgColor #f0f0f0 borderWidth 1px useOAuth=true oauthClientId=######################### oauthClientSecret=secret-########################## oauthTokenUri=https://YourDualShieldFQDN:8071/das5/rest/oauth/token Replace the hashes with the generated Client ID and Secret. Replace the FQDN in the oauthTokenURI with your own backend server FQDN This will be added into your SSO6.properties file as per the following example: Image Added Repeat the process for Admin Console agent, however you will be editing the dac.properties file and you will also be using this template: Panel borderColor #9EBEE5 bgColor #f0f0f0 borderWidth 1px useOAuth=true oauthClientId=######################### oauthClientSecret=secret-########################## oauthTokenUri=https://YourDualShieldFQDN:8070/das5/rest/oauth/token This will be added into your dac.properties file as per the following example: Image Added Notice also that only the Single Sign on module is using port 8071. This is specified in the sso6.Properties file. Code Block oauthTokenUri=https://YourDualShieldFQDN:8071/das5/rest/oauth/token The dac modules will use port 8070. Code Block oauthTokenUri=https://YourDualShieldFQDN:8070/das5/rest/oauth/token For further information on how OAuth 2.0 works and how to enable it refer to: OAuth 2.0

Regenerate the root CA

Regenerate all agents and idp certificates

Please follow this wiki on enabling OAuth 2.0

OAuth 2.0

Re-genereate the root CA