Digipass Plug-In for SBR Administrator Reference - Vasco
Digipass Plug-In for SBR Administrator Reference - Vasco
Digipass Plug-In for SBR Administrator Reference - Vasco
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
<strong>Digipass</strong> <strong>Plug</strong>-<strong>In</strong> <strong>for</strong> <strong>SBR</strong> <strong>Administrator</strong> <strong>Reference</strong> Active Directory Schema<br />
2.5.2 Set Up <strong>Digipass</strong> Containers in Domain<br />
This command sets up the <strong>Digipass</strong>-Pool and <strong>Digipass</strong>-Reserve containers in the specified<br />
domain. It can optionally set up the <strong>Digipass</strong>-Configuration container also.<br />
2.5.2.1 Prerequisite <strong>In</strong><strong>for</strong>mation<br />
Domain <strong>Administrator</strong><br />
You must be logged into the machine as a Domain Admin in the target domain.<br />
2.5.2.2 Set Up <strong>Digipass</strong> Configuration Container<br />
1. Log into the machine as a Domain <strong>Administrator</strong> in that Domain.<br />
2. Copy dpadadmin.exe onto the machine and open a command prompt in the location<br />
to which it was copied.<br />
3. Type:<br />
dpadadmin setupdomain -config<br />
The progress and success/failure of the command will be displayed in the command prompt<br />
window.<br />
2.5.2.3 Command Syntax<br />
dpadadmin setupdomain [-config] [-domain ] [-q]<br />
Table 8: DPADadmin setupdomain Command Line Options<br />
Option Description<br />
-config OPTIONAL. Specifies that this is the <strong>Digipass</strong> Configuration Domain, so the <strong>Digipass</strong>-Configuration<br />
container must be created.<br />
-domain<br />
<br />
OPTIONAL. Specifies the FQDN of the domain to set up. If omitted, the domain to which the current<br />
machine belongs will be used.<br />
-q OPTIONAL. Specifies that quiet mode should be used.<br />
DPADadmin setupdomain Command Sample<br />
dpadadmin setupdomain -config -q<br />
2.5.3 Assign <strong>Digipass</strong> Permissions to a Group<br />
This command assigns <strong>Digipass</strong>-specific permissions to a Windows group, applicable at the<br />
domain root and downwards. The permissions assigned are:<br />
Full read access to everything in the domain<br />
Full control over vasco-DPToken objects<br />
Full control over vasco-DPApplication objects<br />
Full write access to vasco-UserExt auxiliary objects<br />
2.5.3.1 Pre-requisites<br />
You must be logged into the machine as a Domain Admin in the target domain.<br />
© 2006 VASCO Data Security <strong>In</strong>c. 34