13.04.2013 Views

Digipass Plug-In for SBR Administrator Reference - Vasco

Digipass Plug-In for SBR Administrator Reference - Vasco

Digipass Plug-In for SBR Administrator Reference - Vasco

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>Digipass</strong> <strong>Plug</strong>-<strong>In</strong> <strong>for</strong> <strong>SBR</strong> <strong>Administrator</strong> <strong>Reference</strong> Active Directory Schema<br />

2.5.2 Set Up <strong>Digipass</strong> Containers in Domain<br />

This command sets up the <strong>Digipass</strong>-Pool and <strong>Digipass</strong>-Reserve containers in the specified<br />

domain. It can optionally set up the <strong>Digipass</strong>-Configuration container also.<br />

2.5.2.1 Prerequisite <strong>In</strong><strong>for</strong>mation<br />

Domain <strong>Administrator</strong><br />

You must be logged into the machine as a Domain Admin in the target domain.<br />

2.5.2.2 Set Up <strong>Digipass</strong> Configuration Container<br />

1. Log into the machine as a Domain <strong>Administrator</strong> in that Domain.<br />

2. Copy dpadadmin.exe onto the machine and open a command prompt in the location<br />

to which it was copied.<br />

3. Type:<br />

dpadadmin setupdomain -config<br />

The progress and success/failure of the command will be displayed in the command prompt<br />

window.<br />

2.5.2.3 Command Syntax<br />

dpadadmin setupdomain [-config] [-domain ] [-q]<br />

Table 8: DPADadmin setupdomain Command Line Options<br />

Option Description<br />

-config OPTIONAL. Specifies that this is the <strong>Digipass</strong> Configuration Domain, so the <strong>Digipass</strong>-Configuration<br />

container must be created.<br />

-domain<br />

<br />

OPTIONAL. Specifies the FQDN of the domain to set up. If omitted, the domain to which the current<br />

machine belongs will be used.<br />

-q OPTIONAL. Specifies that quiet mode should be used.<br />

DPADadmin setupdomain Command Sample<br />

dpadadmin setupdomain -config -q<br />

2.5.3 Assign <strong>Digipass</strong> Permissions to a Group<br />

This command assigns <strong>Digipass</strong>-specific permissions to a Windows group, applicable at the<br />

domain root and downwards. The permissions assigned are:<br />

Full read access to everything in the domain<br />

Full control over vasco-DPToken objects<br />

Full control over vasco-DPApplication objects<br />

Full write access to vasco-UserExt auxiliary objects<br />

2.5.3.1 Pre-requisites<br />

You must be logged into the machine as a Domain Admin in the target domain.<br />

© 2006 VASCO Data Security <strong>In</strong>c. 34

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!