27.2 Configuration of Advanced Authentication for SecureLogin

When installing Advanced Authentication, the default event name is Windows logon in the Advanced Authentication server.

You can also enter any custom name (same as configured in the Advanced Authentication server) as the event name, as the custom event can be used for re-authentication and KIOSK mode.

If you enable the Kiosk mode, you need to enter the username and logon method. The logon method will have the list of chains from the custom event or the Windows Logon event. For the re-authentication wizard, the list of chains either from the custom or Windows Logon event will be displayed for selection. You must choose a logon method to initiate the Advanced Authentication flow.

NOTE:During SecureLogin installation, the installer registers an endpoint to the Advanced Authentication server, which is used for validation of the credentials for all supported mechanisms.

SecureLogin uses TLS v1.2 to communicate with the Advanced Authentication server. If your deployment does not allow using TLS v1.2, you can use the lower version after performing the following steps:

IMPORTANT:It is not recommended to use TLS 1.1 because it is less secure than TLS 1.2 and it may open your deployment to the security threats.

  1. Navigate to the SecureLogin installation folder. For example, C:\Program Files\NetIQ\SecureLogin.

  2. Open the config.cfg configuration file.

  3. Specify the following in the configuration file.

    tlsVersion: TLSv1.1

  4. Save the configuration file.