Deployment Guide

Configuration Guide 15
Add Compatibility Server’s Folder Location to Core Server Config File
The Core Server, being a .Net application, can sometimes be blocked from accessing registry information, due to
permissions. The issue is that the Core Server, to read the secretkeystore (the database encryption key), needs to access the
Compatibility Server's registry configuration information for the location of the secretkeystore. If the registry permissions
block this access, then the Core Server fails to authenticate Console users. This setting adds the Compatibility Server's
folder location into the Core Server’s config file in case of registry access issues.
1 Navigate to <Core Server install dir>\EntityDataAccessObjects.config.
2 Change the following bold item:
<object id="DomainDataAccess" singleton="false" type="Credant.Entity.DataAccess.DomainDataAccess,
Credant.Entity.DataAccess">
<property name="Logger" ref="DataAccessLogger"/>
<!--<property name="CompatibilityServerPath" value="PATH_TO_COMPATIBILITY_SERVER"/> -->
Uncomment this line and set the fully qualified path to the Compatibility Server .
</object>
3 Save and close the file.
4 Restart the Core Server and Compatibility Server Services.
Allow Core Server to Iterate Through Authentication Methods
The Core Server authentication attempts can be blocked by the domain controller, due to policies being set on the allowed
authentication methods. The enhancement was to implement a “switch” in the Core Server configuration file to allow the
Core Server to iterate through several authentication methods, in an attempt to find one that works.
1 Navigate to <Core Server install dir>\Spring.config.
2 Change the following bold item:
<object id="DomainCache" singleton="true" type="Credant.Authorization.DomainCache.DomainCache,
Credant.Authorization.DomainCache">
<!-- Change this logger? -->
<property name="Logger" ref="DataAccessLogger" />
<property name="DomainDataAccess" ref="DomainDataAccess" />
<property name="RefreshFrequency" value="300" />
<property name="TryAllAuthTypes" value="false" /> Change this value to “true” to enable this functionality.
<!-- Used to change the AuthType per domain: key is domain's CID and value is the
System.DirectoryServices.AuthenticationTypes value
<property name="DomainAuthType">
<dictionary key-type="string" value-type="int" >
<entry key="5A23TPM2" value="0" />
</dictionary>
</property>
-->
</object>
3 Save and close the file.
4 Restart the Core Server Service.