Summary Requirements - Citrixsupport.citrix.com/content/dam/supportWS/kA260000000TOayCAG/... · filePath, String physPath, Exception error, String queryStringOverride) End of inner

Summary This article describes how to configure Web Interface 5.3/5.4 installed on Windows 2008 Server (32-bit and 64-bit) with RSA Authentication Agent 7.x and RSA Authentication Manager 6.1.x/7.x.

Requirements • RSA Authentication Manager 6.1.x/7.x server.• Web Interface 5.3/5.4 installed on Windows Server 2008 (32-bit or 64-bit).• RSA Authentication Agent 7.0.x for Windows Server 2008.

Note: For the purpose of this article the following products and versions were used: • RSA Authentication Manager 6.1.0 installed on Windows Server 2003 R2 SP2 (32-

bit).• RSA Authentication Manager 7.1 SP2 on Windows Server 2003 R2 SP2 (32-bit).• Two servers with Web Interface 5.3 installed on Windows Server 2008 SP2 (32-bit)

and Windows Server 2008 R2.• RSA Authentication Agent 7.0.2 for Windows Server 2008.

Procedure From RSA Authentication Manager 6.1.0 Server

1. Open the RSA Authentication Manager Host Mode.

2. Go to Agent Host > Add Agent Host. Enter the information for WebInterface 5.3 server as shown in the following example:

a) Enter Name (FDQN) of the Web Interface server.

Note: Ensure the name is resolvable through DNS. Otherwise, enter a HOSTentry in the RSA server Windows hosts file.

b) Network Address should populate automatically after entering the Name. If not,enter the IP address manually.

c) Select Agent Type > Net OS Agent.

Page 1

How to Configure Web Interface 5.3/5.4 on Windows Server 2008

with RSA Authentication Agent 7.x and RSA Authentication

Manager 6.x and 7.x

d) Select Open to All Locally Known Users. (This can be disabled and assigned specific users after testing and verification is completed.)

3. Click Agent Host > Generate Configuration File (sdconf.rec).

4. Move or copy the sdconf.rec file to the Web Interface server.

From RSA Authentication Manager 7.1.0 SP2 Server 1. Open the RSA Security Console and enter the administrator credentials.

2. Go to Access > Authentication Agents > Add New:

a) Enter the Hostname and IP address.

Page 2

b) For Agent Type, select Standard Agent.

c) Leave the remaining settings as their default, at least for testing purposes.

3. Click Save.

4. Click Access > Authentication Agents > Generate Configuration File (sdconf.rec file).

5. Move or copy the sdconf.rec file to the Web Interface server.

From Web Interface 5.3/5.4 server 1. Create a folder called “RSA” under C:\ (example: C:\RSA) and move the

sdconf.rec file in there.

Page 3

2. Run the RSA Authentication Agent 7.0.2 installation package.

3. During the installation, select the path where the sdconf.rec file is located (example: C:\RSA\sdconf.rec).

4. Select Custom installation.

5. Ensure Local Authentication Client is selected. There is no need to install the Agent Host Auto-Registration Utility.

Page 4

6. Select the default options for the remainder of the installation. Do not reboot the server when prompted.

7. Go to Control Panel > System Properties > Advanced System Settings > Environment Variables.

8. Go to System Variables > Path > Edit.

9. Go to the end of the line and add the following: C:\Program Files\Common Files\RSA Shared.

Note: Remember to type the semi-colon (;) before adding the new path.

Page 5

10. Click OK and reboot the server.

11. After the server is online, go to C:\Program Files\Common Files\RSA Shared\Auth Data folder. Notice that there is a copy of the sdconf.rec file.

12. Open the RSA Security Center > Configuration > Authentication Test > Test and enter the Username and Passcode of one of the users to verify the communication Web Interface 5.3/5.4 and the RSA server. Not only does this validate the communication between both endpoints but also the RSA server sends the Node Secret information to the Web Interface server.

Page 6

RSA Security Center from Agent Host (Web Interface 5.3/5.4)

Example of RSA Server sending Node Secret to Agent Host

Page 7

13. After the Node Secret has been sent to the Agent Host (Web Interface server),

notice that two files appear under C:\Program Files\Common Files\RSA Shared\Auth Data (sdstatus.12 and securid).

14. Copy the securid and sdconf.rec files from C:\Program Files\Common Files\RSA Shared\Auth Data to C:\Windows\System32. This applies for both Windows Server 2008 (32-bit) and Windows Server 2008 R2 versions.

15. Open the Web Interface Console and create a new Web Interface site.

16. Under Authentication Methods > Explicit > Properties > Two-factor Authentication > select RSA SecurID from the drop-down menu.

17. Click OK and test it.

Note: If you installed Web Interface 5.3/5.4 on Windows Server 2008 R2 or any 64-bit version, proceed to the next section.

Additional Steps for Windows Server 2008 R2 and Windows Server 2008 (64-bit) Versions

1. After the Web Interface site is created, open the IIS Manager.

2. Go to the Application Pools and select WebInterface5.3.0AppPool (or WebInterface5.4.0AppPool) > Advanced Settings.

3. Change Enable 32-bit Applications from True to False.

Page 8

Important: If you do not make this change, Web Interface generates an Internal Error after users submit Username, Password and Passcode information at the logon page. Because Web Interface changes the application pool to run in 32-bit during the installation, you need to change it to 64-bit to successfully use the RSA Authentication Agent process that runs in 64-bit mode natively.

The following are the error messages generated at Event Viewer > Application Log if you do not change the WebInterface5.3.0AppPool (or WebInterface5.4.0AppPool) from 32-bit to 64-bit mode:

Log Name: Application Source: ASP.NET 2.0.50727.0 Date: 9/29/2010 11:24:16 AM

Page 9

Event ID: 1309 Task Category: Web Event Level: Warning Keywords: Classic User: N/A Computer: ftlvxa6x64.adolfolab.ctx Description: Event code: 3005 Event message: An unhandled exception has occurred. Event time: 9/29/2010 11:24:16 AM Event time (UTC): 9/29/2010 3:24:16 PM Event ID: 70c9ebaff5de410c884fd598b0f15bf8 Event sequence: 18 Event occurrence: 1 Event detail code: 0

Application information:

Application domain: /LM/W3SVC/1/ROOT/Citrix/XenApp-1- 129302474129867835 Trust level: Full Application Virtual Path: /Citrix/XenApp Application Path: C:\inetpub\wwwroot\Citrix\XenApp\ Machine name: FTLVXA6X64

Process information: Process

ID: 2044 Process name: w3wp.exe Account name: IIS APPPOOL\CitrixWebInterface5.3.0AppPool

Exception information:

Exception type: HttpUnhandledException Exception message: Exception of type 'System.Web.HttpUnhandledException' was

thrown. Request information:

Request URL: http://localhost/Citrix/XenApp/auth/login.aspx Request path: /Citrix/XenApp/auth/login.aspx User host address: ::1 User: Is authenticated: False Authentication Type: Thread account name: IIS APPPOOL\CitrixWebInterface5.3.0AppPool

Thread information: Thread

ID: 3 Thread account name: IIS APPPOOL\CitrixWebInterface5.3.0AppPool Is impersonating: False Stack trace: at System.Web.UI.Page.HandleError(Exception e) at

System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at

System.Web.UI.Page.ProcessRequest(Boolean

Page 10

http://localhost/Citrix/XenApp/auth/login.aspx

includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest() at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) at System.Web.UI.Page.ProcessRequest(HttpContext context) at ASP.auth_securid_aspx.ProcessRequest(HttpContext context) at System.Web.HttpServerUtility.ExecuteInternal(IHttpHandler handler, TextWriter

writer, Boolean preserveForm, Boolean setPreviousPage, VirtualPath path, VirtualPath filePath, String physPath, Exception error, String queryStringOverride)

Custom event details: Event

Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System> <Provider Name="ASP.NET 2.0.50727.0" /> <EventID Qualifiers="32768">1309</EventID> <Level>3</Level> <Task>3</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2010-09-29T15:24:16.000000000Z" /> <EventRecordID>3426</EventRecordID> <Channel>Application</Channel> <Computer>ftlvxa6x64.adolfolab.ctx</Computer> <Security />

</System> <EventData>

<Data>3005</Data> <Data>An unhandled exception has occurred.</Data> <Data>9/29/2010 11:24:16 AM</Data> <Data>9/29/2010 3:24:16 PM</Data> <Data>70c9ebaff5de410c884fd598b0f15bf8</Data> <Data>18</Data> <Data>1</Data> <Data>0</Data> <Data>/LM/W3SVC/1/ROOT/Citrix/XenApp-1-129302474129867835</Data> <Data>Full</Data> <Data>/Citrix/XenApp</Data> <Data>C:\inetpub\wwwroot\Citrix\XenApp\</Data> <Data>FTLVXA6X64</Data> <Data> </Data> <Data>2044</Data> <Data>w3wp.exe</Data> <Data>IIS APPPOOL\CitrixWebInterface5.3.0AppPool</Data> <Data>HttpUnhandledException</Data> <Data>Exception of type 'System.Web.HttpUnhandledException' was thrown.</Data> <Data>http://localhost/Citrix/XenApp/auth/login.aspx</Data> <Data>/Citrix/XenApp/auth/login.aspx</Data> <Data>::1</Data> <Data>

Page 11

http://schemas.microsoft.com/win/2004/08/events/event

http://localhost/Citrix/XenApp/auth/login.aspx

</Data> <Data>False</Data> <Data> </Data> <Data>IIS APPPOOL\CitrixWebInterface5.3.0AppPool</Data> <Data>3</Data> <Data>IIS APPPOOL\CitrixWebInterface5.3.0AppPool</Data> <Data>False</Data> <Data> at System.Web.UI.Page.HandleError(Exception e) at

System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at

System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at

System.Web.UI.Page.ProcessRequest() at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) at System.Web.UI.Page.ProcessRequest(HttpContext context) at ASP.auth_securid_aspx.ProcessRequest(HttpContext context) at System.Web.HttpServerUtility.ExecuteInternal(IHttpHandler handler, TextWriter

writer, Boolean preserveForm, Boolean setPreviousPage, VirtualPath path, VirtualPath filePath, String physPath, Exception error, String queryStringOverride) </Data>

</EventData> </Event>

Log Name: Application Source: Citrix Web Interface Date: 9/29/2010 11:24:16 AM Event ID: 21002 Task Category: None Level: Error Keywords: Classic User: N/A Computer: ftlvxa6x64.adolfolab.ctx Description: Site path: C:\inetpub\wwwroot\Citrix\XenApp.

Critical server error: System.Web.HttpException: Error executing child request for /Citrix/XenApp/auth/securid.aspx. ---> System.Web.HttpUnhandledException: Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> System.BadImageFormatException: An attempt was made to load a program with an incorrect format. (Exception from HRESULT: 0x8007000B)

at com.citrix.authenticators.SecurIDAuthenticator.forceDllLoad() at com.citrix.authenticators.SecurIDAuthenticator..ctor() at com.citrix.wi.pageutils.PlatformSpecificUtilsImpl.getNewSecurIDAuthenticator() at com.citrix.wi.pages.auth.twofactor.SecurID.performImp() at com.citrix.wi.pages.StandardPage.perform() at ASP.auth_securid_aspx.__Render__control1(HtmlTextWriter w, Control

parameterContainer) at System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection

children) at System.Web.UI.Control.RenderChildren(HtmlTextWriter writer) at

Page 12

System.Web.UI.Page.Render(HtmlTextWriter writer) at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer,

ControlAdapter adapter) at System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter

adapter) at System.Web.UI.Control.RenderControl(HtmlTextWriter writer) at System.Web.UI.Page.ProcessRequestMain(Boolean

includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) End of inner exception stack trace ---

at System.Web.UI.Page.HandleError(Exception e) at System.Web.UI.Page.ProcessRequestMain(Boolean

includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint,

Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest() at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) at System.Web.UI.Page.ProcessRequest(HttpContext context) at ASP.auth_securid_aspx.ProcessRequest(HttpContext context) at System.Web.HttpServerUtility.ExecuteInternal(IHttpHandler handler, TextWriter


End of inner exception stack trace --- at System.Web.HttpServerUtility.ExecuteInternal(IHttpHandler handler, TextWriter


at System.Web.HttpServerUtility.Execute(String path, TextWriter writer, Boolean preserveForm)

at System.Web.HttpServerUtility.Transfer(String path, Boolean preserveForm) at System.Web.HttpServerUtility.Transfer(String path) at com.citrix.wi.mvc.asp.AspWebAbstraction.serverForwardToContextUrl(String url) at com.citrix.wi.pages.auth.Login.handleLoginRequest(WIAuthType loginType) at com.citrix.wi.pages.auth.Login.processPost() at com.citrix.wi.pages.auth.Login.performInternal() at com.citrix.wi.pages.auth.Login.performImp() at com.citrix.wi.pages.StandardPage.perform() at ASP.auth_login_aspx.__Render control1(HtmlTextWriter w, Control


children) at System.Web.UI.Control.RenderChildren(HtmlTextWriter writer) at System.Web.UI.Page.Render(HtmlTextWriter writer) at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer,



includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest(Boolean

includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest()

Page 13

at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) at System.Web.UI.Page.ProcessRequest(HttpContext context) at ASP.auth_login_aspx.ProcessRequest(HttpContext context) at

System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplica tion.IExecutionStep.Execute()

at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) System.Web.HttpUnhandledException: Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> System.BadImageFormatException: An attempt was made to load a program with an incorrect format. (Exception from HRESULT: 0x8007000B)

at com.citrix.authenticators.SecurIDAuthenticator.forceDllLoad() at com.citrix.authenticators.SecurIDAuthenticator..ctor() at com.citrix.wi.pageutils.PlatformSpecificUtilsImpl.getNewSecurIDAuthenticator() at com.citrix.wi.pages.auth.twofactor.SecurID.performImp() at com.citrix.wi.pages.StandardPage.perform() at ASP.auth_securid_aspx.__Render__control1(HtmlTextWriter w, Control parameterContainer) at System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection








writer, Boolean preserveForm, Boolean setPreviousPage, VirtualPath path, VirtualPath filePath, String physPath, Exception error, String queryStringOverride). [Unique Log ID: 6a41b002] Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System> <Provider Name="Citrix Web Interface" /> <EventID Qualifiers="0">21002</EventID> <Level>2</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords>

Page 14

http://schemas.microsoft.com/win/2004/08/events/event

<TimeCreated SystemTime="2010-09-29T15:24:16.000000000Z" /> <EventRecordID>3425</EventRecordID> <Channel>Application</Channel> <Computer>ftlvxa6x64.adolfolab.ctx</Computer> <Security />

</System> <EventData>

<Data>Site path: C:\inetpub\wwwroot\Citrix\XenApp. Critical server error: System.Web.HttpException: Error executing child request for /Citrix/XenApp/auth/securid.aspx. ---> System.Web.HttpUnhandledException: Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> System.BadImageFormatException: An attempt was made to load a program with an incorrect format. (Exception from HRESULT: 0x8007000B)











End of inner exception stack trace --- at System.Web.HttpServerUtility.ExecuteInternal(IHttpHandler handler, TextWriter


at System.Web.HttpServerUtility.Execute(String path, TextWriter writer, Boolean preserveForm)

Page 15

at System.Web.HttpServerUtility.Transfer(String path, Boolean preserveForm) at System.Web.HttpServerUtility.Transfer(String path) at com.citrix.wi.mvc.asp.AspWebAbstraction.serverForwardToContextUrl(String url) at com.citrix.wi.pages.auth.Login.handleLoginRequest(WIAuthType loginType) at com.citrix.wi.pages.auth.Login.processPost() at com.citrix.wi.pages.auth.Login.performInternal() at com.citrix.wi.pages.auth.Login.performImp() at com.citrix.wi.pages.StandardPage.perform() at ASP.auth_login_aspx.__Render control1(HtmlTextWriter w, Control





includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest(Boolean

includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest() at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) at System.Web.UI.Page.ProcessRequest(HttpContext context) at ASP.auth_login_aspx.ProcessRequest(HttpContext context) at

System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplica tion.IExecutionStep.Execute()

at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) System.Web.HttpUnhandledException: Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> System.BadImageFormatException: An attempt was made to load a program with an incorrect format. (Exception from HRESULT: 0x8007000B)



children) at System.Web.UI.Control.RenderChildren(HtmlTextWriter writer) at System.Web.UI.Page.Render(HtmlTextWriter writer) at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter) at System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter


includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) End of

Page 16

inner exception stack trace --- at System.Web.UI.Page.HandleError(Exception e) at System.Web.UI.Page.ProcessRequestMain(Boolean



writer, Boolean preserveForm, Boolean setPreviousPage, VirtualPath path, VirtualPath filePath, String physPath, Exception error, String queryStringOverride). [Unique Log ID: 6a41b002]</Data>

</EventData> </Event>

More Information CTX122974 - Case Study: Why RSA 7.0.1 Agent for Windows 2008 Does Not Work on Web Interface 5.x

CTX125097 - Native RSA SecurID 7.x Authentication Does Not Work with Web Interface 5.x

Page 17

http://support.citrix.com/article/CTX122974




Documents

Summary Requirements - Citrixsupport.citrix.com/content/dam/supportWS/kA260000000TOayCAG/... · filePath, String physPath, Exception error, String queryStringOverride) End of inner