Perform preparation steps before setting up components.

Management server

IIS setup

  1. Run IIS snap-in, go to Default Web Site\pam section
  2. Open Configuration Editor in Manage section
  3. Expand the dropdown list Section:, select system.webServer\security\requestFiltering
  4. Expand the requestLimits item, set maxQueryString to 8192
  5. Click Apply in the Actions section
  6. Go to Default Web Site\pam\core section
  7. Open Configuration Editor in Manage section
  8. Expand the dropdown list Section:, select system.webServer\serverRuntime
  9. Set uploadReadAheadSize to 1048576
  10. Click Apply in the Actions section

Access server

Setup session collection

  1. Log on to the server where the Remote Desktop Connection Broker role was deployed, start the Server Manager
  2. Go to Remote Desktop Services, Collections
  3. Under Collections, click Tasks and select Create session collections
  4. Complete the wizard to create a collection with the settings you need.
  5. Under RemoteApp Programs click Tasks and select Publish RemoteApp Programs
  6. Click Add, select application \\AccessServerName\c$\Program Files\Indeed\Indeed PAM\Gateway\ProxyApp\Pam.Proxy.App.exe, click Next, Publish
  7. In the RemoteApp Programs section, open the context menu of the published application and select Edit Properties
  8. Go to Parameters, set the Allow any command-line parameters option and click OK

Generating secrets, hashes and keys

Generating secret and hash

For the Indeed PAM Core, Indeed PAM Gateway, SSH Proxy and ConsoleApp to interact with the Indeed PAM IdP, you need to generate a secret and its hash.

  1. Go to Indeed.PAM\Misc\ConsoleApp folder
  2. Run Command Prompt (CMD)
  3. Execute Pam.ConsoleApp.exe generate-secret
  4. Use secret and hash values

Generating SSHProxy host keys

  1. Go to Indeed.PAM\Misc\ConsoleApp folder
  2. Run Command Prompt (CMD)
  3. Execute Pam.ConsoleApp.exe generate-host-key --size 4096
  4. Use key value

  • No labels