Page Comparison

...

The steps below enable Windows Authentication in IIS where Velocity Web Client or VWSC bundle is installed.

1. Go to Control Panel → Programs.

2. Locate and click on “Turn Windows Features on or off” link as shown below.
   

   Image Modified

3. In Windows Features dialog, expand Internet Information Services → World Wide Web Services → Security to see the available options.

4. Select the following highlighted options (if not selected already), and then click OK.
   

   Image Modified

   • World Wide Web Services → Security → Basic Authentication

   • World Wide Web Services → Security → Request Filtering

   • World Wide Web Services → Security → Windows Authentication
     A progress dialog shows that Windows is  building the selected feature changes.

5. Click Close after Windows completes the requested changes. Windows Authentication mode is now enabled in IIS.

 Microsoft Windows Server 2016

The steps below enable Windows Authentication in IIS on Windows Server 2016 where Velocity Web Client or VWSC bundle is installed.

1. Go to Run and type ServerManager and press Enter or click Server Manager button in the Windows taskbar.
   The Server Manager Dashboard screen displays as shown.

   Image Modified

2. Click Add roles and features link in Dashboard.

3. Read the wizard instructions and click Next to continue.
   

   Image Modified

4. In Select installation type choose Role-based or feature-based Installation radio button.
   

   Image Modified

5. Choose to Select a server from the server pool radio button.

6. Select the Windows Server 2016 from Server Pool and click Next.
   

   Image Modified

7. Select the following highlighted options (if not selected already) and then click Next.

   1. Select Server Roles. Choose the following options under Roles:

      1. Web Server (IIS) (20 of 43 Installed) → Web Server (14 of 34 Installed) → Security (1 of 9 Installed) → Request Filtering (Installed)

      2. Web Server (IIS) (20 of 43 Installed) → Web Server (14 of 34 Installed) → Security (1 of 9 Installed) → Basic Authentication

      3. Web Server (IIS) (20 of 43 Installed) → Web Server (14 of 34 Installed) → Security (1 of 9 Installed) → Windows Authentication

         Image Modified

         Skip to the Confirmation menu in the Add Roles and Features Wizard

8. In Confirm installation selections click Install to enable Windows Authentication on Windows 2016 Server.

   Image Modified

   The Installation progress window display the progress of the Feature Installation.

9. Click Close after the installation is done.

Velocity Web Service Client Website Configuration

The Velocity Web Service Client Website configuration is done in the system where the Velocity Web Client and Website is installed or hosted.

1. On the desktop, click Start → Programs or All Programs → Administrative Tools → Internet Information Services (IIS) Manager.

2. On the left panel in connections, select User → Sites → Default Web Sites → VWSC.

3. Double-click Authentication.

4. The VWSC Authentication window displays. Right click Anonymous Authentication to Disable or select Disable link as shown.

5. Right click Windows Authentication to Enable or select Enable link as shown.
   Except Windows Authentication all other authentications must be disabled.

6. Right click Windows Authentication and select Advanced Settings or click Advanced Settings link as shown.

   Image Modified

7. In Advanced Settings dialog box, select Accept from Extended Protection drop-down and click OK as shown below.
   

   Image Modified

8. In IIS Manager window, right click Default Web Site → All Tasks → Restart IIS for the changes to take place as shown below.

   Image Modified

Database Changes for Velocity Web Service Client

The Registry table must have the following Insert Statement if not already available.

1. Navigate to Diagnostics/Reporting → SQL Manager as shown.

   Image Removed

2. Connect to Microsoft SQL Server 2014.

   Image Removed

3. In Object Explorer select SYSTEM\DOMAIN → Velocity as shown below.

   Image Removed

4. Click New Query. Enter the Insert statement as shown.

   Image Removed

   Code Block
   INSERT INTO Registry VALUES(<Velocity Server name>,'VWSC','AuthenticationMode','AutoWindowsAuthentication');

   Code Block
   For example, INSERT INTO RegistryVALUES(’SYSTEMNAME’,'VWSC','AuthenticationMode','AutoWindowsAuthentication');

5. Select the INSERT statement and click Execute. 

   Image Removed

PIV Enrollment using Windows Authentication

To configure anonymous authentication using IIS, you need to:

1. Run notepad as admin

2. Open %WINDIR%\System32\inetsrv\config\applicationHost.config

3. Save it as %WINDIR%\System32\inetsrv\config\applicationHost.config.bak for backup purposes

4. Find following string:
   <section name="anonymousAuthentication" overrideModeDefault="Deny" />

5. Replace Deny with Allow

6. Save file as %WINDIR%\System32\inetsrv\config\applicationHost.config

7. Recycle app pool, to be 100% sure that IIS re-reads web.config

...

A. The following steps allow the user to configure IE without prompting their credentials over trusted sites:

1.  Open Internet Explorer.

2. Click Tools menu and select Internet Options.

3. Select Security tab.

4. Click the Local Intranet Web content zone.

5. Select Sites and Check Automatically Detect Intranet Network.

6. Click Advance.

7. Add VWSC website URL for example:
   <<System Name/IP >>/VWSC, http://SYSTEMNAME/VWSC or http://<IP-Address>/VWSC.

8. After you are done, Click Close and OK.

9. Now, click the Custom level button.

10. From the list of settings, scroll to the bottom to select Automatic logon only in Intranet zone.

11. Click OK.

B.  The following steps allows the user to configure latest IE versions to add the website URL to work properly.

1.  Open Internet Explorer.

2. Click Tools menu and select Internet Options as shown below.

   Image Modified

Follow step 3 till step 8 below in latest Google Chrome versions to complete the procedure.

C.   The following steps allows to add the website URL to work properly in latest Google Chrome versions:

1. Go to Google Chrome and Settings.

   Image Modified

2. Click Advanced → System → Open Proxy Settings as shown below.

   Image Modified

3. In Internet Properties windows, select Security tab as shown.

   Image Modified

4. Click Sites in Internet Properties.

5. The Local Intranet dialog window opens as shown.

6. Select Advanced in Local Intranet.

   Image Modified

7. In the Local Intranet dialog window enter "http://localhost/VWSC" and click Add as shown.

   Image Modified

8. The URL is added to the Websites text area in Local Intranet. Click Close.

D.   The following steps allows to add the website URL to work properly in earlier Google Chrome versions:

1.  Go to Google Chrome → Options.

2. Select Under the Hood tab → Change Proxy Settings as shown.

   Image Modified

3. Select Security (tab) → Local Intranet/Sites → Advanced → Add "http://localhost/VWSC" to the URL List.

4. Click Close.