Check that permissions are set

Permissions need to be set to allow Digipass Authentication for IIS Basic to access and/or write to the trace and configuration files.

Trace file directory

By default, the trace file is stored in %programdata%\OneSpan\Digipass Authentication for IIS Basic\Log. Follow these steps for the folder the trace file will be written to.

To set permissions for tracing

  1. Open Windows Explorer and browse to the directory that the trace file will be written to (%programdata%\OneSpan\Digipass Authentication for IIS Basic\Log by default).

  2. Right-click the relevant directory and select Properties.

    The Log Properties dialog is displayed.

    Setting permissions to access the tracing directory

  3. Switch to the Security tab.

  4. Ensure that the IUSR account has Write permissions selected.

  5. Ensure that the IIS_IUSRS group has Write permissions selected.

  6. If required, make changes and click Apply.

If the IIS_IUSRS group and/or the IUSR account are not listed, see Adding the IUSR account and IIS_IUSRS group.

Configuration file

The configuration file is stored in the Digipass Authentication for IIS Basic installation folder.

To set permissions for accessing the configuration file

  1. Open Windows Explorer and browse to the installation folder.

  2. Right-click the Settings.xml file and select Properties.

    The Settings Properties dialog is displayed.

    Setting permissions to access the configuration file

  3. Switch to the Security tab.

  4. Ensure that the IUSR account has Read permissions selected.

  5. Ensure that the IIS_IUSRS group has Read permissions selected.

  6. If required, make changes and click Apply.

If the IIS_IUSRS group and/or the IUSR account are not listed, see Adding the IUSR account and IIS_IUSRS group.

Adding the IUSR account and IIS_IUSRS group

If the IUSR account and/or IIS_IUSRS group are not listed for the trace file directory or configuration file, you need to add them.

To add the IUSR account and/or IIS_IUSERS group

  1. Right-click the file or directory for which you want to add the IIS_IUSERS group/and or IUSR account and select Properties.

    The FILE/DIRECTORY Properties dialog is displayed.

  2. Switch to the Security tab and click Edit.

    The Permissions for FILE/DIRECTORY dialog is displayed.

  3. Click Add.

    The Select Users or Groups dialog is displayed.

  4. Type IUSR or IIS_IUSRS into the Enter the object names to select field and click OK.

  5. Check that the IIS_IUSRS group or IUSR user is listed.

  6. Click OK.

    The account should now be listed in the Group or user names list.