Check that permissions are set
Permissions need to be set to allow Digipass Authentication for IIS Basic to access and/or write to the trace and configuration files.
Trace file directory
By default, the trace file is stored in %programdata%\OneSpan\Digipass Authentication for IIS Basic\Log.
To set permissions for tracing
- Open Windows Explorer and browse to the directory that the trace file will be written to (%programdata%\OneSpan\Digipass Authentication for IIS Basic\Log by default).
-
Right-click the relevant directory and select Properties.
The Log Properties dialog is displayed.
-
Switch to the Security tab.
-
Ensure that the IUSR account has Write permissions selected.
-
Ensure that the IIS_IUSRS group has Write permissions selected.
-
If required, make changes and click Apply.
If the IIS_IUSRS group and/or the IUSR account are not listed, see Adding the IUSR account and IIS_IUSRS group.
Configuration file
The configuration file is stored in the Digipass Authentication for IIS Basic installation folder.
To set permissions for accessing the configuration file
- Open Windows Explorer and browse to the installation folder.
-
Right-click the Settings.xml file and select Properties.
The Settings Properties dialog is displayed.
-
Switch to the Security tab.
-
Ensure that the IUSR account has Read permissions selected.
-
Ensure that the IIS_IUSRS group has Read permissions selected.
-
If required, make changes and click Apply.
If the IIS_IUSRS group and/or the IUSR account are not listed, see Adding the IUSR account and IIS_IUSRS group.
Adding the IUSR account and IIS_IUSRS group
If the IUSR account and/or IIS_IUSRS group are not listed for the trace file directory or configuration file, you need to add them.
To add the IUSR account and/or IIS_IUSERS group
-
Right-click the file or directory for which you want to add the IIS_IUSERS group/and or IUSR account and select Properties.
The FILE/DIRECTORY Properties dialog is displayed.
-
Switch to the Security tab and click Edit.
The Permissions for FILE/DIRECTORY dialog is displayed.
-
Click Add.
The Select Users or Groups dialog is displayed.
-
Type IUSR or IIS_IUSRS into the Enter the object names to select field and click OK.
-
Check that the IIS_IUSRS group or IUSR user is listed.
- Click OK.
The account should now be listed in the Group or user names list.