OneSpan Security

https://docs.onespan.com/sec/docs
Admin
OneSpan Security offers a comprehensive suite of authentication and cybersecurity solutions,...
Tokens:1,491,049
Snippets:8,119
Trust Score:10
Update:11 months ago
Show doc for...
Tokens:
Raw
### Examples of Silent Installation Commands

Source: https://docs.onespan.com/sec/docs/psm-ig-install-the-password-synchronization-manager-software-silently-4-6

These examples demonstrate different ways to silently install the Password Synchronization Manager. The first shows a typical installation installing all features, and the second shows a minimal installation focused on remote configuration capabilities.

```bash
msiexec /i psm_4.6.0_x64.msi /q
msiexec /i psm_4.6.0_x64.msi /q ADDLOCAL=ALL
msiexec /i psm_4.6.0_x64.msi /q ADDLOCAL=vdsRConfigManager
```

--------------------------------

### Run LDAP Synchronization Tool Installation Script

Source: https://docs.onespan.com/sec/docs/lst-ag-linux-installation-3-27

This command initiates the installation process for the LDAP Synchronization Tool on Linux. It requires root privileges and navigation to the installation media directory. The script guides the user through license acceptance and initial configuration.

```shell
./install-ldapsync.sh
```

--------------------------------

### Start and Stop LDAP Synchronization Tool Daemon (Linux)

Source: https://docs.onespan.com/sec/docs/lst-ag-linux-installation-3-27

These commands are used to manage the LDAP Synchronization Tool daemon (ikldapsync) on Linux systems. The 'start' command initiates the service, while the 'stop' command halts it. These commands are typically executed using a system's init system.

```shell
/etc/init.d/onespan-ldapsync start
```

```shell
/etc/init.d/onespan-ldapsync stop
```

--------------------------------

### Sample Answers File for OneSpan Authentication Server Installation (INI)

Source: https://docs.onespan.com/sec/docs/oas-iglnx-answers-file-example-3-27

This INI formatted file provides a comprehensive example for configuring the initial installation of the OneSpan Authentication Server. It includes settings for network configuration, database connection, administrator details, hardware security module (HSM) integration, license key path, SSL certificate management, and SNMP settings.

```INI
[Automatic Server Location Support]
DNS Domain=
DNS Server registration=None
Host Name=192.0.2.1
Priority=true
Shared key file=

[Database]
ODBC Data Source Name=Identikey Server
Password=### ENTER PASSWORD HERE ###
Username=digipass

[Web Administration Application]
Client Type=Local

[First Administrator]
Password=### ENTER PASSWORD HERE ###
Username=admin

[Hardware Security Module]
HSM=false
HSM Type=ssm
PKCS11 Library=

[Install Mode]
Install mode=Advanced ODBC

[License]
License Key=### ENTER PATH TO LICENSE FILE HERE ###

[Live Audit SSL Certificate Installation]
Certificate Mode=Re-use

[Live Audit SSL Certificate Re-use]
Certificate=SOAP

[MDC SSL Certificate Installation]
Certificate Mode=Re-use

[MDC SSL Certificate Re-use]
Certificate=SOAP

[Master Domain]
Master domain name=master

[Name Conversion]
Case Conversion=Lower
Use Windows Name Resolution=false

[RADIUS SSL Certificate Installation]
Certificate Mode=Re-use

[RADIUS SSL Certificate Re-use]
Certificate=SOAP

[SEAL SSL Certificate Installation]
Certificate Mode=Re-use

[SEAL SSL Certificate Re-use]
Certificate=SOAP

[SNMP User]
Authentication Secret=### ENTER PASSWORD HERE ###
Authentication Type=MD5
IP Address=192.0.2.1
Privacy Secret=### ENTER PASSWORD HERE ###
Privacy Type=AES
Security Name=secret
UDP Port=161

[SOAP SSL Certificate Installation]
Certificate Mode=Generate

[SOAP SSL Certificate Password]
Algorithm=sha256
Password=### ENTER PASSWORD HERE ###

[Sample Web Client]
IP Address=

[Secure Auditing]
Enabled=false

[Sensitive Data Encryption]
Encryption method=Standard

[Server Address]
IP Address=192.0.2.1

[Server Functionality]
EMV-CAP=true
IIS Modules=true
RADIUS=true
SOAP Administration=true
SOAP Authentication=true
SOAP Provisioning=true
SOAP Reporting=true
SOAP Signature Validation=true
Windows Logon=true

[Windows Firewall]
Open firewall=false
```

--------------------------------

### Install Dependencies on Ubuntu Server 22.04 (APT)

Source: https://docs.onespan.com/sec/docs/oas-iglnx-installing-onespan-authentication-server-basic-installation-3-27

Example commands to install common dependencies for OneSpan Authentication Server on Ubuntu Server 22.04 LTS using apt.

```shell
apt install libgtk2.0-0 libncurses5 init-system-helpers unixodbc
```

--------------------------------

### Navigate to Helm Example Deployment Folder

Source: https://docs.onespan.com/sec/docs/oas-igdock-using-the-images-with-helm-3-27

Changes the current directory to the Helm example deployment folder within the extracted package. This is a prerequisite for configuring and deploying using Helm. It requires the absolute path to the package folder.

```shell
cd package_folder/examples/helm
```

--------------------------------

### Push Notification Content Example

Source: https://docs.onespan.com/sec/docs/dpgw-ig-push-and-login-5-10

This example demonstrates the format of a push notification's content parameters. The content is a plain text string separated by semicolons, starting with a version, message type, and a challenge key.

```plaintext
"01;03;0123456789"
```

--------------------------------

### Run Configuration Wizard (Basic Install) and Export Answers

Source: https://docs.onespan.com/sec/docs/oas-aref-ikconfigwizard-application-3-27

Example of running the ikconfigwizard console in basic installation mode ('-s') and exporting the configuration settings to an 'answers.ini' file ('--export=answers.ini'). This is useful for creating a configuration template.

```bash
ikconfigwizardconsole -s --export=answers.ini
```

--------------------------------

### List OneSpan Authentication Server Instances

Source: https://docs.onespan.com/sec/docs/oas-aref-admintool-examples-3-27

This command displays a list of all currently configured OneSpan Authentication Server instances in the system.

```bash
admintool server list
```

--------------------------------

### OneSpan Authentication Server Docker Compose for Oracle Database with TLS/SSL

Source: https://docs.onespan.com/sec/docs/oas-igdock-advanced-database-configuration-3-27

Example docker-compose.yml snippet for configuring the OneSpan Authentication Server to connect to a local Oracle Database instance using TLS/SSL. This example shows volume mounts for TNS, SQLNET, and wallet files, and specifies environment variables for connection details.

```yaml
# IAS service connecting to a local Oracle Database instance via TLS/SSL,
# where the mounted sqlnet.ora file specifies /tmp/wallet as the wallet
# directory in the WALLET_LOCATION setting and the odbc.ini file defines the
# iasdb DNS, removing the need to override the IASDB_DSN value.

ias-oracle:
  image: onespan_ias_oracle:<release_version>
  container_name: ias-oracle

  environment:
    - IASDB_SERVICE_NAME=ol8-19.localdomain
    - IASDB_SERVICE_PORT=1521
    - CARG_IASDB_ORACLE_SID_TYPE=SID
    - CARG_IASDB_ORACLE_SID=cdb1
    - TNS_ADMIN=/tmp/tnsadmin
    - ...

  secrets:
    - ...

  volumes:
    - /etc/odbc.ini:/etc/odbc.ini
    - ./network/tnsnames.ora:/tmp/tnsadmin/tnsnames.ora
    - ./network/sqlnet.ora:/tmp/tnsadmin/sqlnet.ora
    - ./wallet/ewallet.p12:/tmp/wallet/ewallet.p12
    - ./wallet/cwallet.sso:/tmp/wallet/cwallet.sso
    - ...

    # the wallet and the *ora file mounts can be simplified in this case to:
    # - ./network:/tmp/tnsadmin
    # - ./wallet:/tmp/wallet

  extra_hosts:
    - "ol8-19.localdomain:<oracle_host_ip>"
    - ...

```

--------------------------------

### Install MariaDB Dependencies on Ubuntu Server 22.04 (APT)

Source: https://docs.onespan.com/sec/docs/oas-iglnx-installing-onespan-authentication-server-basic-installation-3-27

Example commands to install additional dependencies for the embedded MariaDB on Ubuntu Server 22.04 LTS using apt.

```shell
apt install iproute2 libpmem1 libcrypt1 libedit2 libgcc-s1
```

--------------------------------

### Install OneSpan Authentication Server Script

Source: https://docs.onespan.com/sec/docs/oas-iglnx-installing-onespan-authentication-server-basic-installation-3-27

This snippet demonstrates how to execute the OneSpan Authentication Server installation script.

```shell
./install.sh
basic
```

--------------------------------

### Create Oracle Installation Groups and User

Source: https://docs.onespan.com/sec/docs/oas-iglnx-odbc-setup-for-oracle-database-3-27

Commands to create the 'oinstall' and 'dba' groups, and an 'oracle' user assigned to these groups. This user and group structure is standard for Oracle installations.

```bash
/usr/sbin/groupadd -g 54321 oinstall
/usr/sbin/groupadd -g 54322 dba
useradd -m -g oinstall -G dba oracle
passwd oracle
```

--------------------------------

### Install Packages with apt

Source: https://docs.onespan.com/sec/docs/oas-iglnx-installing-onespan-authentication-server-basic-installation-3-27

This command installs the iproute2 package along with specified versions of libpmem1, libcrypt1, and libedit2 using the apt package manager. Ensure your system's package lists are up-to-date before running.

```bash
apt install iproute2 libpmem1 libcrypt1 libedit2
```

--------------------------------

### Install Dependencies on Red Hat (Yum)

Source: https://docs.onespan.com/sec/docs/oas-iglnx-installing-onespan-authentication-server-basic-installation-3-27

Example commands to install common dependencies for OneSpan Authentication Server on Red Hat Enterprise Linux 7 using yum.

```shell
yum install chkconfig coreutils initscripts gtk2 ncurses-libs redhat-lsb-core unixODBC
```

--------------------------------

### Run DIGIPASS Gateway Linux Installation Script

Source: https://docs.onespan.com/sec/docs/dpgw-gsg-install-digipass-gateway-using-linux-installion-scripts-5-10

This command executes the DIGIPASS Gateway installation script on a Linux system. It requires superuser privileges and will guide the user through the installation and license acceptance process. The script installs an embedded Apache Tomcat server and deploys the DIGIPASS Gateway web service.

```bash
sudo ./install_dpgateway.sh
```

--------------------------------

### Install MariaDB Dependencies on Red Hat 7 (Yum)

Source: https://docs.onespan.com/sec/docs/oas-iglnx-installing-onespan-authentication-server-basic-installation-3-27

Example commands to install additional dependencies for the embedded MariaDB on Red Hat Enterprise Linux 7 using yum.

```shell
yum install perl-DBI boost-program-options socat libpmem
```

--------------------------------

### Install UnixODBC on Ubuntu

Source: https://docs.onespan.com/sec/docs/oas-iglnx-setting-up-unixodbc-3-27

Installs the UnixODBC package on Ubuntu systems using the apt-get package manager. This step is necessary for establishing database connections for OneSpan Authentication Server.

```bash
apt-get install unixodbc
```
Tokens:
Raw