Running TCL Scripts on an IDENTIKEY Appliance. Creation date: 24/06/2016 Last Review: 26/07/2016 Revision number: 2

Transcription

1 KB Running TCL Scripts on an IDENTIKEY Appliance Creation date: 24/06/2016 Last Review: 26/07/2016 Revision number: 2 Document type: How To Security status: EXTERNAL Summary Executing a TCL script on an IDENTIKEY Appliance requires some special setup since no command line is available. The appliance is capable, however, of running scripts from an external machine. This article describes how to setup that capability. Problem symptoms / details. TCL scripts can be very useful in an IDENTIKEY environment for moving large quantities of data, generating reports, or automating repetitive tasks. On an IDENTIKEY server, it is possible to access the command line in order to execute the necessary commands to accomplish this. On an IDENTIKEY appliance, however, no such shell exists. Problem Solution. The solution is to configure an installation of just the IDENTIKEY Command Line Administration utility to connect to the appliance, execute the script, and return the results to the local system. For the following procedure we will assume an IDENTIKEY appliance and a local Windows machine, both on the same network. In the example, the machines have the following network addresses. IDENTIKEY Appliance Local Machine Windows Page 1 of 8

2 1. Determine the version of the IDENTIKEY Appliance software Use the IDENTIKEY Authentication Server Web Administration Console, selecting Check version info from the Home page. 2. Download the same version of the IDENTIKEY Authentication Server software from the VASCO website. Use the major version numbers as the guide (in the above example, select v3.9). Downloading a test version from the website is fine, and no License key is necessary for this procedure. 3. Execute the autorun.exe installer on the Local machine. 4. Select an Advanced installation, and ODBC database. For the components, select IDENTIKEY Authentication Server Page 2 of 8

3 5. This will open the Setup Wizard. Click through the screens until it reaches the Custom Setup. Deselect all the listed components except for the Command-line administration tool. Complete the installation. 6. Run the Configuration Wizard Page 3 of 8

4 7. In the resulting dialogues, specify the IP address of the IDENTIKEY Appliance when prompted. Complete the Configuration tool. 8. Complete the IDENTIKEY Authentication Server Setup Exit from the IDENTIKEY Authentication Server Installer. It is not necessary to install the IAS Web Administration tool. Page 4 of 8

5 There should exist an IDENTIKEY Authentication Server installation directory on the Local machine. Its default location is similar to: C:\Program Files\VASCO\IDENTIKEY Authentication Server 3.9 The local side of the TCL execution will utilize the bin directory in this area. 9. Create an Administration Program Client on the IDENTIKEY Appliance Open the IDENTIKEY Appliance Web Administration Tool Mouse over the Clients tab and select Register In the resulting creation dialogue, specify the Client Type as Administration Program, the Policy ID as Identikey Administration Logon, and the Protocol ID as SEAL. Most importantly, specify the IP address of the Local machine in the Location field. Click CREATE. Page 5 of 8

6 The dialogue indicates that the Client has been created. And it appears in the Clients listing. Page 6 of 8

7 10. Setup and Run the script Test the connectivity. Start a Command Prompt (probably requiring administrative rights), change the default directory to the IAS installation area bin directory and run the following command: dpadmincmd. This will start the dpadmincmd in interactive mode. Type the following command: % logon {userid <appliance username> password <password>} Note the use of curly braces. Specify a username and password capable of logging into the IDENTIKEY appliance. A return value of 1 indicates success. Copy the script to be run into the IAS installation area bin directory. Use the dpadmincmd utility to execute the script. The script can be run directly from the command line using the format: dpadmincmd u <appliance username> -p <password> <script name> Page 7 of 8

8 Output from the script is written, by default, to the local directory. Any acceptable script can be executed in this manner, and the interactive command prompt produced by dpadmincmd can be used to test scripts and run individual TCL commands. Page 8 of 8