You can complete installation of a 64-bit Webgate. Then confirm the installation on IIS and implement Windows impersonation.
You can skip this section if you are installing a 32-bit Webgate. In this case, see instead, "Completing Webgate Installation with IIS".
Before you start tasks here, be sure that you have completed Webgate installation according to information in Registering and Managing 10g WebGates with Access Manager 11g. You must also have completed Web server configuration updates for this Webgate either automatically during Webgate installation or manually, as described in "Webgates for IIS v6".
Task overview: Finishing the installation of a 64-bit Webgate:
Unless explicitly stated, this topic applies equally to 32-bit and 64-bit Webgates. It describes setting access permissions for the Web site that you are using as a default.
To set or confirm access Permissions, ISAPI filters, and Directory Security Authentication:
Start the Internet Service Manager. For example, from the Start menu click Programs then click Administrative Tools, and click Internet Service Manager.
Expand the local computer by clicking +, in the left panel.
Click to expand the Web Sites tab.
Right-click Default Web Site (or the site you are using as a default), and create a virtual directory as described in "Protecting a Web Site When the Default Site is Not Setup".
Right-click Web Sites in the Internet Information Services tab, click Properties, and perform the following steps:
From the Internet Information Services tab, click the Edit button.
Locate the ISAPI filter tab to confirm (or add) the filter DLLs, as follows:
Filter: If you updated the IIS Web server configuration file, webgate.dll should be properly located.
No Filter: Add the webgate.dll filter from Webgate_install_dir\oblix\access\apps\webgate\bin\webgate.dll
Save and apply any changes.
Click the Directory Security tab and confirm that both Anonymous Access and Basic Authentication are selected.
Selected: Proceed to Step 6.
Not Selected: Select Anonymous Access and Basic Authentication, then save and apply these changes.
Proceed as follows:
"Setting Client Certificate Authentication", if desired
No Client Certificate Authentication: Restart the IIS Web server.
Filter Positions: Perform instructions in "Ordering the ISAPI Filters" to ensure that all filters have been added and are in the proper order.
This task is optional and should be performed only if you want to use client certificate authentication. In this case, IIS and Webgate must be SSL-enabled.
Information in this topic is a sub set of details in "Enabling Client Certificate Authentication on the IIS Web Server".
To add cert+authn.dll as an ISAPI filter:
Start the Internet Information Services console, if needed: Click Start, Programs, Administrative Tools, Internet Service Manager.
Expand the local computer to display your Web Sites.
Right-click the Default Web Site (or the Web site that you use as a default), then expand \access\oblix\apps\webgate\bin.
Right click cert_authn.dll and select Properties, then:
In the Properties panel, select the File Security tab.
In the Secure Communications sub-panel, click Edit.
In the Client Certificate Authentication sub-panel, click Accept Certificates and click OK.
Click OK in the Secure Communications panel.
Click OK in the cert_authn.dll Properties panel.
Click the ISAPI Filters tab, click the Add button to display the Filter Properties panel, and then:
Ensure the filters are listed in the correct order, as described in "Ordering the ISAPI Filters".
Proceed to "Confirming Webgate Installation on IIS".