cancel
Showing results for 
Search instead for 
Did you mean: 

Solarwinds Product Support with Smart Card (PIV/PKI/CAC) Product Support

SolarWinds Current Support and Documentation for Single Sign On (SSO), Smart Card:  As of 27 July 2018

SolarWinds Orion© Suite 2017 and Higher

Guide: Setup Smart Card (CAC/PKI) User Authentication and STIG Securing for Orion 2017.1+

Legacy Guide: : Setup SSL and Enable Smart Card (CAC/PKI) User Authentication for Orion Web Console (Legacy)

Orion© Product Modules:

Network Performance Monitor

NetFlow Traffic Analyzer

Network Configuration Manager

Voip & Network Quality Monitor

User Device Tracker

IP Address Manager

Database Performance Analyzer (Orion Module only)

Server & Application Monitor

Web Performance Monitor

Virtualization Manager

Storage Resource Manager

Log Manager for Orion


Web Performance Monitor can "run as" Domain Account with Certificate authentication to login to any website similar to how Users authenticate with Smart Cards.

     Guide: Use WPM to create a Website Recording with Certificate Authentication for Availability

DameWare

Smart Card supported version 5.5+

Smart Card Multiple Certificate Supported version 10+‌

                   Note: When connecting, change Authentication to Smart Card Logon, enter your user ID, PIN, and Domain. If no user ID is entered, the default certificate will be used.

About Smart Card requirements - SolarWinds Help and Support

Smart Card authentication - SolarWinds Help and Support

Recommended Additional Guides:

            Known Issues with Smart Card Authentication

DameWare has identified the following known issues with Smart Card authentication.

Smart Card Authentication Fails Immediately After Startup

Smart Card authentication fails immediately after the remote system starts up because the remote system has not yet started the TCP service. Similarly, if the remote system has not started any of the following services, Smart Card authentication may fail:

      • Smart Card Services (SCardSvr)
      • Server Service
      • NetLogon Service

To resolve this issue, give remote systems a short period to start the requisite services before you try to connect using Smart Card authentication. If you are trying to connect after sending a Mini Remote Control ping to the remote system, enter an appropriate value in the Connect Delay field on the Mini Remote Control Ping dialog. For additional information, see MRC Ping dialog.

Log & Event Manager

Smart Card Supported since version 6.3.1

Set up single sign-on (SSO) in LEM - SolarWinds Help and Support

Database Performance Analyzer

Smart Card Support for all versions, Smart Card support also in the Orion© Integration Module.

Configure DPA for Single Sign-On (SSO) - SolarWinds Help and Support

     Note: Solarwinds will ONLY support the product specific configuration for SSO and NOT the configuration of Kerberos, card setup, or configuring browser to work with Single-Sign-On, etc.

Web Help Desk

Smart Card supported since version 12.2

Configure Web Help Desk 12.2 for Common Access Card (CAC) systems - SolarWinds Help and Support

     Note: Solarwinds will ONLY support the product specific configuration for SSO and NOT the configuration of Kerberos, card setup, or configuring browser to work with Single-Sign-On, etc.

7 Replies
Highlighted

Re: Solarwinds Product Support with Smart Card (PIV/PKI/CAC) Product Support

How do the local WPM accounts work since they are constantly trying to interactively login without a PIV card? When the requirement to use a second credential is implemented, WPM no longer functions. Any ideas?

Highlighted

Re: Solarwinds Product Support with Smart Card (PIV/PKI/CAC) Product Support

For WPM, you will need to provide a certificate and PIN, and you may want to setup Domain service accounts for WPM to run on. The Product Development in the WPM section of the forum, and Solarwinds Support, can assist in certificate pin authentication if you run into issues.

Highlighted

Re: Solarwinds Product Support with Smart Card (PIV/PKI/CAC) Product Support

Thanks for the info

0 Kudos
Reply
Highlighted

Re: Solarwinds Product Support with Smart Card (PIV/PKI/CAC) Product Support

Did you get an answer to this?

I use WPM but I have to have the force CAC logon disabled which means outside of testing this isn't going to work. I know how to use Cert / Pin for web authentication but haven't found a way around the CAC login portion.

0 Kudos
Reply
Highlighted

Re: Solarwinds Product Support with Smart Card (PIV/PKI/CAC) Product Support

I added a guide for using certificate authentication in WPM:

Use WPM to create a Website Recording with Certificate Authentication for Availability

Highlighted

Re: Solarwinds Product Support with Smart Card (PIV/PKI/CAC) Product Support

I can use a cert to authenticate to a web site, the issue I'm looking to resolve is the "log on locally" requirement for the synthetic users. With the requirement to log on with a smart card to the local machine/server, to allow playback of the synthetic users we've had to disable the mandatory CAC log on policy.

I'm looking through the documentation you posted now, thanks!

0 Kudos
Reply
Highlighted

Re: Solarwinds Product Support with Smart Card (PIV/PKI/CAC) Product Support

I gotta get this working on a few networks now...

0 Kudos
Reply