You are viewing limited content. For full access, please sign in.

Question

Question

How do you set the STSEndpointUtility.exe setting for the STS on a DMZ server

asked on July 10, 2018

Hi I tried to setup a forms server in a dmz sone, and I failed to properly configure the STS on the Forms DMZ server,

 

the Forms DMZ server is stand alone and not member of domain, so all the laserfiche service are local user on that server.

 

I tried different principal name user on the STSEndpointUtility.exe setting, and it give SOAP error.

 

I got the "SOAP security negotiation with 'http://rcdlfen.ricohdemo.com:5048/LicenseManager/service2' for target 'http://rcdlfen.ricohdemo.com:5048/LicenseManager/service2' failed. See inner exception for more details." when my user principal is set to a local user and also the user running the pool is the local user.

 

If I tried to use " NetworkService " for the pool application user I got " SOAP security negotiation failed. See inner exception for more détails. " as error

 

Any idea?

0 0

Replies

replied on July 11, 2018

Hi Rene, 

Have you tried adding the self signed certificate to the trusted root certification authority? I had to do this for it to work. Also, when you import the certificate make sure you add all the necessary permissions (including network service) to the certificate. 

1 0
replied on February 1, 2019

Did you ever find the cause of this?

0 0
replied on February 11, 2019

Yes,

 

Set the proper user permission to use the certificate in the Windows Certificate manger through MMC

 

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.