Documentation

 

 

Introduction
This guide explains how to deploy the SecureAuth ActiveX add-on for the Microsoft Internet Explorer browser.
Applies to
SecureAuth IdP VersionOS Version
7.x+
  • Windows Server 2008
  • Windows Server 2008 R2
  • Windows Server 2012
  • Windows Server 2012 R2

COMPATIBILITY NOTES:

  • Windows 8 and 8.1 do not support ActiveX or any other binary extensibility in the new windows (Metro) browsing experience. 
  • The Microsoft Edge Browser in Windows 10 does not support ActiveX.
Installation Steps
Determine which ActiveX version is needed

Before deploying the ActiveX add-on you need to determine which version is required by the SecureAuth appliance. Below please find instructions on how to locate the required ActiveX version number.

1. Open the SecureAuth administrative web interface and navigate to the System Info tab (known in earlier versions as Sys Info).

2. In the Plugin Info section, locate the field IE ActiveX.

3. Make note of the version number in the field (e.g. 4,4,3,0).

Download the MSI

Use the chart below to determine which MSI file you need and then download the .zip file.

ActiveXSizeLink
5000598kDownload
4800562kDownload
4600555kDownload
4510554kDownload
4500553kDownload
4430543kDownload
4420569kDownload
4411567kDownload
4320354kDownload
Choose the installation method

Now that you have the correct MSI, you have two options in regards to its deployment. If you need to deploy the add-on to a few workstations you can use the instructions for manual installation. If the add-on needs to be deployed company wide you can take advantage of the Active Directory features to deploy the MSI package simultaneously to multiple client computers.

 

 

Follow the directions below to install the SecureAuth ActiveX plug-in.

The SecureAuth ActiveX installer requires administrative privileges to perform the installation.

1. Unzip the archive you downloaded in the previous step. After the archive is decompressed you should have two files.

2. If your Internet Explorer is running in 64-bit mode then choose the MSI with MSI64 in the title, for browser running in 32-bit mode run the MSI without 64 in the title. If you are unsure whether your browser is running in 32-bit or 64-bit mode, choose the 32-bit installer. Most versions of Internet Explorer run in 32-bit mode by default to ensure backwards compatibility with older add-ons.

3. When the installer launches you will be presented with an initial screen explaining its purpose. Read the information and then click "Next >" to continue.

4. Next you will be presented with the "Select Installation Folder" screen of the installer. SecureAuth recommends that you use the default settings on this screen. However if you need to install into a different directory you can make that change here. Click "Next >" to continue.

5. You will now be presented with the "Confirm Installation" screen of the installer. Verify the settings you have made and if you're sure everything is correct click "Next >" to continue. In order to review previous settings you can click the "< Back" button to see earlier screens.

6. After you click the "Next >" button in the previous step, a status window appears showing you the progress of the plug-in installation.

During this stage of the installation a Windows UAC dialog may appear asking "Do you want to allow the following program from an unknown publisher to make changes to your computer?". You can safely answer "Yes" to this dialog and allow the installation to continue. The certificate issue will be resolved in a future version of the installer.


7. The "Installation Complete" screen will now be presented signaling the installation process has completed. Click the "Close" button to exit the installer.

 

8. You have successfully installed the SecureAuth ActiveX add-on.


This tutorial explains how to deploy the SecureAuth Internet Explorer add-on MSI to multiple workstations using the Active Directory Group Policy functionality.

SecureAuth Corporation provides these instructions only as a convenience for our customers and no additional support beyond these instructions is available. Information about products not made by SecureAuth Corporation is provided for information purposes only and does not constitute SecureAuth Corporations recommendation or endorsement. Please contact the vendor for additional information and support. 

 

1. Create a Distribution Point

    • Log on to the server with administrative credentials.
    • Create a shared network folder where you will put the SecureAuth Internet Explorer Add-On MSI that you wish to distribute.
    • Set permissions on the share to allow read and execute access to the distribution package.
    • Copy the MSI file to the shared network folder you just created.  

2. Create a Group Policy Object (GPO)

    • Start the Group Policy Management snap-in. To do this, click Start, point to Administrative Tools, and then click Group Policy Management.
    • In the console tree, browse to Domains > [your domain] > Group Policy Objects.
    • Right-click the Group Policy Object,and then click New.
    • Type a name for this new GPO (for example, SecureAuth ActiveX), and then press Enter.

Group Policy supports two methods of deploying an MSI package. This tutorial provides instructions for both options.

    • Assigned: The MSI package is automatically deployed the next time a user logs on to the computer (if User Configuration is selected) or when the computer restarts (if Computer Configuration is selected). This method does not require any user intervention. We recommend using Computer Configuration instead of User Configuration to ensure a successful MSI package installation regardless of which user logs on to the computer.
    • Published: You can publish a program distribution to users. When the user logs on to the computer, the published program is displayed in the Add or Remove Programs dialog box, and it can be installed from there.

3. Assign a package

    • Start the Group Policy Management snap-in. To do this, click Start, point to Administrative Tools, and then click Group Policy Management.
    • In the console tree, browse to Domains > [your domain] > Group Policy Objects.
    • Right-click on the New Group Policy object you just created and select Edit.
    • Under Computer Configuration, expand Policies > Software Settings.
    • Right-click Software installation, point to New, and then click Package.
    • In the Open dialog box, type the full Universal Naming Convention (UNC) path of the shared installer package that you want. For example, \\file server\share\file name.msi.

Do not use the Browse button to access the location. Make sure you use the UNC path of the shared installer package.

    • Click Open.
    • Click Assigned, and then click OK. The package is listed in the right-pane of the Group Policy window.
    • Close the Group Policy snap-in, click OK, and then close the Group Policy Management snap-in.
    • When the client computer starts, the managed software package is automatically installed. 

4. Publish a package

    • Start the Group Policy Management snap-in. To do this, click Start, point to Administrative Tools, and then click Group Policy Management.
    • In the console tree, browse to Domains > [your domain] > Group Policy Objects.
    • Right-click on the New Group Policy object you just created and select Edit.
    • Under User Configuration, expand Policies > Software Settings
    • Right-click Software installation, point to New, and then click Package.
    • In the Open dialog box, type the full UNC path of the shared installer package that you want. For example, \\file server\share\file name.msi. 

Do not use the Browse button to access the location. Make sure you use the UNC path of the shared installer package.

    • Click Open.
    • Click Publish, and then click OK.
    • The package is listed in the right-pane of the Group Policy window.
    • Close the Group Policy snap-in, click OK, and then close the Group Policy Management snap-in.
    • Test the package as needed.

5. Apply the GPO to the target computers or users

    • Start the Group Policy Management snap-in. To do this, click Start, point to Administrative Tools, and then click Group Policy Management.
    • Browse to the domain or OUs, right-click, and select Link and Existing GPO...
    • Force the GPO by rebooting the computer or run the gpupdate /force command. 
    • Test the application as needed.