Disable authentication server when access is through a broker

When all access is through a connection broker and not from any stand-alone clients, the Authentication Server should be disabled, and the "broker only mode" enabled.

To disable the Authentication Server

1. At the Authentication Server page of the Secure Gateway portal, clear the Enabled check box to disable the Authentication Server.

   

2. Make the following changes to EricomSecureGateway.Config file:

   1. Under <AuthenticationServer>, change <add key="Enabled" value="true"/> to <add key="Enabled" value="false"/>

      <Section name="AuthenticationServer">

      <Property name="Enabled" type="bool" value="false" />

   2. Under <Security>, change <add key="ConnectionBrokerOnlyMode" value="false"/> to

      <Section name="Security">

      <Property name="CertificateFindBy" type="X509FindType" value="FindByExtension" />

      <Property name="CertificateFindValue" type="string" value="1.2.840.113556.1.8000.2554.57748.52896.21682.18417.45066.8514989.679433.2" />

      <Property name="ConnectionBrokerOnlyMode" type="bool" value="true" />

Making these changes prevents any connections from stand-alone clients through the Secure Gateway. All users will log in only through a connection broker.