Configuring agent settings for the Centrify Identity Services Platform

If you want to reconfigure agent settings for the Centrify Identity Services Platformon a Windows computer after initially configuring them during enablement (or if you did not use the agent configuration panel when you enabled the service), you can open the agent configuration panel manually and configure the agent as described in this section.

To configure agent settings for the Centrify Identity Services Platform:

  1. In the Windows Start menu, click Agent Configuration in the list of applications.

    The agent configuration panel opens, and displays the Centrify services that are currently enabled. You can configure any service listed in the Enabled services section.

  2. Click Centrify Identity Services Platform, and then click Settings.

  3. In the General tab, review the authentication options in the Features area:

    • Multi-factor authentication:
      • If the status is Enabled, the computer is not joined to a zone, and you can configure all Identity Platform settings that are shown in the General tab.

      • If the status is Enabled per zone settings, the computer is joined to a zone, and most Identity Platform settings are based on the zone configuration.

        In this situation, the Browse and Details buttons in the General tab are disabled, because those features are controlled by the zone configuration. The only configuration that you can perform in the General tab is to change the proxy server settings.

        Multi-factor authentication displays in the Authentication Source drop-down once the status is Enabled per zone settings.

    • RADIUS authentication:
      • If the status is Enabled, you can select this option to use as the authentication option for privilege elevation. You can enable this option either by group policy or a local configuration setting.

      • If the status is Disabled, click Details to configure and enable the RADIUS server connection.

        RADIUS authentication displays in the Authentication Source drop-down once the status is Enabled.

  4. To change proxy server settings:
    1. Click Change.

    2. Specify a new proxy server address.

    3. Click OK.

  5. To change to a different Identity Platform instance (only configurable if the computer is not joined to a zone):
    1. Click Browse.

    2. Select an instance from the list of registered platform instances in the forest.

    3. Click OK.

  6. To specify which Active Directory accounts require multi-factor authentication (only configurable if the computer is not joined to a zone):
    1. Click Details.

    2. Use the All Active Directory accounts button or Accounts below button to specify which Active Directory accounts are enabled for multi-factor authentication login. If you select Account below, use the Add and Remove buttons to select accounts.

    3. Click OK.

  7. Click Close in the General tab to save your changes.

For information about using the Troubleshooting tab, see the Multi-factor Authentication Quick Start Guide.