VMWare Unified Access Gateway (UAG) Integration Guide with the Authentication Manager using REST API
Originally Published: 2022-08-30
Last Modified: 2023-09-25
Article Number
Applies To
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x
Issue
The newer version does not require sdconf.rec file.
This KB article describes the steps to integrate VMWare Unified Access Gateway (UAG) Version 2111 onwards and the Authentication Manager using REST API.
Resolution
1. Login to the Security Console:
- Navigate to Access -> Authentication Agents -> Add New
- Create a Standard Agent and fill-in the Hostname as desired. (Leave the 'IP Address' field blank)
- Hit 'Save'.
- Navigate to Setup -> System Settings -> RSA SecurID Authentication API
- Check 'Enable Authentication API'
- Copy the 'Access Key' in a text file.
- Select 'Apply Settings'
Configurations on VMWare UAG
- Server Hostname: FQDN of the Authentication Manager. (Login to the Operations Console -> Administration -> Network -> Appliance Network Settings -> Fully Qualified Domain Name)
- Port Number: 5555
- Access Key: copied earlier from the Security Console -> Setup -> System Settings -> RSA SecurID Authentication API.
- SSL Certificate: How to export root certificates for RSA SecurID Access Authentication Manager, Identity Router, or Cloud Authentication Service
- Hostname of UAG Connector Instance: Hostname of the Authentication Agent created in the Security Console.
Notes
https://docs.vmware.com/en/Unified-Access-Gateway/2111/uag-deploy-config/GUID-A711DCF2-B699-4D4F-8E99-A8AE7CFF1705.html
See RSA SecurID Access implementation guide for older UAG Clients here:
https://community.rsa.com/t5/securid-integrations/vmware-unified-access-gateway-clients-rsa-securid-access/ta-p/552213
