Skip to content
IAM built for the AI-Era
Logo

Gatekeeper

The following settings can be configured from the Gatekeeper section.

Change Gatekeepers

If you have multiple Gatekeepers, you can switch between them:

  1. Click Gatekeeper.
  2. Click Change on the top left.
  3. Highlight a Gatekeeper and click OK.

Upgrade Gatekeeper Admin Tool

For instructions on upgrading the Gatekeeper Admin Tool and Gatekeeper, including upgrades on Server Core, see Upgrading the Gatekeeper. These instructions apply to all products that use Specops Authentication.

Before upgrading, unregister any Gatekeepers that are no longer in use.

General Commands

The command box in the top right of this tab contains the following commands:

  • Refresh: refreshes the information in the tab.
  • Check for new admin tool version: checks if the admin tool needs to be updated.
  • Clear caches on all Gatekeepers: clears all caches on the Gatekeepers.
  • Migrate from SPR: opens the migration wizard for migrating Specops Password Reset data. This command appears only when a Specops Password Reset installation is detected in the domain.

View Certificates

  1. Click Gatekeeper.
  2. To view the Gatekeeper Client and Gatekeeper Backend Authentication certificates, click View for each of them.

Edit Proxy Settings

If your organization is using a forward proxy server to route internet traffic externally, you will need to configure the proxy server to allow the Gatekeeper to reach the internet.

  1. Click Gatekeeper.
  2. Click Edit on the Proxy row.
  3. In the dialog that opens, select Use manual settings.
  4. Enter the proxy server address as a complete URL, including the protocol, and enter any custom port.
  5. Click OK.

Manage Offline Gatekeepers

Unregister Gatekeepers that are no longer in use so that Specops Authentication can correctly resolve the available Gatekeepers. We recommend using the Gatekeeper Admin Tool for this. See Unregistering Gatekeepers.

Unregistering Gatekeepers

  1. Click Gatekeeper.
  2. To change to the Gatekeeper that should be unregistered, see Change Gatekeepers.
  3. Click Unregister in the top right of Gatekeeper Installation.
  4. In the dialog that opens, click Yes to confirm that you want to unregister the Gatekeeper.

Manually Removing Gatekeepers

If you cannot unregister an unused Gatekeeper through the Gatekeeper Admin Tool, for example because its server is no longer available, remove its registration manually as described below.

Note

If an unused Gatekeeper has not been unregistered in the Gatekeeper Admin Tool, the remaining registration information will need to be removed manually in order for Gatekeeper to be resolved correctly.

  1. Remove the Gatekeeper from the cloud.

    1. Open Specops Authentication Web and click Gatekeepers.
    2. Highlight the Gatekeeper you want to unregister in the list.

    3. Click Unregister Gatekeeper.

      Note

      This unregister process is not the same as the one performed by the Gatekeeper Admin Tool. The unregister process initiated from the Gatekeeper Admin Tool will perform all necessary steps to dispose of the unused Gatekeeper, and does not require any manual steps.

    4. In the confirmation window, click Unregister.

  2. Remove the Service Connection Point (SCP) from Active Directory.

    1. On the server where the Gatekeeper is installed, open the Active Directory Users and Computers tool.
    2. Make sure that Advanced Features is turned on (top menu View > Advanced Features).
    3. Navigate to System > Specops > SpecopsAuthentication > Gatekeepers.
    4. Right-click on the correct Gatekeeper and select Delete.