Use domain authentication
In an Active Directory (AD) environment, if Active Directory Integration type of deployment is used, you can log in to ESA Web Console clicking Use domain authentication in supported browsers. This kind of authentication works if you log on with a user who belongs to the same Active Directory domain, and also belongs to the "ESA Admins" group.
If you have a different NetBIOS name for the domain, using domain authentication might not work.
If domain authentication does not work out of the box, attempt to troubleshoot with the steps below:
Add HTTP entries to servicePrincipalName of ESASrv_<computer name> account
|
Important Applying this solution can create a servicePrincipalName conflict with another service, for example it can break the functionality of another web service hosted on the same computer. For example, Outlook Web Access. If this solution does not suit you, proceed to Workaround 1 or Workaround 2 below. |
1.Open ADUC.
2.Click View, select Advanced Features.
3.Expand <domain>, click ESET Secure Authentication On-Prem.
4.Right-click ESASrv_<computer name>, select Properties.
5.Switch to the Attribute Editor tab, double-click servicePrincipalName.
6.Type HTTP/<hostname>, click Add.
7.Type HTTP/<hostname>.<domain>, click Add.
8.Click OK to close both the editor and the Properties window.
Workaround 1
Open ESA Web Console on the computer where the Authentication Server is installed.
Workaround 2
When logging on remotely, use the IP address of the Authentication Server, not FQDN or hostname.
Adjust browser configuration
•Internet Explorer 11
1.Click Tools, select Internet options.
2.Select the Security tab.
3.Click Trusted Sites.
4.Click Custom level.
5.Scroll down to User Authentication, select Automatic logon with current user name and password.
6.Click OK on both open configuration windows.
•Microsoft Edge, Google Chrome
1.Complete the steps listed for Internet Explorer, and the domain authentication regarding ESA Web Console will work in both Microsoft Edge and Google Chrome.
•Mozilla Firefox
1.Type about:config in the address bar.
2.Click the I accept the risk! button.
3.Type network.negotiate-auth.trusted-uris into Search bar.
4.Double click the found result.
5.Type the domain name of ESA Web Console without protocol (https://), without port number and trailing slash.
6.Press Enter key.