Getting Started with Your IDS Solution
To begin, ensure that your IDS solution is powered on. Depending on your setup, this may be: A physical IDS appliance, IDS Windows program, or an IDS Virtual Machine (VM) running in a hypervisor.
If you are using a virtual machine and DHCP is enabled, find the VM’s IP address in your hypervisor’s network settings or console. If DHCP is not available, please refer to Deploy A Virtual IDS Appliance, Appendix A in Support Section 3.7 for manual IP address configuration.
Once you have your server’s IP address, open a web browser and go to https://<ip-address>:8443
Once connected, follow the on-screen prompts to complete the initial setup.
Next, click the SETTINGS tab in the horizontal, top menu bar. In the left panel, you will see a list of customizable sections for configuration.
Settings
1. Software Setup:
Getting Started: As seen above, your server’s default name is “Identity Server.” You can change the name to something that that will be easier for you to remember and find.
2. Appearance: The Princeton Identity logo appears by default on your Home Page and Login Page. You can replace it with your own logo, in JPEG or PNG format.
3. Email Configuration: The IDS is capable of sending administrative notifications and QR codes for enrollment, as covered here.
4. Time: Time settings can be configured manually or automatically via NTP (Network Time Protocol) using a specified time server (host or IP address). The server prioritizes NTP and will override manual settings if it can connect to an authoritative time source.
5. System Behaviors:
This section includes settings for Data Retention, Notifications, Tamper Alerts, Application Timeout, & Multiple Approvals.
Data Retention: Your server’s retention policy does not apply to enrollment data – only to “encounter” data. Enrollment data is retained until actively removed. Configure your system’s encounter retention policy by defining the listed parameters. Encounters will be deleted automatically once they exceed these parameters.
6. Notifications: Administrative notification types and frequency can be configured.
7. Tamper Alerts: In certain situations, such as initial install or maintenance, you have the ability to disable device tamper alerts. This will not only disable them on the Device page, but the associated email notification as well.
8. Application Timeout: When no activity occurs within the chosen timeframe, you will be required to log back in to resume using the application.
9. Multiple Approvals: For security and compliance, your organization may require (or prefer) multiple administrators to approve new enrollees before credentials are issued. Your system is set as single approval by default; you can change it to multiple approvals here.
Configure your system’s encounter retention policy by defining the listed parameters. Encounters will be deleted automatically once they exceed these parameters.
10. Integration Sync: You may synchronize your Identity Server with external systems for access control, time and attendance, and point-of-sale applications. Links to all of the integration options and the solution-specific integration guides are posted here.
11. Card Formats: Your Identity Server has the ability to support multiple types of card formats. You can add as many as you require. One can be set as a default to be used with all connected edge devices. You can also test it and view the encoded bits of the card if you know the facility code and card number.
12. Network: Network details are displayed and configurable We recommend configuring your server for DHCP instead of a fixed IP address. Changing network settings may disconnect your browser from the server. If using a VM, setting a fixed IP will change the server’s entire IP address.
13. Licensing: If you are attempting to activate or update an IDS license for an existing installation, this is where you input the key and token. Complete directions are provided in the licensing guide.
14. Face License: Your Identity Server may be configured to use iris matching, face matching, or both. Your server comes with the iris biometric engine already installed and licensed. Instructions for enabling it are covered in the guide.
15. Security and Certificates: This section is where the system's certificates, cipher suites, and authentication types are configured.
16. Certificates: You can view your current certificate details (subject, issuer, expiration time/date, signature method) and upload new certificates as necessary.
17. Cipher Suites: View, enable, and disable cipher suites to define how encryption, authentication, and integrity verification are performed between client and server.
18. Authentication: Your server will apply built-in authentication by default. If desired, you may choose different authentication method or combination of methods by clicking on “configure authentication.”
19. Operator Accounts: This section is where settings are managed for administrative personnel. Here, you can create new administrative users and modify settings for existing users. Instructions and further details are covered in the guide.