Deploying DUO using Configuration Manager

Question

Hello,

I read https://duo.com/docs/rdp-faq#install-and-uninstall I understand how to deploy the module DUO using the msi but I do not see anything about:

How to create the IKEY & SKEY? is it manual in DUO admin console one by one?

How to get all these keys associated with their machine names and then passed to the command line in Configuration Manager?

duo-win-login-4.0.2.exe /S /V" /qn IKEY="DIXXXXXXXXXXXXXXXXXXXX" SKEY="xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" HOST="api-xxxxxxxx.duosecurity.com" AUTOPUSH="#1" FAILOPEN="#1" SMARTCARD="#0" RDPONLY="#0""

Any comments?

Thanks,

Dom

Answer 1

Hi @Duchemin, Dominique, 

How to create the IKEY & SKEY? is it manual in DUO admin console one by one?

1, It seems the issue is not related to SCCM, hope the following information can help you:

To get these values I find this link may can help you:

The link: https://duo.com/docs/rdp#first-steps

Note: Microsoft provides third-party contact information to help you understand the problem. Microsoft does not guarantee the accuracy of this third-party contact information.

The related steps:

• Sign up for a Duo account.
• Log in to the Duo Admin Panel and navigate to Applications.
• Click Protect an Application and locate the entry for Microsoft RDP in the applications list. Click Protect to the far-right to configure the application and get your integration key, secret key, and API hostname.

How to get all these keys associated with their machine names and then passed to the command line in Configuration Manager?

2, If you have multiple keys need to deploy, I recommended you deploy it via GPO. The related link for your reference:

Duo Authentication for Windows Logon (RDP) - Active Directory Group Policy | Duo Security

Note: Microsoft provides third-party contact information to help you understand the problem. Microsoft does not guarantee the accuracy of this third-party contact information.

Please let me know if I misunderstand something. Thanks for your time and patience!

Best regards,
Cherry

---

 

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.