Introduction:
During a local installation of an agent, the setup program suggests the option to register the machine on the management server anonymously; in other words, to connect without authentication. Anonymous registration also happens if incorrect credentials for the management server are specified in the Agent for VMware (Virtual Appliance) GUI. Anonymous registration lets a management server administrator delegate the agent installation to users.
It is possible to disable anonymous registration on the management server so that the valid user name and password of a management server administrator are always required for a device registration. If a user opts for anonymous registration, the registration will fail. Registration of bootable media pre-configured with the Do not ask for user name and password option also will be rejected. During unattended installation, you will need to provide a registration token in the transform file (.mst) or as the msiexec command parameter.
Solution:
To disable anonymous registration on the management server
- Log in to the machine where the management server is installed.
-
Open the following configuration file in a text editor:
- In Windows:%ProgramData%\Acronis\ApiGateway\api_gateway.json
- In Linux:/var/lib/Acronis/ApiGateway/api_gateway.json
-
Locate the following section:
"auth": {
"anonymous_role": {
"enabled": true
}
},If you updated the management server from build 11010 or earlier, this section is absent. Copy and paste it to the beginning of the file right after the opening brace
{. - Change
truetofalse. -
Save the api_gateway.json file.
Please be careful and do not accidentally delete any commas, brackets, and quotation marks in the configuration file.
- Restart Acronis Service Manager Service as described in"Changing the SSL certificate settings".