¶ You are reading documentation on SystoLOCK, a passwordless MFA system for Microsoft Active Directory on premises developed by Systola GmbH.
¶ Getting Started
SystoLOCK is easy to install and manage. However, you would need to adhere to some basic requirements for it to work.
- System Overview But how does it work?
- System Requirements Check this prior to installing any component
- AD DS Sites Got sites? Read this to know what you need to do
- Token Compatibility Learn what tokens to use with SystoLOCK
¶ Installation
SystoLOCK is a distributed system, consisting of several components, each serving a specific purpose and every component is installed individually
- Prerequisite: AD CS SystoLOCK needs certificates, AD CS will issue them
- Authentication Server The heart of the system
- Windows Client A driver that accept your new credentials
- AD FS Adapter and Identity Provider Got SAML? Let it talk!
- Plugin for Network Policy Server Connect any VPN gateway
- RDS Farms via RD Web Access "With Blackjack" and RD Gateway
- Management Tools SystoLOCK is easily manageable with a simple set of tools
- Updating and Upgrading SystoLOCK Installing a new version or an update
- Uninstalling SystoLOCK If you ever need to clean-up
- Ports In Use by SystoLOCK What you need to open in your firewall
¶ Administration
Your daily tasks of managing SystoLOCK infrastructure are carried out via an MMC console or PowerShell - the choice is yours.
- Server Management Check health, read logs
- License Management Are you still within the license limits? Check to stay compliant
- Token Management Import, export, create, delete
- User Management Assign tokens to users, check status, etc.
- Offline Computers Management Define who can go offline
- Controlling Client Settings With Registry and GPO How to fine-tune your workstations
- Automating Management with PowerShell Scripting your management tasks
- SystoLOCK PowerShell Reference
¶ Usage Scenarios
SystoLOCK is used to control user logins, but there are different types of them and they work somewhat differently.
- Regular Login A login into Windows console
- Impersonation Act as another user
- Web Login Logins to the web sites via AD FS
- RDP Login Ways to login into an RDP session
- VPN Login Establishing a VPN connection with SystoLOCK
¶ Assisted Login (used with SystoLOCK Companion)
¶ Going Beyond Perimeter
If you want SystoLOCK to also work outside your network, you will need to take some steps for it to work properly
- Firewall and Port Forwarding Publish your SystoLOCK endpoints to the internet
- DNS Considerations Name it your way, SystoLOCK needs a certain structure
- Endpoint Certificates and CDPs Prepare your certificates, if you need to deploy them yourself
