Configuration

To configure the IBM® Verify Gateway for Windows™ Login, you must set up two files in the installation directory.

The cacert.pem and config.json files must be set up in the installation location. The default installation location is C:\Program Files\IBM\WindowsLogin. The Verify Gateway for Windows Login looks in its installation directory for these files.

These two configuration files are not removed by uninstalling the product. The product can be uninstalled and reinstalled without reconfiguration.
Note: The files in the installation location use the inherited file system ACL permissions that allow BUILTIN\Users to read and execute them. In a multi-user system, you might want to remove the files because the config.json file contains the Verify API client secret. You can remove the users' read access by using commands like
C:\Windows\system32\icacls.exe "C:\program files\IBM\WindowsLogin" /inheritance:d 

C:\Windows\system32\icacls.exe "C:\program files\IBM\WindowsLogin" /remove:g BUILTIN\Users
.