UAG settings import

[Hofkicks]

I'm trying to import all settings from an ini file to a fresh deployment of UAG.

The advanced settings for identity bridging like realm or keytab settings are not deployed when these are defined in the ini file.

All reverse proxy identity bridging settings are also not applied when I deploy a fresh, new UAG....is this function not implemented within the ini file import?

If I configure a UAG manually and export the settings as a JSON export it seems like more advanced properties are available, but as far as I am aware it's not possible to deploy a fresh UAG through powershell using a JSON file for importing the settings, correct?

[Hofkicks]

If I deploy a fresh UAG with the basic settings through powershell with an ini file I am able to manually upload a JSON file with the correct settings for the advanced sections...

Is there a way to automate this? So deployment through powershell, and auto configure the UAG through JSON in one single automated action.

[BenFB]

I don't use identity bridging so I can't test. Initially I found that even with a basic Horizon deployment I also had a few settings that the ini file was unable to configure. With each release VMware has added additional settings and I no longer need to do any post configuration. Which version of the UAG are you deploying? Which settings are you specifying in the ini file that aren't working? Are they listed here Using PowerShell to Deploy VMware Unified Access Gateway ?

[aguedesrocha]

You can't import the JSON file through the PowerShell.

The UAG PowerShell script in UAG 3.3.1 support configuration of Identity Bridging via INI file.

- Identity Bridging settings for specific Web Reverse Proxy Instance

[WebReverseProxy#]

   wrpAuthConsumeType= CERTIFICATE | SAML

   targetSPN=

   keyTabPrincipalName=

   keyTabRealm=

   keyTab=

- Core Identity Bridging configuration

[IdentityProviderMetadata]

   metadataXmlFile=  

[KerberosKeyTabSettings#]

   keyTab=

   principalName=

   realm=CORP.LOCAL

[KerberosRealmSettings#]

   kdcHostNameList#=

   name=

   kdcTimeout=

Also, there is a full tutorial on how to setup Web Reverse Proxy & Identity Bridging on TechZone https://techzone.vmware.com/ot-ws1-uag-reverseproxy/overview