Configure Browsers for Kerberos Authentication

By default, you will not be authenticated by Kerberos if you are using Mozilla® Firefox or Microsoft® Internet Explorer browser to access RiskVision Server. To allow a browser to support Kerberos AES 256 bit encryption, you must configure the settings specific to each browser type.

Mozilla Firefox

To configure Mozilla Firefox browser, version 11.0:

1. Open the Firefox browser and enter "about:config" in the address bar. A warning message is displayed. Click I'll be careful, I promise! to accept the warning and continue.
2. Enter the string "negotiate" in the Search bar to search properties containing the string "negotiate." Double-click or right-click these properties, then click Toggle to set them to false.
   • network.negotiate-auth.delegation-uris
   • network.negotiate-auth.trusted-uris
3. Double-click each of the following properties to specify the URL of RiskVision Server.

   • network.negotiate-auth.delegation-uris

   • network.negotiate-auth.trusted-uris

4. Enter the string "ntlm" in the Search bar to search properties containing the string "ntlm". Double-click the network.automatic-ntlm-auth.allow-proxies property to set the value to "false."

5. Restart the browser to apply the configuration changes.

Microsoft Internet Explorer

This configuration will still work when the Internet Client accesses RiskVision from a machine other than the Server.

To configure Internet Explorer browser versions 6.x, 7.x, 8.x, and 9.x: 

1. Open Internet Explorer browser and click Tools > Internet Options.

2. Click Security Options > Advanced tab. Check the box next to Enable Windows Integrated Authentication.

3. Click the Security tab, click the Intranet sites icon, click Sites, and then click Advanced. 

4. Enter the RiskVision URL in the Add this website to the zone field and click Add to apply security settings to the RiskVision URL.

5. Click Close, then click OK.

6. Click Apply, then click OK.

7. Restart the browser to apply the configuration changes.