When using the iPXE Anywhere Web Service, additional authentication methods are available to configure and managed via the PowerShell scripts that are copied from 2Pint's GitHub into the correct folder of your iPXE installation. For details, see iPXE Anywhere Web Service Install
The script that controls the Device authentication (like prompting you for a PIN) is located in the Scritps/Authentication/ folder named DeviceAuthentication.ps1. Here you manage your PIN changing the default of 42 to anything else.
In the Authentication folder, there is another script called DeviceAuthentication_Example.ps1, showing some examples of a few other things possible, like automatically allowing specific subnets without prompting for authentication or enabling Username and password auth.
Please see iPXE Web Service Configuration File
Relevant settings for Authentication include AutoApproveDevices and ApprovedDevicesRequestLimit.
<add key="AutoApproveDevices" value="0" />
<!-- For how many seconds is an approved date in DB valid for, can also be overruled in DeviceAuthentication.ps1 script. -->
<add key="ApprovedDevicesRequestLimit" value="120000" />To disable authentication for 2PXE booting when the iPXE Web Service is intergrated, you will modify the default value of 0 to 1 on the AutoApproveDevices property.
If you would like to increase or decrease the time between forcing a device to reauthenticate to boot to iPXE, you can modify ApprovedDevicesRequestLimit and set to something more consistent with your policies. Please note, if you put it too low, like a few seconds or potentially even a few minutes, the authentication status will go from approved to denied before the iPXE boot process is complete and fail booting via iPXE.
Last updated