> For the complete documentation index, see [llms.txt](https://documentation.2pintsoftware.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.2pintsoftware.com/ipxe-ws/configuration/authentication.md).

# Authentication

When using the iPXE Anywhere Web Service, additional authentication methods are available to configure and managed via the PowerShell scripts that are copied from 2Pint's GitHub into the correct folder of your iPXE installation.  For details, see [iPXE Anywhere Web Service Install](/ipxe-ws/installation/ipxe-anywhere-web-service-install.md)

### PowerShell Scripts

#### Configure PIN

The script that controls the Device authentication (like prompting you for a PIN) is located in the Scritps/Authentication/ folder named DeviceAuthentication.ps1.  Here you manage your PIN changing the default of 42 to anything else.

#### Other Examples

In the Authentication folder, there is another script called DeviceAuthentication\_Example.ps1, showing some examples of a few other things possible, like automatically allowing specific subnets without prompting for authentication or enabling Username and password auth.

### iPXE config auth settings

Please see [iPXE Web Service Configuration File](/ipxe-ws/configuration/ipxe-web-service-configuration-file.md)

Relevant settings for Authentication include **AutoApproveDevices** and **ApprovedDevicesRequestLimit**.

```
    <add key="AutoApproveDevices" value="0" />
    <!-- For how many seconds is an approved date in DB valid for, can also be overruled in DeviceAuthentication.ps1 script. -->
    <add key="ApprovedDevicesRequestLimit" value="120000" />
```

#### Disable Auth

To disable authentication for 2PXE booting when the iPXE Web Service is intergrated, you will modify the default value of 0 to 1 on the **AutoApproveDevices** property.&#x20;

#### Modify Timeout until Authentication is Required Again

If you would like to increase or decrease the time between forcing a device to reauthenticate to boot to iPXE, you can modify **ApprovedDevicesRequestLimit** and set to something more consistent with your policies.  Please note, if you put it too low, like a few seconds or potentially even a few minutes, the authentication status will go from approved to denied before the iPXE boot process is complete and fail booting via iPXE. &#x20;


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://documentation.2pintsoftware.com/ipxe-ws/configuration/authentication.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.