Skip to main content

DSM Administrator Configuration

  1. Locate the installation files in the setup received and copy the executable file DgSecure-<x.x.x.x>-windows-x64-installer.exe on the machine where you will install the DSM Administrator.

  2. Run the DgSecure-<x.x.x.x>-windows-x64-installer.exe file. The DSM Administrator setup wizard is displayed. Click Next.

  3. Accept the license agreement and click Next.

  4. Choose a destination folder. Install the DSM Administrator in the default directory (C:\Program Files\Dataguise) or provide a different location. Click Next.

  5. Enter the port number to configure PK Protect server.

  6. An SSL certificate enhances the security by allowing you to run PK Protect in a secure environment. If you want to install and configure SSL Certificate, check the SSL Certificate checkbox. If you do not want to configure SSL, click the Next button.

    User authentication may be done with central Active Directory or LDAP services. Select option for SSL certificate from the following two options: Self Signed and Trusted. Enter the SSL Port number. Click Next.

    1. For Self-Signed SSL Certificate, provide the following details:

      1. Enter the Java cacert path along with the Password for the authentication and click Next.

    2. For Trusted SSL Certificate, provide the following details:

      1. Fill in the details like Keystore file location, Alias Name, Keystore Password, and Key Password. Click Next.

  7. Fill in the necessary details as provided in the wizard below and proceed to the next step by clicking the Next button.

  8. If you have checked the SSL Certificate checkbox in step 5, the SSL/TLS Protocols and Cipher Suites wizard will appear. Check the Customize Allowed Cipher Suites checkbox to provide a customized list of supported cipher suites. Otherwise, proceed to the next step by clicking the Next button.


    If there is more than one cipher, separate ciphers with the “:” symbol. The GUI will ensure that the user provides the list of ciphers in the correct format before continuing. After ciphers have been customized, click Next.

*Note: After finishing the installation, restart the DataguiseServer service for customized ciphers to take effect. The installer only allows the following ciphers to be used:

  1. ECDHE-ECDSA-AES128-GCM-SHA256

  2. ECDHE-RSA-AES128-GCM-SHA256

  3. ECDHE-ECDSA-AES256-GCM-SHA384

  4. ECDHE-RSA-AES256-GCM-SHA384

  5. ECDHE-ECDSA-CHACHA20-POLY1305

  6. ECDHE-RSA-CHACHA20-POLY1305

  7. DHE-RSA-AES128-GCM-SHA256

  8. DHE- RSA-AES256-GCM-SHA384

  1. Choose the database for configuring the application from the existing installation of PostgreSQL, MySQL, SQL Server, or Oracle. To know more on how to configure the metadata repository, refer following:

    1. Configure MySQL

    2. Configure SQL Server

    3. Configure PostgreSQL Database

    4. Configure Oracle

  2. Once you have configured the required metadata repository, click Next.

  3. Submit the Metadata information to configure the Controller. Select metadata crypto option i.e., System Generated Key and Custom Key.

  4. If you have selected System Generated Key, then provide the controller ID and click Next.

  5. If you have selected Custom Key, then provide the metadata details for the fields depicted in the screenshot below:

  6. When you are finished, click Next.

  7. Setup is now ready for the installation. Click Next.

  8. Wait for the installation to finish. As the installation finishes, it shows PK Protect Wizard depicting that the Controller installation is complete. Click Finish and proceed to the IDPs installation.

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.