TPO

TPO Configuration

This section explains how device session creation request from TPO to TSS can be secured.

TPO devices session request is secured when:

•HTTPS is being used.

•A secret is configured in TPO's Credentials Manager.

•Same secret is configured in TSS Credentials Manager

•TSS settings from Securing Device Session > TSS are applied.

On TPO VM:

Add TPO's credential manager with the username and password set in TSS above:

1. Create a script at location "C:\Users\Public\sc.bat" on TPO machine and copy the below lines into it

Make sure to change "username" and "password" to your preferred details. (Matching the values set in the TSS)

2. Restart the TPO.

Troubleshooting

If not properly configured TPO will not be able to connect to TSS. Check the following points if this error occurs.

•Verify that https is enabled on TPO.

•Verify that the username and password match in TSS credentials manager and TPO's Windows credentials manager.

•Ensure that "Reload application" is done after configuring TSS settings in TSS console.

•If there is change in TSS username and password, update following line in sc.bat with credentials:

cmdkey /genric:BTTRADE_TSS_BOOT_CREDENTIALS /user:username /pass:password

•If you wish to remove the credentials to stop TPO sending boot authentication then set the cmdkey line to:

cmdkey /delete:BTTRADE_TSS_BOOT_CREDENTIALS