VanDyke Software

Index

VShell for Windows Public-Key Authentication Failure Due to LSA Authentication Module

In order for public-key-only authentication to be possible with VShell for Windows:

• VShell's LSA Authentication Module must be installed.
• The LSA Authentication Module must be loaded by the Windows operating system.

Verify the LSA Authentication Module is Installed
To determine if the LSA Authentication Module has been installed:

1. Verify that there is a vdspka10.dll file in the Windows System32 folder
2. Verify that the following registry REG_MULTI_SZ value contains vdspka10:
   

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages

   WARNING: Do not attempt to manually edit this registry key! Only verify that vdspka10 is listed in the value.

   For example, run the following command within an Administrator:CMD window:

   REG QUERY "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v "Authentication Packages"

   Expected output:

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
       Authentication Packages    REG_MULTI_SZ    msv1_0\0vdspka10

   Note: VShell's LSA Authentication Module is version-specific, so the LSA Authentication Module from a newer version of VShell will not work with an older version of VShell. If you have upgraded VShell to a newer version and subsequently downgraded to an older version of VShell, you will need to make sure that an LSA Authentication Module from the older version is installed that is compatible with the older version of VShell. For assistance with this process, please contact .

Verify the LSA Authentication Module is Loaded
Microsoft Windows only loads authentication modules during startup/boot-time, so even when the above two elements have resulted in a verification that VShell's LSA Authentication Module has been installed, the machine must be rebooted in order for the LSA Authentication Module to be loaded and used by the Windows operating system.

To ensure that the LSA Authentication Module has been loaded by the Windows operating system, reboot the Windows machine following your VShell installation.

Note: VShell's 32-bit LSA Authentication Module will not be loaded by a 64-bit version of Windows. Newer versions of 32-bit VShell will not permit installation on a 64-bit version of Windows. Older versions of VShell that were only available in 32-bit installations (all VShell versions prior to 3.0) will only be able to perform public-key-only authentication on a 32-bit version of Windows.