How To change the SSO PSK

How To change the SSO PSK

Please ensure the key you use is hexadecimal.

To change the Pre-Shared Key (PSK) for Single Sign-On (SSO) on a SonicWall firewall, you must update the key in two places: on the SonicWall appliance and on the SonicWall SSO Agent software. 
The key must match exactly on both the firewall and the agent for SSO to function correctly. 
Step 1: Change the PSK on the SonicWall SSO Agent

• Launch the SonicWall Directory Connector Configuration Tool on the server where it is installed. You can find it by navigating to Start | All Programs | SonicWall | SonicWall Directory Connector | SonicWall Configuration Tool.
• In the left-hand navigation panel, expand the SonicWall SSO Agent tree.
• Right-click on SonicWall Appliances and select Properties.
• Navigate to the Settings tab.
• Enter a new, strong shared key in the Shared Key field.
• Click Apply to save the changes. The SSO Agent service will automatically restart with the new configuration. 

Step 2: Change the PSK on the SonicWall appliance

• Log in to your SonicWall firewall management interface as an administrator.
• Navigate to the SSO configuration page:

• For SonicOS 7.x: Go to DEVICE | Users | Settings, then click Configure SSO.
• For SonicOS 6.5: Go to MANAGE | Users | Settings, then click Configure SSO.
• Click the SSO Agents tab (if not already selected).
• Find the entry for your SSO Agent and click the Edit icon (a pencil) next to it.
• Enter the new shared key in both the Shared Key and Confirm Shared Key fields. The key must be identical to the one you entered on the SSO Agent software.
• Click Save.
• After saving, click the Test tab in the SSO configuration window.
• Select your SSO Agent and click Check agent connectivity to confirm the SonicWall can communicate with the agent using the new key. The status light for the agent should turn green.