Cisco Duo Desktop - Advanced Configuration

Looking to configure Cisco Duo Desktop settings like the IKEY, Shared Secret, API Hostname, etc.?  

Because this is an Auto Download package, you will be unable to modify the Parameters, so you have the following options:

• OPTION 1 - Convert the package to a Standard Download

  • This will allow you to modify the Parameters, but the installer will no longer auto update.  Probably not what you want.

• OPTION 2 - Use the Duo Group Policy Objects

  • You can use the Duo Group Policy Objects to set the IKEY, Secret Key, AP and other settings.  You can download the GPO's from here:  https://duo.com/docs/winlogon-gpo.   This way, you aren't entirely relying on the installer to properly set those Registry keys.  The GPO will set them, and they will be present and used when the app gets installed.  This is the recommended approach if you have Group Policy configured in your environment.

• OPTION 3 - Use Post Deployment Steps to add the appropriate keys to the Registry

  • This provides the same functionality as using the GPO’s.  Instead of using Group Policy to configure the appropriate Registry keys, you use PowerShell or a Command step to add them.

  • PowerShell

    • Use a PowerShell step to add each entry as necessary.  For example:

      
      New-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Duo Security\DuoCredProv" -Name "AutoPush" -PropertyType DWORD -Value 0 -Force

      • 

      • This will add the additional registry keys at HKLM\Software\Policies\Duo Security\DuoCredProv. 
      • Repeat as necessary for each key.  You don't need to create additional steps for each Registry key unless you want to.  They can be added as addtional lines in the same PowerShell Step.

    • Command

      • For each Registry key, create your entry.  For example:  

      • reg add "HKLM\SOFTWARE\Policies\Duo Security\DuoCredProv" /v AutoPush /t REG_DWORD /d 0 /f

        • 

      • This will add the additional registry keys at HKLM\Software\Policies\Duo Security\DuoCredProv. 
      • Repeat as necessary for each key.  You don't need to create additional steps for each Registry key unless you want to.  They can be added as addtional lines in the same Command Step.

Cisco Duo Desktop Registry Keys

The table below lists the Cisco Duo Desktop Registry Keys available as of version 4.3.0.