The HYPR RADIUS server is created to facilitate authentication via the RADIUS protocol. The server software is a Java Spring Boot microservice that runs on port 9077.
Acquire a REDHAT or CENTOS 7+ server or virtual machine with port 9077 accessible.
.warfile from Artifactory - 3.6.0
.warfile location (restricted to HYPR Customer Solutions): https://r.hypr.com/artifactory/hypr-maven-dev/com/hypr/server/radius-server/3.6.0/radius-server-3.6.0.war.
Copy the RADIUS
.warfile into the
Acquire and copy the RADIUS shell script called
radius.shand put it into the
Ensure that you have a running VAULT server.
Ensure that you have configured a VAULT namespace.
Ensure that you have a valid VAULT token.
Ensure that you are on HYPR Server 3.7 or higher.
Follow the below instructions on how to deploy and configure the RADIUS server.
- Go to the
/opt/hyprdirectory on your server.
- Start the RADIUS server by running
./radius.shon the command line (located in the
- Enter the VAULT URL.
- Enter the VAULT Token.
- Enter the VAULT namespace.
- Verify that the startup has completed.
- Navigate to
http://<your_host>:9077/radius/settingsor if you have NGINX or a reverse proxy configured, just go to
- Enter the provided configuration key and move to the Configuration Settings instructions below!
- Set the Local RADIUS Domain to 127.0.0.1; this is used to verify that the RADIUS server is running properly.
- Set the local RADIUS secret for testing the RADIUS server. This should be a String value.
- Set the Client IP and the RADIUS Secret of each client you expect to connect to this RADIUS server. The RADIUS server can support multiple clients such as VPN, VDI, and SSH PAM modules with individual secret values.
- Set the RADIUS Timeout; the default is 60000 or 60 seconds.
- Set the HYPR Relying Party URL. This should be the URL of your HYPR server that you have been given or deployed yourself.
Set the HYPR Relying Party App ID. This should be the app you configured in your HYPR FIDO Control Center.
Set the proxy configuration if you require a proxy to communicate from the RADIUS server to the HYPR Server itself.
- Click Submit and Restart to submit the information and restart the RADIUS server. You will see a confirmation message once the server is restarted.
The HYPR RADIUS server comes with a local RADIUS client that is web based and can be used to test the RADIUS server functionality with the configured RP. Follow these instructions to make sure that the RADIUS server is successfully authenticating users.
Go to the RADIUS server login page at
https://<host_url>/radius/loginon your browser.
Enter the username of a previously registered user with the relying party and app ID.
- Authenticate on your mobile when you receive the PUSH notification.
- See that the authentication is completed on your browser.
This will confirm that your local RADIUS client is working. This RADIUS client uses Client IP 127.0.0.1, as configured earlier - and the local RADIUS secret.
Deploy your own RADIUS clients and configure your RADIUS server to work with those clients on the Settings screen.
Updated 10 months ago