Home

Secure Authentication end-user guide MP token for Windows PC

image

Contents

1. Figure 6 install Software Tools Copyright Orange Business Services 21 of 102 end user guide secure Authentication how do download the MP token file Internet Explorer The MP token file download step is automatically managed by the Software Tools Activex Token file download page remains displayed on your Internet Explorer browser verify the Software Tools ActiveX control is enabled upon your browser select Tools Manage Add ons Enable or Disable Add ons Add ons that have been used by Internet Explorer in the Show drop down list The ActiveX control named activeXWebAPIControl must be referenced Verify you defined the SafeNet URL as trusted site see Error Reference source not found chapter amp Firefox If your Firefox browser displays Additional plugins are required to display all the media on the page banner close it Click on Download open the token file with BlackShield Token application click on Next enter the PIN displayed on the web page here 0000 into the PIN field of the MP application if needed select the MP token you want to use and click on Generate Token Code enter the PIN displayed on the web page here 0000 followed by the new generated Token Code then click on Next i Business Business JEUG Services GELI Services SAS self enrollment SAS self enrollment Please enter the displa
2. specified in the sales order and invoice as applicable You Continu have the right to make one backup copy of the Software and Documentation solely for archival back up or disaster Print Save Go Back Continue e090 amp Install MP 1 Select a Destination hrener Select the disk where you want to install the MP 1 software roduction prenet Standard Install on Macintosh HD TE VE ER amp Install MP 1 The installation was completed successfully The installation was successful The software was installed Click Install to perform a standard installation of this software on the disk Macintosh HD This will take 6 7 MB of space on your computer 1 d 1 stination Select ee QO tallation Type tallation Macintosh HD 136 4 GB available mmary 159 18 GB total Installing this software requires 6 7 MB of space You have chosen to install this software on the disk Macintosh HD Go Back Continue CA Change Install Location GoBack Q Install Figure 26 install MP application Copyright Orange Business Services 41 of 102 end user guide secure Authentication how do download and install my MP token file Within your e mail client open again the Token Installation for Mac OS X message follow the Step 2 instructions to copy the MP token file code Within your finder select Application then click on MP 1 app
3. 1 SAS Self enrollment Inbox x Within your e mail client open the SAS Self enrollment message again and click on the SAS self service portal URL link your web browser will connect to the self service web site Within the SAS self service portal within the Home page click on Sign In within the Authenticate page click on Sign in using your token SafeNet Authentication S SAS Self enrollment james brown Your self enrollment account has been created If you are enrolling a I 11 42 oh 5 SafeNet Authentication Server noreply safenet inc com 11 42 2 minutes ago to me james brown Your self enrollment account has been created If you are enrolling a hardware token and do not have your token yet please contact your system administrator Please go to the following URL to enroll with SAS https se safenet inc com selfEnrollment index aspx code akmmpl3oWuAvL49 TyxXev5 Ifthe above link does not work please copy and paste this url to your web browser Self service Portal fj My Profile Reset PIN Once enrolled you can go to the following URL to access your SAS self service portal https ss safenet inc com blackshieldss O SH17XZMHTE index aspx You can go to the following URL to access the Administrator guide http dy orange business com secure authentication documentations end user quides Resync Token Reset PIP Serv
4. 14 41 james brown SAS Self enrollment lt iiROCERS E 3 19PM D ORG std ROGER ames brown Your sel ount Follow these 2 easy steps to install the MP 1 Select Token token on your Apple iOS or Android O S device Step 1 For iOS tap here Updated 07 12 12 14 42 Figure 44 download MP application Copyright Orange Business Services 59 of 102 end user guide secure Authentication how do install the MP application 1 Within the App Store tap INSTALL APP O to install the MP application on your iPhone 2 Within your iPhone home screen at the end of the installation the MP application launch icon O appears CRYPTOCard MP 1 Authentication Token CRYPTOCard Inc INSTALL APF 1 eee 7 Details Reviews Related A ROGERS E 3 19 PM O 100 22 tl ROGER Select Token Figure 45 install MP application how do download the MP token file 1 Within your e mail client open the Over The Air OTA Installation message again tap the MP 1 token profile URL link to retrieve the MP application from the App Store 2 Within your Safari browser the MP token file with 7mp extension is now downloaded O ut Orange F amp 14 42 100 E3 mil Drange F gt 14 43 ES gt 36 14 45 84 R san 1 ca 1 CZD l Open in MP 1 SafeNet Authentication 14 42 Over The Air OTA Installation for iP 1 james brown Follow these 2 easy
5. O to launch your MP application Within your MP application click on Paste to paste your MP token file code then click on Continue O qi 5 Token Installation for Mac OSX Inbox x SafeNet Authentication Server noreply safenet inc com 07 51 3 minutes ago A v to me v james brown Follow these easy steps to install the MP 1 token onto your Mac Step 1 Please ensure that you have installed the MP 1 app for Mac OS X If you do not have this installed it is available here https se safenet inc com selfEnrallment MP 1 pkg Step 2 Now that the MP 1 software is installed please complete the following steps 1 Copy the code below by highlighting the text to include the first and last characters up to and including the trailing BSID characters at the end of the code aHROcHMBLy9zZ55z YWZIbmYOLWIuY y5jb20ve2vszkvucm9sbGilbnQvc2hvenRDbZRILMFzoHg c2M9UXp1OHJhMkl4 UAGBSID 2 Canv the ende hv haldind dawn the Command and hittans e0oo Applications FAVORITES 5 Cli All My Files AirDrop E Desktop admin Documents prenet Authentication SERVICE Import Token Enter or paste token import code Name MP l app Kind Application Size 6 4 MB zcHg c2M9SkhSaXhjZEZUaSAQBSID Created jeudi 9 ao t 2012 21 28 Modified aujourd hui 09 47 Paste Last opened aujourd hui 09 47 Version 1 0 Cancel Continue Y Figure 27 install MP token
6. Sign in using your token SafeNet Authentication 14 41 a SAS Self enrollment james brown Your self enrollment account has been a i aa m all rat j i TS Caton gt ile lt TS s 7 be pee SG Gat m ON VILLE stir vie L Or sateNet RUE ss safenet inc com blac G sees pee ee BUT net it MOGI VANS p Sat utr nication Vi ss safenet inc com bla Search el i Please go to the following URL to enroll with SAS Sign In Authenticate Sign in using your token O If the above link does not work please copy and paste this url to your web browser s rget 2012 Daite bag Al paie Benereed Reset PIN Resyne Token Once enrolled you can go to the following URL to access your SAS self service portal Terma i v r Gurie Language re yew n igan i blackshieldss O 3H17XZMHTE ind ASPX You can go to the following URL to access the Administrator guide Figure 50 access to the SAS self service portal sign in page The authentication process depends on the type of the MP token PIN Code Copyright Orange Business Services 63 of 102 end user guide secure Authentication server side PIN Code 1 Within the SAS self service portal within the Authenticate to Process page enter your user ID in the User ID field and your PIN Code in the OTP field O 2 Within your MP application withi
7. and Confirm Password fields then click on Next The enrollment web site displays a page that confirms your password has been successfully activated Memorize your User ID then click on Close when using Firefox you have to close the browser prenet Authentication SERVICE Business WGL Services SAS self enrollment SAS self enrollment Your token has been successfully activated Please remember your User ID Please enter a password between 8 and 16 characters long Enter Password eovccece User ID brown Confirm Password DO Copyright 2012 SafeNet Inc All Rights Reserved Copyright 2012 SafeNet Inc All Rights Reserved Figure 87 create password Complexity requirements not met error message try to enter your password again making sure to meet complexity requirements You have failed to provide the correct response too many times error message contact your usual help desk Copyright Orange Business Services 99 of 102 end user guide secure Authentication how do authenticate with my password You have the ability to test authentication with your password thanks to the SAS self service portal i SAS Self enrollment Inbox x Within your e mail client open the SAS Self enrollment message again and click on the SAS self service portal URL link your web browser will connect to the self service web site Within the SA
8. e press and hold the button approximately 3 4 seconds on the token until the Init prompt appears then release the button e the token will cycle through a series of prompts press the button while the rESYNC prompt is displayed e The digits will be displayed sequentially For every digit of the resynchronization challenge press the button to accept the displayed digit e After the last digit of the challenge is displayed double press the button Memorize the response value displayed by your token 6 Within the SAS self service portal within the Challenge Response page enter the response value in the Response field then click on OK O Within the Confirmation page a message indicates your token resynchronization is successful o Home Self service Portal Resync Token Challenge Response Y SAS SELF SERVICE PORTAL SELF SERVICE PORTAL KT TOKEN Respond to challenge 143523085 4352308 77 lt Challenge Response Help Me OK Home Self service Portal ET Resync Token Challenge Response Respond to challenge 43523085 Response erre ea Fesponse Help Me OK Q E Resyne Token orion Figure 72 resynchronize token 2 2 The token cannot be synchronized error message try to resynchronize your MP token again making sure to copy paste the right challenge response values Copyright Orange Business Services 83 of 102
9. GELU Services Prown Token Resync s n 1000026382 han Challenge Enter Challenge to generate a resync code Self service Portal eo MP 1 Software Tools Resync Token Challenge Response prenet Authentication SERVICE Respond to challenge 87670166 n jbrown Token Resync Cancel omine 3 Response pesses O4 Response s n 1000026382 A i E Enter challenge to generate a resync code Help Me OK enge 38670752 al Resync code 92095978 Copy Q Resyne Token Corimaton Token successfully synchronized ae Ee Figure 37 resynchronize token with client side PIN Code The token cannot be synchronized error message try to resynchronize your MP token again making sure to copy paste the right challenge response values Ifthe self service portal displays the The token cannot be synchronized message Try to resynchronize your MP token again making sure to copy paste the right challenge response values Copyright Orange Business Services 51 of 102 end user guide secure Authentication how do rename my MP token By default MP token name is based on your user ID Within your MP application click on the tile of the MP token you want to use select the gear icon then Rename enter your PIN Code in the PIN field click on Continue enter the new MP token name in the New Name field then click on Continue Your
10. you can go to the following URL to access your SAS self service portal https ss safenet inc com blackshieldss O SH17XZMHTE index aspx You can go to the following URL to access the Administrator guide http www orange business com secure authentication documentati Self service Portal sign in 7 YA oy i My Profile Reset PIN Self service Portal Sign In Authenticate Sign in using your token Figure 68 access to the SAS self service portal sign in page Copyright Orange Business Services 79 of 102 end user guide secure Authentication 3 Within the SAS self service portal within the Authenticate to Process page enter your user ID in the User ID field and your PIN Code in the OTP field O 4 With your KT token press button to both power on the token and generate a new Token Code then memorize the displayed Token Code 5 Within the SAS self service portal within the Authenticate to Process page paste the Token Code value next to the PIN Code in the OTP field then click on OK The Sign Out button displayed within the Home page indicates your authentication is successful SAS SELF SERVICE PORTAL KT TOKEN Business bakk bl Services Sign In Authenticate to Process User ID bron Token Code OTP besdbeseesedl i Help Me OK i End user Self service Portal My Profile Reset PIN Resync
11. CRYPTOCARD Figure 53 edit token Copyright Orange Business Services 66 of 102 end user guide secure Authentication how do change my PIN Code The PIN Code change process depends on the type of the MP token PIN Code server side PIN Code Within the SAS self service portal within the Home page once authenticated Sign Out button must be displayed O tap Reset PIN within the Create New PIN page choose a new PIN Code and enter it in the Create New PIN and Verify PIN fields then tap Ok Within the Create New PIN page a message indicates your PIN Code change is successful J CD ro Sion Out Reset PIN Create New PIN Terres of beer peter angu Capra 2017 Betetet fer A ages Help Oos Figure 54 change server side PIN Code Y No tokens are enabled to change the Personal Identification Number PIN error message your MP token has not a server side PIN Code but a client side instead Copyright Orange Business Services 67 of 102 end user guide secure Authentication client side PIN Code Within your MP application within the Edit Token screen tap Change PIN choose a new PIN Code and enter it in the Enter new PIN field tap Done re enter your new PIN Code in the Re enter new PIN field then tap Done il Orange F 3G 16 30 00 wt Oranae F 3G 5 15 100 wit Orange F
12. Code enter it in the New PIN and Verify PIN fields O then click on Next The enrollment web site displays a page that confirms your MP token has been successfully activated Memorize your User ID then click on Close O when using Firefox you have to close the browser arkene prenet Authentication SERVICE kuk Services SAS self enrollment SAS self enrollment Please enter your new PIN and verify it Please enter a PIN between 4 and 8 characters long Your token has been successfully activated Please remember your User ID elow New PIN EREE User 1D brow ON eece Verify PIN oe Q Copyright amp 2012 SafeNet Inc All Rights Reserved Copyright 2012 SafeNet Inc All Rights Reserved Figure 66 activate token with user selected PIN PIN change failed error message try to enter your new PIN Code again making sure to meet complexity requirements displayed You have failed to provide the correct response too many times error message contact your usual help desk how do I complete installation process with fixed PIN code Within your web browser the enrollment web site displays a page that confirms your MP token has been successfully activated Memorize your User ID then click on Close when using Firefox you have to close the browser Sa feNet Authentication SERVICE SAS self enrollment Your token has been successfully activated Please reme
13. EEE E EEE EEE SEGRE EEEES 54 can anybody EENINP ee 54 what kind of PIN Code is supported by MP token cccccccsecceecseeeeeeseseeeeeeeeeeeeeeeaeeaeeaeeenes 55 what is the MP GIG OOM NE EE ME 56 what are my responsibilities EEE ME 56 SOGA OG PIN COGG att te tt et he ee ee a 56 what if forget my PIN Code NN 56 what ii MY MP LOTS TOCKA nne E ACN O 56 how long will my MP token continue to operate cccecceeceeceeeeeeeeeaeeseeeeeeeeeeeeeetnetaeeaeeaeeees 56 what should I do if I can t logon USING my token cccccseeceeceeeceeeeeeeeeeeeeeeeeeeeeseeeeeeaeeeneeas of how do enroll with a MP token cccccccesecescceseceeececeeeeeceeeneeeeeeeseeeseeeeaeeseetseetseetseetsaeeas 58 how do I access the enrollment web Site rareranrrareraneranrraneranrranrraneraneraneranesanesanesanernn 58 how do I select an iPhone as target device cccccccecceeceeeeeecaueceeeeeeeeeeseeseeeaeeseeeseesenegs 59 how do I download the MP QppliCation ccccccccccecseeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeneeaeeaeeaeeaees 59 how do l install the MP application scrisscdssvinsones barsersnsahsnicannesehaniaataied tspintsiedohuniaantendatineniobaninitaeaaniitn 60 how do I download the MP token file rurrrurnvarrvrrvarrvrrrarrrrrvrrnarrnarrnnrrnnrrsnrnsnrrsnrnrnnennn 60 how do I install the MP token file with user selected PIN Code ccccccecseeetseeeeeeeeeeeeens 61 how do I install the MP token file with fixed PIN C
14. PIN Code in the OTP field then click on OK The Sign Out button displayed within the Home page indicates your authentication is successful SAS SELF SERVICE PORTAL MP APPLICATION E MP 1 Software Tools Business Services Sprenet Authentication SERVICE jbrown Generate OTP s n 1000026382 Your one time password Sign In Authenticate to Process User ID bron ore cor Token Code Cancel Continue Help Me OK Q amp PIN Code j a Business Services Self service Portal End user p Z My Profile Reset PIN Resync Token Figure 31 authenticate with server side PIN Code Your login attempt was not successful error message try to authenticate again making sure to enter your PIN Code followed by the Token Code generated by your MP token in the OTP field Copyright Orange Business Services 45 of 102 end user guide Secure Authentication client side PIN Code 1 Within the SAS self service portal within the Authenticate to Process page enter your user ID in the User ID field O 2 Within your MP application click on the tile of the MP token you want to use enter your PIN Code in the PIN field click on Continue then on Copy to copy the generated Token Code 3 Within the SAS self service portal within the Authenticate to Process page paste the Token Code val
15. SAS self enrollment SafeNet Authentication Service Multi Platform Token MP Token can be installed on many different target devices grensen Autnentionion SET The allowed targets are set by your SafeNet Authentication Service SAS self enrollment Administrator Safehiet Authentication Service Server will pend an g mail ba User ID jbrown you The myil will contain initial PIN and Cwer The Air I rstadlatian link OTA You may dose your browser O I would like to install an MP token onto Copyright 2012 SafeNet Inc All Rights Reserved Install Locally Secure Flash Drive Java Enabled Phone BlackBerry D iPhone D Android Windows Phone 7 Mac O5 x Lion nt O Figure 43 select iPhone as target device how do I download the MP application 1 Within your e mail client open the Over The Air OTA Installation message tap the icon related to the Apple iOS to retrieve the MP application from the App Store 2 Within the App Store tap FREE to download the MP application Details CRYPTOCard MP 1 C Authentication Token brow 2 qmail com c CRYPTOCard inc SafeNet Authentication 14 42 Over The Air OTA Installation for iP Over The Air OTA Installation for Kad oe FREE ames brown Follow these 2 easy steps to iPhone and Android Devices f rel emt re 012 14 4 e e tall the MP 1 token on your Apple iOS Details Reviews Related SafeNet Authentication
16. THAT YOU PONN WARNING This program is protected by copyrig READ THIS LICENSE AGREEMENT THAT YOU UNDERSTAND IT ecties emational tr MAY NOT INSTALL OR USE THIS SOFTWARE 1 Grant of License for Personal Use P tion Service Software Tools InstallShield Wizard x insake Click Next to install to this folder o cick Change to install to diferant folder 19 8 151948 Service Software Tools to pes Install SafeNet Authentication i C Program Fiesi CORYPTOCardibladShield ID Software Tools lt e war QD Hw ce 5 Ready to Install the Program The ward is ready to begin installation ick Install to begin the instalation Tf you want to review or change any of your installation settings dick Back Click Cancel to ext the wizard 9 SafeNet Authentication Service Software Tools Installshield rd joj gt Inctaling SafaNet Authertication Service Software Tools ae Ee met The program Features you selected are being installed Please wak while the InstallShield Wizard installs SafeNet Authentication Service Softwere Tools This may take several minutes Status EEE TETT TT TT Safenet Authentication Service Software Tools InstallShield Wizard xj lt Back I Install I 8 Carcel penet Authentication v InstallShield Wizard Completed The InstallShield Wizard has successfully installed Safetet Authentication Service Software Tools Click Finish to ext the wizard
17. You have to protect your PIN Code just as you would the PIN Code for your bank or credit card Never share it with anybody including people you trust Your usual helo desk will never ask for your PIN Code and you should never reveal it to them Never write down your PIN Code what if forget my PIN Code Contact your usual helo desk Upon verifying your identity they will be able to reset your PIN Code what if my MP token is locked Contact your usual helo desk Upon verifying your identity they will be able to unlock your MP token how long will my MP token continue to operate Your MP token will be able to generate OTPs until it is revoked by IT administrators Copyright Orange Business Services 56 of 102 end user guide secure Authentication what should do if can t logon using my token The most common cause of failed logon is entering an incorrect OTP Never attempt to reuse a Token Code and ensure that you enter the Token Code exactly as displayed on the token including any upper and lower case letters and punctuation that it may contain By default your account will automatically lock for 15 minutes if more than 3 consecutive logon attempts fail You must wait this amount of time before your account will unlock Contact your usual help desk to resolve logon problems Copyright Orange Business Services 57 of 102 end user guide secure Authentication how do enroll with a MP token In this chapter Safa
18. and managed at the Secure Authentication server level The PIN Code displayed during MP token installation is permanent you can not change it Token Codes are generated without entering any PIN Code in the Token application OTP PIN Code Token Code what are my responsibilities Using the KT token will not only provides security It will simplify your life be reducing or eliminating the need to remember or periodically change passwords Your KT token will do this for you every time you logon However you do have a few simple obligations protect your PIN Code You have to protect your PIN Code just as you would the PIN Code for your bank or credit card Never share it with anybody including people you trust Your usual helo desk will never ask for your PIN Code and you should never reveal it to them Never write down your PIN Code what if forget my PIN Code Contact your usual helo desk Upon verifying your identity they will be able to reset your PIN Code what if my KT token is locked Contact your usual help desk Upon verifying your identity they will be able to unlock your KT token how long will my KT token continue to operate Your KT token will be able to generate OTPs until it is revoked by IT administrators what should do if can t logon using my token The most common cause of failed logon is entering an incorrect OTP Never attempt to reuse a Token Code and ensure that you enter the Token Code exact
19. as stolen The problem of course is that it is almost impossible for you or the security professionals that manage your network to discover your password has been compromised until long after damage has been done The KT token solves this problem because the instant you logon with your OTP it is no longer valid Any attempt to logon by reusing the OTP will not only fail but also instantly alert your network security professionals to a possible attack on your identity Thanks to PIN Code protection your KT token is protected against unauthorized use by a PIN Code only you know Again much like a bank card or Chip and PIN credit card the thief not only needs access to your KT token but must know your PIN Code as well Any attempt to use the KT token with and incorrect PIN Code will fail Successive attempts to guess your PIN Code will automatically lock your KT token effectively disabling it giving you and your network security professionals time to deal with the threat Copyright Orange Business Services 73 of 102 end user guide secure Authentication what kind of PIN Code is supported by KT token e Server side user selected PIN Code the PIN Code is stored and managed at the Secure Authentication server level You have the ability to change it at any time Token Codes are generated without entering any PIN Code in the Token application OTP PIN Code Token Code e Server side fixed PIN Code the PIN Code is stored
20. can anybody use my MP token Thanks to PIN Code protection your MP token is protected against unauthorized use by a PIN Code only you know Again much like a bank card or Chip and PIN credit card the thief not only needs access to your MP token but must Know your PIN Code as well Any attempt to use the MP token with and incorrect PIN Code will fail Successive attempts to guess your PIN Code will automatically lock your MP token effectively disabling it giving you and your network security professionals time to deal with the threat Copyright Orange Business Services 35 of 102 end user guide secure Authentication what kind of PIN Code is supported by MP token e Server side user selected PIN Code the PIN Code is stored and managed at the Secure Authentication server level You have the ability to change it at any time Token Codes are generated without entering any PIN Code in the Token application OTP PIN Code Token Code e Server side fixed PIN Code the PIN Code is stored and managed at the Secure Authentication server level The PIN Code displayed during MP token installation is permanent you can not change it Token Codes are generated without entering any PIN Code in the Token application OTP PIN Code Token Code e Client side user selected PIN Code the PIN Code is stored and managed at the Mac level You have the ability to change it at any time The PIN Code must be entered into the Toke
21. ccoo PIN Change successful Select a token from New PIN sene the list 5 Re enter New PIN leone Cancel Continue am 3 v OTP 380 Signature S a Operation sg I Resync 3R Rename N Change PIN Figure 34 change client side PIN Code PIN Change Failed error message try to change your PIN Code again making sure to enter a complex one the correct number of characters and the correct types of character Copyright Orange Business Services 48 of 102 end user guide secure Authentication how do I resynchronize my MP token Within the SAS self service portal within the Home page click on Resync Token within the User page enter your user ID in the User ID field O click on Next enter the serial of your MP token in the Serial field then click on Next Self service Portal f A 11922 8 UV Self service Portal Signin My Profile Reset PIN Resync Token Resync Token User User ID jbromn D Next Resync Token User Please note the serial number is case sensitive Serial 1000026382 O Next 5 Figure 35 resynchronize token common part The end of the resynchronization process depends on the type of the MP token PIN 0102 Copyright Orange Business Services 49 of 102 end user guide secure Authentication server side PIN Code 4 Within the SAS self service portal within the Cha
22. damage has been done The MP token solves this problem because the instant you logon with your OTP it is no longer valid Any attempt to logon by reusing the OTP will not only fail but also instantly alert your network security professionals to a possible attack on your identity can anybody use my MP token Thanks to PIN Code protection your MP token is protected against unauthorized use by a PIN Code only you know Again much like a bank card or Chip and PIN credit card the thief not only needs access to your MP token but must Know your PIN Code as well Any attempt to use the MP token with and incorrect PIN Code will fail Successive attempts to guess your PIN Code will automatically lock your MP token effectively disabling it giving you and your network security professionals time to deal with the threat Copyright Orange Business Services 54 of 102 end user guide secure Authentication what kind of PIN Code is supported by MP token e Server side user selected PIN Code the PIN Code is stored and managed at the Secure Authentication server level You have the ability to change It at any time Token Codes are generated without entering any PIN Code in the MP application OTP PIN Code Token Code e Server side fixed PIN Code the PIN Code is stored and managed at the Secure Authentication server level The PIN Code displayed during MP token installation is permanent you can not change it Token Codes are
23. eee ee este eeaeeeeeeeeeeeeeeeeetaetaeegegaes 83 Figure 73 how does it work 1 4 scorch ascccnsnareansduasnasiasasadsindbansdsieaenndinedaaeneasahosceootiansdasdsecdseadeenee 85 Figure 74 how does it work 2 4 1 urrarerarvanerarvanrrarnnnrrarnnnrrsrnnnrsarnnnrrernnnrsannnnersnnnnrsannnersannnsennen 85 Figure 75 how does it work 3 4 ce assures staat cme miabnd EN 86 Figure 76 how does it work 4 4 EE EE EE NE 86 Figure 77 TN NNN 89 UTEN 90 TONEEL AS E EA e E TE 91 Copyright Orange Business Services 11 of 102 end user guide secure Authentication Figure 80 access to the SAS self service portal sign IN page cesccecceeceeeeeeeeeeeeeeeeeeeeeeeeneens 92 Figure 81 authenticate common part ccccccecceecseceeeeeeeeeseeseeee eee eeeeeeeeeeeseeseeeeeeeeeneeneeaeeaeeaees 93 Figure 82 authenticate with server side PIN Code cccccccecceeeeeeeeeeeeeeeeeeeeeeeeeeeeneeaeeaseaeeaees 94 Figure 83 authenticate with fixed PIN Code rrirrarrarrarrnrrnernarrarrarrerrsrrnennennersarserrsrrsennennennen 94 Figure 84 change PIN Code tn eh ent se te EEE 95 Figure so we gic ale sg 6 Gla pat te et hee ee ee a a 96 Figure 86 self enrollment Ink cece cecceeceeceeceeceeceeeaeeceecueseeceeseeceeauesuesaesaeseeseeseesnesaeesensass 98 Figure 87 create password ine et tea eet he ne eet he en ee rr rnnr PEOrEEEREDEEEESrenEEEt 99 Figure 88 access to the SAS self service portal sign IN page ccccseeceseseeeeeeeeeeeeeeeeeaeeeeeeae
24. end user guide secure Authentication GriDsure token In this chapter you will find instructions for activating and managing your GrlDsure token what is a GriDsure token GrlDsure is a way of providing an end user the ability to generate a one time password without requiring the end user to have any additional hardware or software applications GrlDsure presents the end user with a grid of cells containing random characters from which the end user selects their personal identification pattern PIP Each time the end user needs to authenticate the grid will display a random unique set of characters The end user then just needs to remember their PIP and provide the specific characters within those cells that make up their PIP in order to securely authenticate to the protected network resource Up until now you ve logged on with your User Name and Password The problem is that passwords are easily compromised putting your identity and the resources you access at risk By using a MP token you will be able to generate a One time Password or OTP As the name implies an OTP can only be used once Each time you logon you will use your MP to generate a new OTP how does it protect me Password theft is the single most common way thieves and hackers steal identities and gain unauthorized access to networks and resources While they have many ways to steal a password success depends on the stolen password being valid much
25. enter it in the Create New PIN and Verify PIN fields then click on OK Within the Create New PIN page a message indicates your PIN Code change is successful _ P Services Services Reset PIN Create New PIN Change your PIN Create New PIN orm FA My Profile Reset PIN Resync Token Verify PIN esse Help Me ok Q GEWG Services CC Sion Out Reset PIN Create New PIN Your Security PIN has been successfully reset amp Figure 33 change server side PIN Code Y No tokens are enabled to change the Personal Identification Number PIN error message your MP token has not a server side PIN Code but a client side instead Copyright Orange Business Services 47 of 102 end user guide secure Authentication client side PIN Code Within your MP application click on the tile of the MP token you want to use select the gear icon then Change PIN enter your current PIN Code in the Current PIN field choose a new PIN Code and enter it in the New PIN and Verify New PIN fields then click on Continue In the right panel of your MP application a message indicates your PIN Code change is successful O EO MP 1 Software Tools e600 MP 1 Software Tools prenet Authentication SERVICE prenet Authentication SERVICE w jbrown Change PIN jbrown s n 1000026382 s n 1000026382 M Change the PIN for this token Current PIN
26. file The end of the MP token file installation process depends on the type of the MP Token PIN Code Copyright Orange Business Services 42 of 102 end user guide secure Authentication how do complete installation process with fixed PIN code Within your MP application memorize the displayed PIN Code this will be your definitive PIN Code then click on Continue A new entry appears in the left panel of your MP application confirming your MP token has been successfully activated Memorize your User ID eo MP 1 Software Tools 600 MP 1 Software Tools Sprenet Authentication SERVICE prenet Authentication SERVICE germ Token PIN yg ibrown s n 1000026382 s n 1000026382 jbrown Memorize this PIN 1 Enter PIN and Passcode to authenticate with the server Cancel Continue Figure 28 install MP token file with fixed PIN Code how do complete installation process with user selected PIN code Within your MP application choose your PIN Code and enter it in the Enter PIN and Re enter PIN fields O then click on Continue A new entry appears in the left panel of your MP application confirming your MP token has been successfully activated Memorize your User ID eo MP 1 Software Tools 6 0 0 MP 1 Software Tools prenet Authentication SERVICE Sprenet Authentication SERVICE jbrown Change PIN gg brown s n 1000026382 s n 1000026382 Create a new PIN for this toke
27. incident to your Administrator immediately The privacy of your Device and the confidentiality of your PIN are crucial to the verification of your on line identity and the security of your information and the networked system s that may be accessed using your identity If your Device is lost damaged or stolen or if you believe that the confidentiality of your secret PIN has been compromised in any way you should report these incidents immediately to your Administrator Upon receiving the notice the Administrator will then disable your Device or allow you to change your PIN to ensure that no third party may misuse them If you do not report these incidents immediately there is the risk that someone else may steal your on line identity Any activities they carry out using your identity will compromise the security and integrity of your information and systems You may be held legally responsible for activities that are perpetrated using your identity You must not give away sell rent or lend your Device even to someone you believe to be an authorized user of the system You must not mistreat damage or open your Device or try to reverse engineer decompile disassemble translate copy and alter the Device or any of its components If you lose or break your Device a replacement fee will be charged by Orange to your organization Should your account be terminated for any reason or if you have no further need to use the system you
28. james brown Your self enrollment account has been created If you are enrolling a 11 42 SAS Self enrollment inbox x a B SafeNet Authentication Server noreplyi safenet inc com 11 42 2 minutes ago to me a james brown Your seltenrallment account has been created lf you are enrolling a hardware token and do not have your token yet please contact your system administrator Please go to the following URL to enroll with SAS https se safenet Inc com selfEnrollment Index aspx code akmmplovVvuAsvLaAgi Tgyxevoall eo Ifthe above link does not work please copy and paste this url to your web browser Once enrolled you can go to the following URL to access your S43 self service portal https ss safenet inc com blackshieldss O SH1 AMH T Endex aspx You can go to the following URL to access the Administrator guide http av orarnge business com secure authentication documentations end user quides s Figure 86 self enrollment link SAS Self enrollment e mail not received verify if the mail is not stored in the junk folder of your e mail client Your provisioning task has already been completed error message verify you opened the latest self enrollment message and not an old one Copyright Orange Business Services 98 of 102 end user guide secure Authentication how do create my password Within your web browser choose your password and enter it in the Enter Password
29. steps to install the MP 1 token on your Apple 105 SafeNet Authentication 14 41 SAS Self enrollment gt james brown Your self enrollment account brown 1000026382 7m f you are enrolling ha i p 196 bytes For Android tap here Step 2 After the MP 1 is installed please click the URL below to install the MP 1 token profile Updated 071212 14 42 Figure 46 download token file Copyright Orange Business Services 60 of 102 end user guide secure Authentication how do install the MP token file with user selected PIN Code 1 Within your Safari browser tao Open in MP 1 O 2 Within your MP application choose your PIN Code and enter it the Enter new PIN field tap Done re enter your PIN Code in the Re enter new PIN field then tap Done to display the Select Token screen atl Orange F 3G 100 at Orange F 3G Cancel Cancel se safenet inc com se Enter new PIN Re enter new PIN jbrown 1000026382 7mp 196 bytes er Poe AT ok E Figure 47 install token file with user selected PIN Code PIN change failed error message try to enter your new PIN Code again making sure to meet complexity requirements displayed You have failed to provide the correct response too many times message contact your usual help desk Copyright Orange Business Services 61 of 102 end user guide secure Authentication how do install the
30. the same The end user just needs to enter the new characters in their PIP displayed by the grid Figure 75 how does it work 3 4 In this example the end user would now enter 0182 as their one time password to authenticate Figure 76 how does it work 4 4 Copyright Orange Business Services 86 of 102 end user guide secure Authentication can anybody use my GriDsure token Thanks to PIN Code protection your GrlDsure token is protected against unauthorized use by a PIN Code only you know Again much like a bank card or Chip and PIN credit card the thief not only needs access to your GriDsure token but must know your PIN Code as well Any attempt to use the GrlDsure token with and incorrect PIN Code will fail Successive attempts to guess your PIN Code will automatically lock your GrlDsure token effectively disabling it giving you and your network security professionals time to deal with the threat what kind of PIN Code is supported by GriDsure token e Server side user selected PIN Code the PIN Code is stored and managed at the Secure Authentication server level You have the ability to change it at any time e Server side fixed PIN Code the PIN Code is stored and managed at the Secure Authentication server level The PIN Code displayed during MP token installation is permanent you can not change it what are my responsibilities Using the GriDsure token will not only provides security it will simplif
31. these easy steps to install the MP 1 taken onto yi 07 51 Token Installation for Mac OSX Inbox x SafeNet Authentication Server noreply safenet inc com 07 51 3 minutes ago to me james brown Follow these easy steps to install the MP 1 token onto your Mac Step 1 Please ensure that you have installed the MP 1 app for Mac OS X If you do not have this installed it is available here https se safenet inc com selfEnrallment MP 1 skai Step 2 Now that the MP 1 software is installed please complete the following steps 1 Copy the code below by highlighting the text to include the first and last characters up to and including the trailing BSID characters at the end of the code aHROcHMBLy9zZ55z YWZIbmYDLWIuY y5jb20ve2 sZkVucm9sbG1 IbnQvc2hycnRDb2RILmF zcHg c2M9UXp1 OHJHMkKI4UIAgBSID 2 Copy the code by halding down the Command and C buttons 3 Open the MP 1 app and then click the Import button 4 Click inside the text box and then paste the code by holding down the Command and buttons 5 Click the Import button to complete the installation of the taken Figure 25 download MP application Copyright Orange Business Services Clear AO of 102 end user guide Secure Authentication how do install the MP application Within your MP application installer click on Continue O to accept the installer certificate on Continue two times on Agree to acce
32. until the Copy icon appears 3 Within your MP application within the Edit Token screen tap Resync Token within the Resync Token screen paste the challenge value in the Enter Challenge for token field hold your finger on the field until the Paste icon appears tap Done copy the generated response value hold your finger on the value until the Copy icon appears 4 Within the SAS self service portal within the Challenge Response page paste the response value in the Response field O hold your finger on the field until the Paste icon appears then click on OK Within the Confirmation page a message indicates your token resynchronization is successful SAS SELF SERVICE PORTAL MP APPLICATION at Orange F 3G 09 36 100 K3 amp SafeNet Authentication Service Self Service ss safenet inc com t il Orange F 3G 16 30 Select Token Edit Token x x Change PIN Self servic Sign In Data Copy Select All D a Resync Token 2 100 EF Challenge Cancel Resync Token Done Enter Challenge for token jbrown H bs712437 il Orange F 3G 09 39 100 EF SafeNet Authentication Service Self Service Self service Portal ome tl Orange F 3G 09 38 il Orange F F 15 33 100 E gt amp SafeNet Authentication Service Self Service Resync Token ss safenet inc co
33. what if my MP token is locked Contact your usual helo desk Upon verifying your identity they will be able to unlock your MP token how long will my MP token continue to operate Your MP token will be able to generate OTPs until it is revoked by IT administrators what should do if can t logon using my token The most common cause of failed logon is entering an incorrect OTP Never attempt to reuse a Token Code and ensure that you enter the Token Code exactly as displayed on the token including any upper and lower case letters and punctuation that it may contain By default your account will automatically lock for 15 minutes if more than 3 consecutive logon attempts fail You must wait this amount of time before your account will unlock Contact your usual help desk to resolve logon problems Copyright Orange Business Services 17 of 102 end user guide secure Authentication how do enroll with a MP token When using Internet Explorer as Web browser From the Internet Explorer menu bar select Tools Internet Options Security tab Trusted sites zone click on Sites and add the following URL This setting will allow your Internet Explorer web browser to install and run the Software Tools activex control how do access the enrollment web site Within your e mail client open the SAS Self enrollment message and click on the self enrollment URL link your web browser wi
34. 3G Select Token Edit Token Cancel Cancel k Change PIN 1 Enter new PIN Re enter new PIN s Resync Token A B Rename Token pA EE ow Signature Operation ef CRYPTOCARD Figure 55 change client side PIN Code how do I resynchronize my MP token 1 Within the SAS self service portal within the Home page tap Resync Token O within the User page enter your user ID in the User ID field tap Next enter the serial of your MP token in the Serial field O then tap Next il Orange F 3G 15 30 100 ES wt Orange F 3G 09 28 100 EF amp SafeNet Authentication Service Self Service SafeNet Authentication Service Self Service mer gee a j r l i ss safenet inc com b search Selt service Selt service Home Sian in Sign In Home Portal Portal Resync Token User Resync Token User User ID jbrown Pes Bo RE ve Serial 1 0000026382 Next eo My Profile Reset PIN Resyne Token 0 User Guisos Languages Help Desk Next all Orange F 3G Self service Sian In Portal a Terms of usa User Guides Languages Hap Desk 1 iasa I Ail amp ees Figure 56 resynchronize token 1 2 Copyright Orange Business Services 68 of 102 end user guide secure Authentication 2 Within the SAS self service portal within the Challenge Response page copy the challenge value O hold your finger on the value
35. Business J Services Secure Authentication end user guide end user guide secure Authentication Publication History 2013 04 05 initial release concatenation of separate end user guides 2013 07 25 Enrollment process description updated welcome Orange Business Services would like to thank you for choosing our Secure Authentication service to help you protect your on line identity and the networks applications and data you use from unauthorized access This guide is intended for people in your company e that will use our Secure Authentication service end users e that will manage our Secure Authentication service administrators This guide includes troubleshooting tips marked with a yellow flag If these tips fail contact your usual help desk to arrange for a troubleshooting session Click on the picture related to the token you want to use to directly access the right documentation part MP software token MP for Windows PC MP for OSX Lion MP for Apple iOS ama KT hardware token Grid token GriDsure 3 a 7 ele 7felela 7 Copyright Orange Business Services 2 of 102 end user guide secure Authentication Copyright Orange Business Services 3 of 102 end user guide secure Authentication Contents WUC COMING EEE EE 2 Secure Authentication End User PUIGS muusnmrenienenesnenienkmesmmmenlemereniesnlemaenviie 13 MP token for Windows PE ssssssssssssssrssrssrrrrnrrrrrtrrt rrt
36. EJ Desktop G admin amp Documents g Name MP l app Kind Application Size 6 4 MB Created jeudi 9 ao t 2012 21 28 Modified aujourd hui 09 47 Last opened aujourd hui 09 47 Kose Jen Figure 40 retrieve Token application version how do I remove my MP token For maintenance or troubleshooting purposes your IT administrator may ask you to remove a MP token from your device Within your MP application click on the tile of the MP token you want to use select the minus icon O check the Remove Token box then click on Continue The token has been successfully removed In the right panel of your MP application a message indicates your MP token deletion is successful e000 MP 1 Software Tools e200 MP 1 Software Tools Sprenet Authentication SERVICE prenet Authentication SERVICE iiias _ Completing this operation will remove the selected token Click cancel to abort this operation Check the remove token option then click Continue to remove the Token deletion successful selected token Remove Token Cancel Continue cs Figure 41 remove token Copyright Orange Business Services 53 of 102 end user guide secure Authentication MP token for iPhone In this chapter you will find instructions for installing activating and managing your MP token for iPhone The advantage of software tokens is mass deployment without hardware dist
37. IN Code the PIN Code is stored and managed at the Secure Authentication server level You have the ability to change it at any time Token Codes are generated without entering any PIN Code in the Token application OTP PIN Code Token Code e Server side fixed PIN Code the PIN Code is stored and managed at the Secure Authentication server level The PIN Code displayed during MP token installation is permanent you can not change it Token Codes are generated without entering any PIN Code in the Token application OTP PIN Code Token Code e Client side user selected PIN Code the PIN Code is stored and managed at the Windows PC level You have the ability to change it at any time The PIN Code must be entered into the Token application to generate a Token Code OTP Token Code e Client side fixed PIN Code the PIN Code is stored and managed at the Windows PC level The PIN Code displayed during MP token installation is permanent you can not change it The PIN Code must be entered into the Token application to generate a Token Code OTP Token Code Copyright Orange Business Services 15 of 102 end user guide secure Authentication what are Software Tools Software Tools is a set of applications you have to install on your Windows PC to install activate and manage your MP tokens Token and Token Manager applications are part of these Software Tools what is the Token application The
38. MP token is now referenced with the new name 0 8600 MP 1 Software Tools eoo MP 1 Software Tools e00 MP 1 Software Tools prenet Authentication SERVICE prenet Authentication SERVICE prenet Authentication SERVICE jbrown Rename Token jbrown R Tok a s n 1000026382 z 3 4 s n 1000026382 mn a s n 1000026382 i i Enter PIN to begin Rename Operation Enter new name for token PN EE 2 ar Ne Please Select a token from the list Cancel Continue Cancel Continue 5 U benemen nent ee ee OTP 0 Signature 5 p Operation sg Resync Rename Q SEN Change PI s8pP Figure 38 rename token how do I retrieve my MP token serial Within your MP application memorize the serial value displayed within the tile of your MP token O MP 1 Software Tools prenet Authentication SERVICE Generate OTP s n 1000026382 1 Your one time password OTP 89836939 Copy Cancel Continue x v Figure 39 retrieve token serial Copyright Orange Business Services 52 of 102 end user guide secure Authentication how do retrieve the Token application version For maintenance or troubleshooting purposes your IT administrator may ask you the version of your Token application MP Within your finder select Application then MP 1 app Memorize the MP application version O e090 G Applications ETA ENES 2 01 LO Q FAVORITES E All My Files AirDrop
39. MP token file with fixed PIN Code i Within your Safari browser tao Open in MP 1 O 2 Within your MP application memorize the displayed PIN Code tap OK then Cancel to display the Select Token screen se safenet inc com s Open in MP 1 1 Enter PIN for token jbrown a jbrown Memorize this PIN Enter PIN and jbrown 1000026382 7mp Passcode to authenticate 196 bytes 4455 2 OK 3 VEL I Dee BEBE e ABC amp espace retour Figure 48 install token file with fixed PIN Code how do launch the MP application Within your iPhone home screen tap the MP application launch icon how do I select my MP token Within your MP application within the Select Token screen tap the tile of the MP token you want to select O m ybrown 1 n 1000026382 cRYPTOCARD i Figure 49 select token Copyright Orange Business Services 62 of 102 end user guide secure Authentication how do authenticate with my MP token You have the ability to test authentication with your MP token thanks to the SAS self service portal 1 Within your e mail client open the SAS Self enrollment message O again and tap the SAS self service portal URL link your web browser will connect to the self service web site 2 Within the SAS self service portal within the Home page tap Sign In then within the Authenticate page tap
40. OCARD Cancel Figure 60 remove token how do retrieve the MP application version For maintenance or troubleshooting purposes your usual helo desk may ask you the version of your MP application Within your MP application within the Select Token screen tap the Information icon memorize the displayed MP application version then tap Done to return to the Select Token screen si Orange F 3G 14 54 7 ut Orange F 3G 15 16 100 E gt Select Token Ed Information Bene jbrown sin 1000026382 MP 1 Token for iOS 4 Version 1 4 2 Copyright ce 2012 CRYPTOCard Inc All rights reserved MP 1 End User Agreement www cryptocard com mp 1eula Terms and Conditions wwwW cryptocard com legal Cet cayrtocam ot cryptocarp Figure 61 retrieve MP application version Copyright Orange Business Services 71 of 102 end user guide secure Authentication how do uninstall the MP application For maintenance or troubleshooting purposes your usual helo desk may ask you to uninstall the MP application from your iPhone Within your iPhone home screen hold your finger on the MP application icon until the icon begins to shake or wiggle O tap x in the upper left hand corner of the icon then tap Delete within the pop up window vg Delete MP 1 Delete 3 Cancel Figure 62 uninstall MP application Copyright Orange Busi
41. P token file with fixed PIN cccccceccsseeeeeeeeeeseeeeeeeeeeeeeeeeeeeeeeereeenees 23 how do I install the MP token file with user selected PIN cccccceeceseeeeseeeeeeeeeeeeeeeeenes 23 how do I launch the Token ADPliCation ccceccsecsecceeceeeeeeeeeeeeeeeaeeseeeeeeeeeeeeetaetaeeaeeaeeees 24 NENNE 24 how do I authenticate with My MP token ccccccsecsecseeeeeeeeeeeeeeeeeeaeeseeeeeeeeeeeteetaetaeeaeegaeees 25 Server Side PIN Code sesssssssssrrerrerrerrsrrerresrerrerrerrerrerrerrerrerrerresrerrerrerrerrerrerrerrereereee 26 client side PIN Code e sssssssssssssrrsrrsrrsrrerrerrerrerrerrerrerrerrerrerrerrerrerrerrerrerrerrerrerrerrerrereee 27 how do I change my PIN Eve 28 Copyright Orange Business Services 4 of 102 end user guide secure Authentication server side PIN COG EE 28 Client Side PIN Gode nravnravnravnravnrnvnravnrnvnrnnnsnvnsnnnsnvnssnnsnnnsnnnsnnnsnnnsnnnsnnnsnnnsnnnsnnnsnnnssnnnee 29 NOW do resynchronize my MP token statiiesraie tccnsadsrniatadsine starahtlen fiveaandatunaniGrnadlionlbinar sfeieeGaadchindiidontal 29 Vo SIS FIR SONG e E E E E E E E 30 client side PIN re 31 how do rename my MP token Gr sser 32 how do retrieve the Token application version ccccecceeceeceeeeeeeeeeeeeeeeeeeeeeetaetaeeaeeaeeegs 32 how do launch the Token Manager application cccecceeseeeneeeeeceeeeeeeeeeeeeteeeaeeaeeaeeens 83 how do retrieve my MP token seri
42. PIN message Your KT token has a server fixed PIN Code you can t change it Copyright Orange Business Services 81 of 102 end user guide secure Authentication how do I resynchronize my KT token 1 Within your web browser within the Home page click on Resync Token within the User page enter your user ID in the User ID field click on Next 2 With your KT token memorize the serial number on the back of your token O 3 Within your web browser enter the serial number value in the Serial field then click on Next SAS ENROLLMENT WEB SITE KT TOKEN Self service Portal My Profile Reset PIN Resync Token 2 Services Self service Portal Resync Token User User ID jbrown 2 Next 3 Services Home Self service Portal Serial Number Resync Token User Please note the serial number is case sensitive 1000026382 E Next O Serial Figure 71 resynchronize token 1 2 Resynchronization requires you to enter a challenge within your KT token 4 Within the SAS self service portal within the Challenge Response page memorize the Respond to challenge value O Copyright Orange Business Services 82 of 102 end user guide secure Authentication 5 With your KT token press button power on the token then use the button to choose and validate the digits of the Respond to challenge value
43. Profile Reset PIN Resync Token Verify PIN esoo Help Me ok Gul Services Reset PIN Create New PIN Your Security PIN has been successfully reset O Figure 14 change server side PIN Code Y No tokens are enabled to change the Personal Identification Number PIN error message your MIP token has not a server side PIN Code but a client side instead Copyright Orange Business Services 28 of 102 end user guide secure Authentication client side PIN Code Within your Token application select Tools Change PIN enter your current PIN Code in the Current PIN field choose a new PIN Code and enter it in the New PIN and Verify New PIN fields then click on OK At the bottom of your Token application a message indicates your PIN Code change is successful Ja mr x DE HEGE Tools Accessibility Help Tools Accessibility Help Current PIM eoee 2 Resync feNet NewPIN eese prenet Signature Unlock Token verify Mew PIN essel jbrown Token jbrown ml ME herr i Rename Token Token Code FIN Change Successful Figure 15 change client side PIN Code PIN Change Failed error message try to change your PIN Code again making sure to enter a complex one the correct number of characters and the correct types of character how do I resynchronize my MP token Within the SAS self service portal within the Home p
44. S self service portal within the Home page click on Sign In within the Authenticate page click on Sign in using your token SafeNet Authentication S SAS Self enrollment james brown Your self enrollment account has been created If you are enrolling a I 11 42 oi M SafeNet Authentication Server noreply safenet inc com 11 42 2 minutes ago mv tome james brown Your self enrollment account has been created If you are enrolling a hardware token and do not have your token yet please contact your system administrator Please go to the following URL to enroll with SAS https se safenet inc com selfEnrollment index aspx code akmmpl3oWuAvL49 Tyxevball If the above link does not work please copy and paste this url to your web browser https ss safenet inc com blackshieldss Q 3H17XZMHTE index aspx Once enrolled you can go to the following URL to access your SAS OC portal You can go to the following URL to access the Administrator guide http www orange business com secure authentication documentati Self service Portal sigan a Ca 7 057 gt i My Profile Reset PIN Self service Portal Sign In Authenticate Sign in using your token Figure 88 access to the SAS self service portal sign in page Copyright Orange Business Services 100 of 102 end user guide secure Authentication 3 Within the SAS self service portal within the Authe
45. Sign in Password message and click on the SAS self service portal URL link your web browser wil connect to the self service web site SafeNet Authentication S Self service Temporary Sign in Password james brown Your self service temporary sign in password is 15 08 Self service Temporary Sign in Password Inbox x SafeNet Authentication Server lt noreplyiqsafenet inc com gt 15 08 7 minutes ago to me James brown Your self service temporary sign in password 1s ONslimbbd D Please use this password to sign in within the next 10 minutes Figure 91 resend password by e mail 2 2 As mentioned within the e mail you have to use this password to sign in within the next 10 minutes Self service Temporary Sign in Password e mail not received verify if the mail is not stored in the junk folder of your e mail client how do change my password You have not the ability to change your password yourself you have to use the Send sign in password by e mail option from your SAS self service portal instead Copyright Orange Business Services 102 of 102
46. Token Figure 69 authenticate Authentication failed enter your OTP again error message if your KT token is still on press and hold the button approximately 3 4 seconds on the token until the OFF prompt appears then release the button Press button to power on the token again and generate a new Token Code Copyright Orange Business Services 80 of 102 end user guide secure Authentication how do change my PIN Code Within the SAS self service portal within the Home page once authenticated Sign Out button must be displayed click on Reset PIN within the Create New PIN page choose a new PIN Code and enter it in the Create New PIN and Verify PIN fields then click on OK Within the Create New PIN page a message indicates your PIN Code change is successful Services Reset PIN Create New PIN Om l Change your PIN Create New PIN 9000 My Profile Reset PIN Resync Token Verify PIN soos Help Me ok O rd Business Services Reset PIN Create New PIN Your Security PIN has been successfully reset 5 Figure 70 change PIN Code Y Ifthe self service portal displays the PIN does not meet complexity requirements Message Try to enter a new PIN again making sure to meet complexity requirements displayed Y Ifthe self service portal displays the No tokens are enabled to change the Personal Identification Number
47. Token application allows you to e select a MP token when several are installed e generate a Token Code from a MP token e rename a MP token e resynchronize a MP token e change the PIN Code of a MP token when client side PIN Code type is used e unlock a MP token when the feature is allowed by your Secure Authentication service administrators e retrieve the version of the Token application what is Token Manager application The Token Manager application allows you to e select a MP token when several are installed e retrieve the serial number of a MP token e remove a MP token from your Windows PC what are my responsibilities Using the MP token will not only provides security it will simplify your life be reducing or eliminating the need to remember or periodically change passwords Your MP token will do this for you every time you logon However you do have a few simple obligations protect your PIN Code You have to protect your PIN Code just as you would the PIN Code for your bank or credit card Never share it with anybody including people you trust Your usual helo desk will never ask for your PIN Code and you should never reveal it to them Never write down your PIN Code Copyright Orange Business Services 16 of 102 end user guide secure Authentication what if forget my PIN Code Contact your usual helo desk Upon verifying your identity they will be able to reset your PIN Code
48. aeeaeeaees AT Figure 14 change server side PIN Code rrrrrrarrvrrrarrvrrrarrnarrarrnarrarrnarsarnnsrnsrrnerssennsnssennsnnsen 28 Figure 15 change client side PIN COdG ccccecceecsseceseeeeceeceeseseseeeeeeaeeseeseeeeenaesneeseesneas 29 Figure 16 resynchronize token common Palt cceccsecseecseceeeeeeeeeeeeeeeaeeseeeeeeeeeeeteetaeeaeegeegees 29 Figure 17 resynchronize token with server side PIN Code cccceeceeeeeeeeeeeeeeeeeeeeeeeeaeeeees 30 Figure 18 resynchronize token with client side PIN COCE ccccecceeceseseeeeeeeeeeeeeeeneeaeeaeeaees 31 Figure 19 rename token EEE EEE 32 Figure 20 retrieve Token application version ccccccceeceeceececeuceeceeseeceeceeeuceseesseeeeaueautetaes 32 Figure 21 retrieve token serial ccccceccscceeceeceeceececaueceesaeceeceeceeceeseueseeseeseeseeseesessnusneesensass 33 Figure EO EO GE 34 Figure 23 self enrollment Ink c ccc cecceeceeceeceeceeceeeaueceesaeceeceeceeceseueseeseesaeseeseeseeseusaeesensans 39 Figure 24 select Mac as target COVICE ccccceccecceecceeceeseeceeceeceececnuecueseesaeseeseeseeseusaensansass 40 Figure 25 download MP application ararrarrarvarnarnrrarrarrarnannernererrarsarnennensarerrernennennansensnen 40 Copyright Orange Business Services 9 of 102 end user guide Figure 26 Figure 27 Figure 28 Figure 29 Figure 30 Figure 31 Figure 32 Figure 33 Figure 34 Figure 35 Figure 36 Fi
49. age click on Resync Token O within the User page enter your user ID in the User ID field O click on Next enter the serial of your MP token in the Serial field then click on Next di Services Self service Portal Signin Ai 2 Resync Token Self service Portal J My Profile Reset PIN Resync Token User User ID jbrown Next Resync Token User Please note the serial number is case sensitive Serial 1000026382 Next 3 Figure 16 resynchronize token common part Copyright Orange Business Services 29 of 102 end user guide secure Authentication The end of the resynchronization process depends on the type of the MP Token PIN Code server side PIN Code 1 Within the SAS self service portal within the Challenge Response page copy the Respond to challenge value O 2 Within your Token application select Tools Resync within the pop up window paste the challenge value in the Challenge field click on OK then click on Copy to copy the generated response 3 Within the SAS self service portal within the Challenge Response page paste the response value in the Response field then click on OK Within the Confirmation page a message indicates your token resynchronization is Successful O Tools Accessibility Help Change PIN Sig
50. al de 33 ENN 34 how do uninstall the Software TOOIlS cccccceccseecsseceeeeseeeeeeeeeeeeeeeeeeeseeeseeeeeeeeeeeaeeeeeeeaeeeas 34 VPT 5 6 g eeerennner reer meee eticrete E ener ener ere tr 35 let Ss PT re 35 how does it protect 00 gt ann rr reru rrr PrE EPES rEEEPEPEEEEPEEEEEEPr EErEE rerent 35 can anybody use my MP token sctincssnannarursaecanaanpartaniteaiureneeteaneicamaunimetaneietenniiantennanioets 35 what kind of PIN Code is supported by MP tOk n ccccccceceeeeeeeeeeeseseeseeeeeeeeenetaetaseaeeeees 36 what isthe MP applCatlOrN NE oranan nira ESA NE ME 37 what are my responsibilities EEE men ne eee eee ee ee ee eee ee 37 SOGA 00 PIN COGG a te tt et he et ee 37 what if forget my PIN Code Ne 37 what Ur MY MP LOT see NE 37 how long will my MP token continue to operate ccecceeceeceeeseeeeeeeeeeeeeeeeeeeeeeetnetaeeaeeaeeens 37 what should I do if I can t logon using my token esssnssneresrerrsrrrrerrrrrrrnrrsrrrrnrrrrnrrrrrrrerne 38 how do enroll with a MP token cccccccesecsseceseceseceeeceeeceeeeeeeseceseeeeeeeseeeseetsaesseetseetsaetas 39 how do I access the enrollment web site raneraneraneranrranrraneranrranrraneraneraneranesanrranesanernn 39 how do I select a Mac as target device sadel 40 how do I download the MP application enenerennnnsnsnsrernrnrnrrrrrrrrrrererernrrrrrrrrrrersrererne 40 how do l install the MP application enenneneresnerernsnrrerr
51. are Tools installer file locally then click on the file name to run the installer Opening BlackShield ID Software Tools msi xj You have chosen to open fe BlackShield ID Software Tools msi which is Windows Installer Package 7 5 MB from https se safenet inc com Would you like to save this file Save File My Network File name BlackShield ID Software Tools msi Places Save as type Windows Installer Package Figure 5 run Software Tools installer within Firefox Copyright Orange Business Services 20 of 102 end user guide secure Authentication how do install the Software Tools Within the Software Tools installer click on Next accept the terms in the license agreement click on Next enter your user name and your organization name install the application for anyone who uses the computer all users click on Next two times OG do not change the install directory click on Install then on Finish at the end of the Software Tools installation mos License Agreement The InstallSheld R Wizard wil install Safeltet Au Please read the following icense agreement carefully Service Software Tools on your computer To cor SOFTWARE LICENSE AGREEMENT IMPORTANT READ THESE TERMS CAREFULLY BEFORE DOWNL User Name INSTALLING OR USING THIS SOFTWARE BY DOWNLOADING Oi fon INSTALLING THIS SOFTWARE YOU ACKNOWLEDGE
52. as target device Within your web browser select Install Locally then click on Next O I Business WGL Services SAS self enrollment SafeNet Authentication Service Multi Platform Token MP Token can be installed on many different target devices The allowed targets are set by your SafeNet Authentication Service Administrator User ID jbrown I would like to install an MP token onto Install Locally 1 Secure Flash Drive Java Enabled Phone BlackBerry C iPhone Android C Windows Phone 7 Mac OS X Lion Copyright amp 2012 SafeNet Inc All Rights Reserved Figure 2 select Windows PC as target device how do I download the Software Tools installer Secure Authentication Within your web browser click on Download Software Tools and Activatye Token link O that automatically points to the adapted 32 bit or 64 bit Software Tools installer then click on Next Business hatha Services SAS self enrollment Please select one of the following options e Download Software Tools and Activate Token OR e Download new software tools and import Token using activation code Download Software Tools Activation code aHROcHM Ly92z2YXNOZXNOc2Uuc2FmZ WSIldC lpbmMuy2otL3NlbGZFbnJ vbGxtZWS0OL3NOb3J0OQ29kKZSShe3B4AP3NJPUMZ2MFE2VFCSNO c2M9Q2 MwUTZVUUIKeiAgB SID Copy Copyright 2013 SafeNet Inc All Rights Reserved Figure 3 download Software Tools installer C
53. cation enrollment web site Gp SafeNet Authentication S SAS Self enrollment james brown Your self enrollment account has been created If you are enrolling a I 07 45 SAS Self enrollment Inbox x i SafeNet Authentication Server noreplyGdsafenet inc com 07 45 2 minutes agoj v to me james brown Your selfenrollment account has been created If you are enrolling a hardware token and do not have your token yet please contact your system administrator Please go to the following URL to enroll with SAS https se safenet inc com seffEnrollment index aspxrcode 42ntAuvbdhhhdPGELSNARIGKHS B Ifthe above link does not work please copy and paste this url to your web browser Once enrolled you can go to the following URL to access your SAS self service portal https ss safenet Inc com blackshieldss O 3H1 X2WHTE Index aspx You can go to the following URL to access the Administrator guide http Anny orange business com secure authentication documentations end user quides jsp Figure 23 self enrollment link SAS Self enrollment e mail not received verify if the mail is not stored in the junk folder of your e mail client Your provisioning task has already been completed error message verify you opened the latest self enrollment message and not an old one Copyright Orange Business Services 39 of 102 end user guide secure Authentication how do select a Mac as target device Within yo
54. com blackshieldss O SH1 74MH T Endex aspx You can go to the following URL to access the Administrator guide http av orarnge business com secure authentication documentations end user quides s Figure 63 self enrollment link SAS Self enrollment e mail not received verify if the mail is not stored in the junk folder of your e mail client Y Your provisioning task has already been completed error message verify you opened the latest self enrollment message and not an old one Copyright Orange Business Services 75 of 102 end user guide secure Authentication how do register my KT token 1 With your KT token memorize the serial number on the back of your token 2 Within your web browser enter the serial number value in the Serial Number field and click on Next Business ih Services SAS ENROLLMENT WEB SITE KT TOKEN SAS self enrollment Serial Number Please enter the serial number on the back of your token We serial number is case sensitive Serial Number 342010202 amp Copyright 2012 SafeNet Inc All Rights Reserved Figure 64 register token serial There is no token matching the serial number provided error message close your browser click the self enrollment URL link again register your KT token again making sure the serial number you enter is correct Copyright Orange Business Services 76 of 102 end user guide se
55. cure Authentication how do activate my KT token 1 Within your web browser memorize the displayed PIN Code it might be a fixed one and you have not the ability to Know its type at this enrollment step copy it and paste it in the OTP field 2 With your KT token press button to both power on the token and generate a new Token Code then memorize the displayed Token Code O 3 Within your web browser enter the Token Code next to the PIN Code in the OTP field then click on Next Business ikek Services SAS self enrollment byg PIN Code Please enter the displayed PIN and your next token code In the OTP field Copyright 2012 SafeNet Inc All Rights Reserved Figure 65 activate token with PIN Code Authentication failed enter your OTP again error message if your KT token is still on press and hold the button approximately 3 4 seconds on the token until the OFF prompt appears then release the button Press button to power on the token again and generate a new Token Code You have failed to provide the correct response too many times error message contact your usual help desk The end of the process depends on the type of the KT token PIN Code Copyright Orange Business Services 77 of 102 end user guide secure Authentication how do complete installation process with user selected PIN code Within your web browser choose your PIN
56. e Time Password screen copy the new generated Token Code value hold your finger on the value until the Copy icon appears 3 Within the SAS self service portal within the Authenticate to Process page paste the Token Code in the OTP field hold your finger on the field until the Paste icon appears then click on OK O The Sign Out button displayed within the Home page indicates your authentication is successful SAS SELF SERVICE PORTAL MP APPLICATION Enter PIN for token jbrown Sign In Authenticate to Process pron OP End user RNBENDENEE Token Code mm Ronn a a lt 6 E wat Orange F 3G 15 44 100 ES One time Password Done Yo ir ons Copy assword 59241286 Time remaining 53 C CRYPTOCARD Figure 52 authenticate with client side PIN Code Your login attempt was not successful error message try to authenticate again making sure to enter only the Token Code generated by your MP token in the OTP field Copyright Orange Business Services 65 of 102 end user guide secure Authentication how do edit my PIN Code Within your MP application within the Select Token screen tap the tile of the MP token you want to edit O tap Edit then tap the tile of the MP token again to display the Edit Token screen st Orange F 3G 16 17 at Orange F 3G Select Token Et 2 Select Token C CRYPTOCARD C
57. e with my password arrarrarrarrarrnrrvennarnarrarrerrerrnennennenserssrreersrrsennenvenne 100 VENN 102 resend my password by e mail rrarvarvarrarrarnnrnnnarrarrarnnrnnnnsnarrsrrannennnnnsnsrssrnnnnannsnasssrssene 102 VUNNET 102 Copyright Orange Business Services 8 of 102 end user guide secure Authentication Figures VERTINNE 18 Figure 2 select Windows PC as target deviCe s srusreersrrererrsrrrrerrsrrrrerrsrrrrnrrsrrrrnrrererrne 19 Figure NNN 19 Figure 4 run Software Tools installer within Internet Explorer ccccccccececseeeeeeeeeeeeeeeeeeaseaees 20 Figure 5 run Software Tools installer within Fir fOx ccccccceccseeseeeeeeeeeeseeeeeeeeeeeeeeeneeseeaeeaees 20 Figure 6 install Software 0 EE EE 21 UeENNMNNN 22 Figure 8 install token file with fixed PIN COCG ccceccseeseeceeeeeeeeeeeaeeeeeseeeeeeeeeeeeetaeeaeegeeeees 23 Figure 9 install token file with user selected PIN Code cccecceeceeeeeeeeeseeeeeeeeeeeneeneeaeeaeeaees 23 Figure 10 select token ccccceccecceececcueceeceeceeceeceeceeesueseesuecueceeseeseesausseesaesaeseeseeseesnusaeesensass 24 Figure 11 access to the SAS self service portal sign IN page rrrrarrrrrrarrnrrrnrrnarrnrrnarrnrrnrrnsen 25 Figure 12 authenticate with server side PIN Code ccccccsecceeceeee eee eeeeeeeeeeeeeeeeeeneeaeeaeeaeeaees 26 Figure 13 authenticate with client side PIN COG ccccccceceeeceeeeeeeeeeeeeeeeeeeeeeeeeeeeaee
58. eeeeeeeseeeeeeseeeeeeaeeeeeeaeeeeeegeeeaeeas 68 Figure 56 resynchronize token 1 2 arrarnarnnrnnnrnarrarrarrarnnnnnnnnnrnerrerrernaannannannarnernsrrsrrsannannennee 68 Figure 57 resynchronize token 2 2 EE EE 69 Figure 58 rename token EEE 70 Figure 59 retrieve token serial cccccccecceeceeceeceecsceueceesueceeceeseeeesaueseeseeseeseeseeeeesnusauesensass 70 Figure 60 remove token are Ge NG 71 Figure 61 retrieve MP application version cccccecseceeceeceecseceeaueeeeeeseecueceeaueeeeesseceeaeeauteneags 71 Figure 62 NPE 12 Figure 63 self enrollment link c ccc cecceeceeceeceeceeceesaueceeseeceeceeceeceeseueseesaesaeseeseeseesnussensensass 15 Figure 64 register token Serial cccccccecceeceeceeceeceeceueceeseeceeceeceeceesaueceeseesueseeseeseessesseesansass 76 Figure 65 activate token with PIN Gode ccccccccceecseeceeeceeeeeeceeeeeeseeceeeseeseeeseeeeeesaesneeseesenegs 1 Figure 66 activate token with user selected PIN rirrurrarrvrrnrrnarvarrnrrerrarrnrrnernernarsarssrrrrnernsnnen 78 Figure 67 activate token with user selected PIN cccccccecseeceeceeeeeeeeeeeceeseeseeseeeeeeeaeeaeeaeeaess 15 Figure 68 access to the SAS self service portal sign IN page ssrssrsresrerrsrrrrerrrrrrrrrrererrne 79 Figure 69 NNN 80 Figure 70 change PIN Code pe rene 81 Figure 71 resynchronize token 1 2 EEE EE 82 Figure 72 resynchronize token 2 2 oo ccccccccccecceeceeceeee eee eeaeeseeeeeee
59. elds then click on OK Within the Create New PIN page a message indicates your PIN Code change is successful a Business Business Services a Services Home Self service Portal Sign ou Self service Portal Sign Out a l AE d Reset PIN Create New PIN My Profile Reset PIN Reset PIP Change your PIN Create New PIN 0000 Verify PIN eoee Help Me ok O Resync Token Reset PIN Create New PIN Your Security PIN has been successfully reset O Figure 84 change PIN Code Copyright Orange Business Services 95 of 102 end user guide how do change the PIP of my GrlDsure Secure Authentication token Within the SAS self service portal once authenticated Sign Out button must be displayed O click on Reset PIP within the Select Pattern page enter the values corresponding to your new pattern here DWH7 in the Enter cell values field then click on OK kikk ill Services Self service Portal Home a My Profile am 9a Z O Reset PIN Reset PIP Resync Token Enter cell Help Me Figure 85 change token PIP Copyright Orange Business Services ralues Self service Portal Reset PIP Select Pattern 96 of 102 end user guide secure Authentication Password In this chapter you will find instructions for activating and managing your password what is a password Sing
60. ervice MP tokens can be issued revoked and reissued without restriction or the need to recover the MP token from the end user Multiple MP software tokens can be installed on a single device e g hard drive provided the usernames are unique what is a MP token Up until now you ve logged on with your User Name and Password The problem is that passwords are easily compromised putting your identity and the resources you access at risk By using a MP token you will be able to generate a One time Password or OTP As the name implies an OTP can only be used once Each time you logon you will use your MP to generate a new OTP how does it protect me Password theft is the single most common way thieves and hackers steal identities and gain unauthorized access to networks and resources While they have many ways to steal a password success depends on the stolen password being valid much the way credit card theft relies on the card being usable until you report it as stolen The problem of course is that it is almost impossible for you or the security professionals that manage your network to discover your password has been compromised until long after damage has been done The MP token solves this problem because the instant you logon with your OTP it is no longer valid Any attempt to logon by reusing the OTP will not only fail but also instantly alert your network security professionals to a possible attack on your identity
61. es ago fn to me james brown Your self enrollment account has been created If you are enrolling a hardware token and do not have your token yet please contact your system administrator Please go to the following URL to enroll with SAS https se safenet inc com selfEnrollment index aspx code akmmpl3oWuAvL49 TyxXevball Ifthe above link does not work please copy and paste this url to your web browser Once enrolled you can go to the following URL to access your SAS self service portal https ss safenet inc com blackshieldss O SH17XZMHTE index aspx You can go to the following URL to access the Administrator guide http Awww orange business com secure authentication documentati Services fae DIA O My Profile Reset PIN Sign In Authenticate Sign in using your token Figure 11 access to the SAS self service portal sign in page The authentication process depends on the type of the MP Token PIN Code Copyright Orange Business Services 25 of 102 end user guide secure Authentication server side PIN Code 1 Within the SAS self service portal within the Authenticate to Process page enter your user ID in the User ID field and your PIN Code in the OTP field O Within your Token application click on Generate Token Code then on Copy Within the SAS self service portal within the Authenticate to Process page paste the T
62. fthe enrollment web site displays the You have failed to provide the correct response too many times message Contact your usual help desk Select your PIP using the grid Try to pick a pattern here that would be not easily guessed by someone else Enter the values corresponding to your pattern here RVZ2 in the Enter Value field then click on Next The enrollment web site displays the last page that confirms your GrlDsure token has been enabled Memorize your User ID before clicking on Close when using Firefox the Close button do not exist you have to close your browser instead Copyright Orange Business Services 90 of 102 end user guide secure Authentication Business with Services SAS self enrollment Select a PIP using the grid Try to p guessed by someone else Minimum Enter Value eese D Net Copyright 2012 SafeNet Inc All Rights Reserved Figure 79 create PIP PIP change failed error message try to enter your new PIP again making sure to meet complexity requirements displayed You have failed to provide the correct response too many times error message contact your usual help desk Copyright Orange Business Services 91 of 102 end user guide how do authenticate with my GrlDsure token Secure Authentication You have the ability to test authentication with your GrlDsure token thanks to the SAS self service portal
63. generated without entering any PIN Code in the MP application OTP PIN Code Token Code e Client side user selected PIN Code the PIN Code is stored and managed at the iPhone level You have the ability to change it at any time The PIN Code must be entered into the MP application to generate a Token Code OTP Token Code e Client side fixed PIN Code the PIN Code is stored and managed at the iPhone level The PIN Code displayed during MP token installation is permanent you can not change it The PIN Code must be entered into the MP application to generate a Token Code OTP Token Code Copyright Orange Business Services 55 of 102 end user guide secure Authentication what is the MP application The MP application allows you to e select a MP token when several are installed e generate a Token Code from this MP token e rename a MP token e resynchronize a MP token e change the PIN Code of a MP token when client side PIN Code type is used e retrieve the serial number of a MP token e remove a MP token from your iPhone You can download MP application from App Store for free what are my responsibilities Using the MP token will not only provides security it will simplify your life be reducing or eliminating the need to remember or periodically change passwords Your MP token will do this for you every time you logon However you do have a few simple obligations protect your PIN Code
64. gure 37 Figure 38 Figure 39 Figure 40 Figure 41 Figure 42 Figure 43 Figure 44 Figure 45 Figure 46 Figure 47 Figure 48 Figure 49 Figure 50 Figure 51 Figure 52 Copyright Orange Business Services install MP APPLICATION ccc cec ccc cec cece ee seen eee e ee eee eee G EEE EAE EA EEA EG EEA SEE EEE EA EEA E SESSA EEE EE EEE ES 41 install MP token EE 42 install MP token file with fixed PIN Code ccccccccssecesecesecseecseceeeeeeseeeseeeseeesenes 43 install MP token file with user selected PIN Code rrarrrarararnvarnvarrrarrrnrrvarrraressrennn 43 access to the SAS self service portal sign IN page cecceecseeceeeeeeeeeeeeeeeeeeeeeeeeeeeas 44 authenticate with server side PIN Code ccccecceeceeeeeeeeeeeaeeeeeeeeeeeeeeeetaeeaeeaeees 45 authenticate with client side PIN COde ccccccceecseeeeteeeeeeaeeeeeeeeeeeeeenetaeeaeeaeeees 46 change server side PIN COde ccccccceccceeceecceeceeceueceeseueceeaeeseeaeeseeeaeesessaesenegs 47 change client side PIN Code rrrarnnrrrarnnrrrannnervannnnrvannnervanersrnanerssnnnesssnnnersnnnsnsnnn 48 resynchronize TOKEN COMMON Palt ccecceecseeseeceeeeeeeeeeeeeeeeeeseeseeeeeeeeeteetaeeaeegees 49 resynchronize token with server side PIN Code ccccceseeeeeeseeeeeeseeeeeeeeeeeeaeeaeenes 50 resynchronize token with client side PIN COCe ccccceseeeeeeeeeeeeeeeeeeeeeeeeeeaeeaeeees 51 rename Sarre 52 retrieve token seria
65. ices Self service Portal Sign In Authenticate Sign in using your token Figure 80 access to the SAS self service portal sign in page Copyright Orange Business Services 92 of 102 end user guide secure Authentication 3 Within the SAS self service portal within the Authenticate to Process page enter your User ID in the User ID field leave the OTP field empty click on OK Get Grid 9 enter your PIN Code in the OTP field enter the values corresponding to your pattern OG GG here 8675 next to the PIN Code in the OTP field then click on OK The Sign Out button displayed within the Home page indicates your authentication is successful Business gt Business GEUG Services kikk ll Services Home Self service Portal EPID Back Self service Portal Sign In Authenticate Sign In Authenticate to Process User ID jbrown OTP OTP Help Me OK I Get Grid DE PIN Code OK 6 j Terms of use User Guides Languages Help Desk Copyright 2012 SafeNet Inc All Rights Reserved End user Figure 81 authenticate common part Your login attempt was not successful error message try to authenticate again making sure to enter your PIN Code followed by the Token Code generated by your MP token in the OTP field The end of the authentication process depends on the type of the GriDsure toke
66. ieves and hackers steal identities and gain unauthorized access to networks and resources While they have many ways to steal a password success depends on the stolen password being valid much the way credit card theft relies on the card being usable until you report it as stolen The problem of course is that it is almost impossible for you or the security professionals that manage your network to discover your password has been compromised until long after damage has been done The MP token solves this problem because the instant you logon with your OTP it is no longer valid Any attempt to logon by reusing the OTP will not only fail but also instantly alert your network security professionals to a possible attack on your identity can anybody use my MP token Thanks to PIN Code protection your MP token is protected against unauthorized use by a PIN Code only you know Again much like a bank card or Chip and PIN credit card the thief not only needs access to your MP token but must Know your PIN Code as well Any attempt to use the MP token with and incorrect PIN Code will fail Successive attempts to guess your PIN Code will automatically lock your MP token effectively disabling it giving you and your network security professionals time to deal with the threat Copyright Orange Business Services 14 of 102 end user guide secure Authentication what kind of PIN Code is supported by MP token e Server side user selected P
67. l sssssssrssnsrsrrsrrsrrrrorrsrrrrnrsrrnrnnrrrerronrrronrerrrrenesrrrernerrereene 52 retrieve TOKEN application Version cccccecseceeceeceeceecuceueeecseceeseeeuseeseesaeaeeaetantaes 53 TN 53 SSN COMMIT EE EE NE 58 select IPhone as target COVICE cccecceccceceeceeceeceeceececeseeuecaeseesaeseeseeseesaessuesaeeas 59 download MP application sscvicicvndonrsevctancnansdonrdessmneondnad asreiandanedeoedonsnesetanedanedesnnns 59 install MP application snsnensrsrsrnnrrnrrersrsrnrrrrrrrrrsrsrsrnrrrrrrrrrrrrerernrnrrrrrrrerrrrre 60 download token HIG EE samconmanneontearaawanscseeadeontes 60 install token file with user selected PIN Code rrrrarrarrarrarnnennennervarrarrerrsrrsennennen 61 install token file with fixed PIN Code rarrarrarrorrnrrnarrarrerrarnnrnsrnsersernerrsrrsennennsnnene 62 6 TOK EEE E EN EE 62 access to the SAS self service portal sign IN page rrrrrrrrerrrarrrrrrarrnrrrsrrnrrrsrrnrrrsen 63 authenticate with server side PIN Code cccccecseeeeeeeeeeeeeeseeeeeeeeeeeeeeenetaeeaeeaeeaes 64 authenticate with client side PIN COde cccccccsecseeeeteeeeeeeeeeeeeeeeeeeeenstaeeaeeaeeees 65 Secure Authentication 10 of 102 end user guide secure Authentication USOV 66 Figure 54 change server side PIN Code s esnerssresrerrsrrrrrrrsrrrrrrrrrrrrsrrrrnrrsrrrrerrrrrrrrrrererrne 67 Figure 55 change client side PIN COdC ccccccceccescceeeeeeeeeeeee
68. l need it every time you log on SAS self enrollment Your token has been successfully activated Please remember your User ID below User ID Ge Copyright 2012 SafeNet Inc All Rights Reserved Figure 8 install token file with fixed PIN Code how do install the MP token file with user selected PIN Within your web browser choose your PIN Code enter it in the New PIN and Verify PIN fields O then click on Next The enrollment web site displays a page that confirms your MP token has been successfully activated Memorize your User ID then click on Close O when using Firefox you have to close the browser Business prenet Authentication SERVICE SAS self enroliment SAS self enrollment Please enter your new PIN and verify it Please enter a PIN between 4 and 8 i characters long Your token has been successfully activated Please remember your User ID below New PIN PETTY 1 ibrown User ID jbrown jbrown Verify PIN et ce Copyright 2012 SafeNet Inc All Rights Reserved Copyright 2012 SafeNet Inc All Rights Reserved Figure 9 install token file with user selected PIN Code PIN change failed error message try to enter your new PIN Code again making sure to meet complexity requirements displayed You have failed to provide the correct response too many times error message contact your usual help desk Copyright Ora
69. le factor authentication SFA is the traditional security process that requires a user name and password before granting access to the user what are my responsibilities You do have a few simple obligations protect your password You have to protect your password just as you would the PIN Code for your bank or credit card Never share it with anybody including people you trust Your usual help desk will never ask for your password and you should never reveal it to them what if my password token is locked Contact your usual help desk how long will my password continue to operate Your password will continue to operate until it is revoked by IT administrators what should do if can t logon using my token The most common cause of failed logon is entering an incorrect password By default your account will automatically lock for 15 minutes if more than 3 consecutive logon attempts fail You must wait this amount of time before your account will unlock Contact your usual help desk to resolve logon problems Copyright Orange Business Services 97 of 102 end user guide secure Authentication how do enroll with a password how do access the enrollment web site Within your e mail client open the SAS Self enrollment message and click on the self enrollment URL link your web browser will connect to the Secure Authentication enrollment web site D SafeNet Authentication SAS Self enrollment
70. lick on OK Within the Confirmation page a message indicates your token resynchronization is successful SAS SELF SERVICE PORTAL TOKEN APPLICATION lOl x Tools Accessibility Help Change PIN feNet Signature Unlock Taken Rename Token jbrown Token Code 47608474 Be Resync Token Challenge Response Generate Token Code Respond to challenge 87670166 Response x Self service Portal Signin Help Me OK Challenge mane ED 27570165 ESN FDN PIN Code Oea Cancel Self service Portal End user i Token DO x Tools Accessibility Help Resync Token Challenge Response Sprer let Respond to challenge 87670166 ceponse Token jbrown Response rer O Token Code 31640258 E OK z Help Me Generate Token Code Resyne Token on Figure 18 resynchronize token with client side PIN Code The token cannot be synchronized error message try to resynchronize your MP token again making sure to copy paste the right challenge response values Copyright Orange Business Services 31 of 102 end user guide secure Authentication how do I rename my MP token By default MP token name is based on your user ID Within your Token application select Tools Rename Token within the pop up window enter the new MP token name in the New Name field 23 then click on OK Your MP token is no
71. ling a hardware token and do not have your token yet please contact your system administrator Please go to the following URL to enroll with SAS https se safenet inc com selfEnrollment index aspx code akmmpl3oWuAvL49 Tyxevball If the above link does not work please copy and paste this url to your web browser https ss safenet inc com blackshieldss Q 3H17XZMHTE index aspx Once enrolled you can go to the following URL to access your SAS OC portal You can go to the following URL to access the Administrator guide http www orange business com secure authentication documentati Self service Portal Services 2 Self service Portal Signin O My Profile Reset PIN Sign In Authenticate Sign in using your token 4 Figure 30 access to the SAS self service portal sign in page The authentication process depends on the type of the MP token PIN Code Copyright Orange Business Services 44 of 102 end user guide secure Authentication Server side PIN Code 1 Within the SAS self service portal within the Authenticate to Process page enter your user ID in the User ID field and your PIN Code in the OTP field O 2 Within your MP application click on the tile of the MP token you want to use then on Copy to copy the generated Token Code 3 Within the SAS self service portal within the Authenticate to Process page paste the Token Code value next to the
72. ll connect to the Secure Authentication enrollment web site 1 SafeNet Authentication S SAS Self enrollment james brown Your self enrollment account has been created If you are enrolling a F 11 42 SAS Self enrollment inbox x a SafeNet Authentication Server noreplyi safenet inc com 11 42 2 minutes ago e to me james brown Your self enrollment account has been created lf you are enrolling a hardware token and do not have your token yet please contact your system administrator Please go to the following URL to enroll with SAS https se safenet Inc com selfEnrollment Index aspx code akmmplovVvuAavLaAgi Tgxevoall 2 Ifthe above link does not work please copy and paste this url to your web browser Once enrolled you can go to the following URL to access your S43 self service portal https ss safenet inc com blackshieldss O SH1 7 AMHTE ndex aspx You can go to the following URL to access the Administrator guide http av orarnge business com secure authentication documentations end user quides s Figure 1 self enrollment link SAS Self enrollment e mail not received verify if the mail is not stored in the junk folder of your e mail client Your provisioning task has already been completed error message verify you opened the latest self enrollment message and not an old one Copyright Orange Business Services 18 of 102 end user guide how do select a Windows PC
73. llenge Response page copy the Respond to challenge value O 5 Within your MP application click on the tile of the MP token you want to use select the gear icon then Resync paste the challenge value in the Challenge field click on Continue then click on Copy to copy the generated response 6 Within the SAS self service portal within the Challenge Response page paste the response value in the Response field then click on OK Within the Confirmation page a message indicates your token resynchronization is Successful O SAS SELF SERVICE PORTAL MP APPLICATION 00 MP 1 Software Tools Services prenet Authentication SERVICE Token Resync Enter Challenge to generate a resync code Resync Token Challenge Response Challenge 38670752 Respond to challengel38670754 Response Challenge Help Me OK Cancel Continue EJ x v OTP 0 I soeatuee me gt Business Operatio 81 JEW Services Resync R Rename 38N eo MP 1 Software Tools prenet Authentication SERVICE uw aaun Token Resync s n 10000263 Resync Token Challenge Response Response Enter challenge to generate a resync code Respond to challenge 43523085 Response Help Me OK amp Cancel Continue ee ae ee Resyne Token Corirmaton Figure 36 resynchronize token with server side PIN Code The token cann
74. ly as displayed on the token including any upper and lower case letters and punctuation that it may contain By default your account will automatically lock for 15 minutes if more than 3 consecutive logon attempts fail You must wait this amount of time before your account will unlock Contact your usual help desk to resolve logon problems Copyright Orange Business Services 74 of 102 end user guide secure Authentication how do enroll with a KT token Within your e mail client open the SAS Self enrollment message and click on the self enrollment URL link your web browser will connect to the Secure Authentication enrollment web site D SafeNet Authentication S SAS Self enrollment james brown Your self enrollment account has been created If you are enrolling a I 11 42 SAS Self enrollment inbox x SafeNet Authentication Server noreply Gisafenet inc com 11 42 2 minutes ago A to me james brown Your seltenrallment account has been created lf you are enrolling a hardware token and do not have your token yet please contact your system administrator Please go to the following URL to enroll with SAS https ise safenet Inc com selfEnrollment Index aspx code akmmplovVvuAvL4Agi Tgyxevoall 2 Ifthe above link does not work please copy and paste this url to your web browser Once enrolled you can go to the following URL to access your S43 self service portal https ss safenet inc
75. m t Response Self service Resync Token Confirmation Terma of use User Guides Languages Help Desk Resync Resp Copy de for token Time remaining 52 C CRYPTOCARD Figure 57 resynchronize token 2 2 The token cannot be synchronized error message try to resynchronize your MP token again making sure to copy paste the right challenge response values Copyright Orange Business Services 69 of 102 end user guide secure Authentication how do rename my MP token By default MP token name is based on your user ID Within your MP application within the Edit Token screen tap Rename Token within the Rename Token screen enter the new MP token name in the Enter New Name field O tap Done within the Edit Token screen tap Select Token Within the Edit Token screen your MP token is now referenced with the new name it Orange F 3G 16 56 wt Orange F 3G 16 57 range F 3G Cancel Rename Token Done B Select Token 44 it Token jbrown s n 1000026382 Enter New Name SelectToken Edit Token Change PIN Change PIN my token 5 s n 1000026382 m Resync Token az Resyne Token A B Rename Token A B Rename Token 1 A gt Signature 6 Operation Ain o signature 6 Operation Q wlejr tivju i ole Alsfolr elm ole B6e0o00 C CRYPTOCARD C CRYPTOCARD C CRYPTOCARD Figure 58 rena
76. mber your User ID below User ID ibrown gt Copyright 2012 SafeNet Inc All Rights Reserved Figure 67 activate token with user selected PIN Copyright Orange Business Services 78 of 102 end user guide secure Authentication how do authenticate with my KT token You have the ability to test authentication with your MP token thanks to the SAS self service portal 1 Within your e mail client open the SAS Self enrollment message again and click on the SAS self service portal URL link your web browser will connect to the self service web site 2 Within the SAS self service portal within the Home page click on Sign In within the Authenticate page click on Sign in using your token SafeNet Authentication S SAS Self enrollment james brown Your self enrollment account has been created If you are enrolling a F 11 42 SAS Self enrollment inbox x oh SafeNet Authentication Server noreply safenet inc com 11 42 2 minutes ago mv to me james brown Your self enrollment account has been created If you are enrolling a hardware token and do not have your token yet please contact your system administrator Please go to the following URL to enroll with SAS https se safenet inc com selfEnrollment index aspx code akmmplaoVVuAvL49iTgXevdall Ifthe above link does not work please copy and paste this url to your web browser Once enrolled
77. me token how do retrieve my MP token serial Within your MP application within the Edit Token screen tap Operation O within the Operation memorize the displayed MP token serial then tap Done to return to the Edit Token screen ut Drange F 3G 16 56 wt Orange F 3G 16 57 100 ES Select Token Edit Token Operation 3 Done Change PIN Serial number s n Organization mane mycompany sas Challenge mode QUICKLog Event Synchronous FIN Type Server side PIN FIN Mode Fixed PIN Minimum FIN Characters Decimal Minimum FIR Length 4 Maximum PIN Attempts 3 Resync Token A B Rename Token pr a i Signature En Operation 1 ef CRYPTOCARD CRYPTOCARD Figure 59 retrieve token serial Copyright Orange Business Services 70 of 102 end user guide secure Authentication how do remove a MP token For maintenance or troubleshooting purposes your usual helo desk may ask you to remove a MP token from your device Within your MP application within the Select Token screen tap Edit the red symbol to the left of the token Delete then Delete Token 14 54 7 gt 3G 16 15 100 KJE 16 15 Select Token dt 1 Select Token Done Select Token 2 eres coe een ay ee ae TTT 2 jbrown jbrown jbrown s n 1000026382 sin 1000026382 5 s n 1000026382 Delete Token C s cRYPTOCARD i cryPTOCARD i cryPT
78. must contact your Administrator immediately to disable your Device and then follow instructions from your Administrator to have it safely returned Copyright Orange Business Services 13 of 102 end user guide secure Authentication MP token for Windows PC In this chapter you will find instructions for installing activating and managing your MP token for Windows PC devices The advantage of software tokens is mass deployment without hardware distribution By thoughtful selection of the type of device upon which a software token can be installed administrators can lock an end user to a specific machine limit the end user to using only secure platforms or provide complete machine independence With our Secure Authentication service MP tokens can be issued revoked and reissued without restriction or the need to recover the MP token from the end user Multiple MP software tokens can be installed on a single device e g hard drive provided the usernames are unique what is a MP token Up until now you ve logged on with your User Name and Password The problem is that passwords are easily compromised putting your identity and the resources you access at risk By using a MP token you will be able to generate a One time Password or OTP As the name implies an OTP can only be used once Each time you logon you will use your MP to generate a new OTP how does it protect me Password theft is the single most common way th
79. my KT token continue to operate cecceccecceeceeceeeeeeaeeseeeeeeeeeeeeetseeaeeaeeaeeees 74 what should I do if I can t logon USING my token ccccccecceecceeceeceeeeeeeeeeeeeeeeeeaeeeeeeeeeeaneas 74 how do enroll with a KT token ccccecccececececeeeceeeceeeeeeeceeeeeeeseeeseesseeeeeetseetsstseetseetsaetas 75 how do I register my KT token EEE 76 PINT TOKON ae ctcceagncmatccustacereceauaansianeindsucsanemeucasndtannaananouershdesedeabaroncnandee 1 how do complete installation process with user selected PIN code cecer 78 how do complete installation process with fixed PIN code ccccceccecseeeeeeeeeeeeaeeaetaeees 78 how do authenticate with My KT token cccccccsecsecceeeeeceeeeeeeeeeeeaeeseeeeeeeeeeeeeetaetaeeaeeaeeees 79 ENN NN es teceecanaseansacentiacsensqancesasee sauoncus E EENE EE 81 how do resynchronize my KT token EE 82 GAD rG OLE g EEE 84 what is a EDEN GE ERE trt trt trt Srn Sr Pr P rEPrEPEESEESEEEEEEEEEEEEEEE EE 84 how does it protect ME NE ore nr ren ee ener er ee 84 Copyright Orange Business Services 7 of 102 end user guide secure Authentication can anybody use MY GrlDsure token rrarrarrarrnrrnrrnersarsarrarrerrsrrnennennennersarnsrrerrsennennennennen 87 what kind of PIN Code is supported by GrlDsure token arvarvrrrrrrrrrrvrrvernrrerrrrrenvernerserseree 87 what are my responsibilities EEE ee 87 VET 87 MN 87 what if my GrlDsure token is locked ssusneresnsrerrrre
80. n application to generate a Token Code OTP Token Code e Client side fixed PIN Code the PIN Code is stored and managed at the Mac level The PIN Code displayed during MP token installation is permanent you can not change it The PIN Code must be entered into the Token application to generate a Token Code OTP Token Code Copyright Orange Business Services 36 of 102 end user guide secure Authentication what is the MP application The MP application allows you to e select a MP token when several are installed e generate a Token Code from this MP token e rename this MP token e resynchronize this MP token e change the PIN Code of this MP token when client side PIN Code type is used e unlock this MP token when the feature is allowed by your Secure Authentication service administrators e retrieve the serial number of this MP token e remove this MP token from your device what are my responsibilities Using the MP token will not only provides security it will simplify your life be reducing or eliminating the need to remember or periodically change passwords Your MP token will do this for you every time you logon However you do have a few simple obligations protect your PIN Code You have to protect your PIN Code just as you would the PIN Code for your bank or credit card Never share it with anybody including people you trust Your usual help desk will never ask for your PIN Code and you sho
81. n Enter PIN p Re enter PIN f rre Cancel Continue x v Figure 29 install MP token file with user selected PIN Code PIN change failed error message try to enter your new PIN Code again making sure to meet complexity requirements displayed You have failed to provide the correct response too many times error message contact your usual help desk Copyright Orange Business Services 43 of 102 end user guide secure Authentication how do launch the MP application From the Mac Finder select Applications then MP 1 app how do authenticate with my MP token You have the ability to test authentication with your MP token thanks to the SAS self service portal 4 Within your e mail client open the SAS Self enrollment message again and click on the SAS self service portal URL link your web browser will connect to the self service web site 5 Within the SAS self service portal within the Home page click on Sign In within the Authenticate page click on Sign in using your token SafeNet Authentication S SAS Self enrollment james brown Your self enrollment account has been created If you are enrolling a F 11 42 ol ul SAS Self enrollment Inbox x SafeNet Authentication Server noreply safenet inc com 11 42 2 minutes ago to me james brown Your self enrollment account has been created If you are enrol
82. n PIN Code Copyright Orange Business Services 93 of 102 end user guide secure Authentication user selected PIN Code Within the SAS self service portal within the Authenticate page choose a new PIN Code and enter it in the New PIN and Confirm New PIN fields O then click on OK The Sign Out button O displayed within the Home page indicates your authentication is successful oe kikk ll Services Self service Portal Signin Self service Portal Sign In Authenticate fF Your PIN has expired Please enter a new PIN J Oy New PIN 40060 My Profile Reset PIN Reset PIP Confirm New PIN 0000 ox Resync Token Figure 82 authenticate with server side PIN Code fixed PIN Code Within the SAS self service portal the Sign Out button O displayed within the Home page indicates your authentication is successful m Services Self service Portal O l My Profile Reset PIN Reset PIP Resync Token Figure 83 authenticate with fixed PIN Code Copyright Orange Business Services 94 of 102 end user guide secure Authentication how do change my PIN Code Within the SAS self service portal within the Home page once authenticated Sign Out button must be displayed click on Reset PIN within the Create New PIN page choose a new PIN Code and enter it in the Create New PIN and Verify PIN fi
83. n the One Time Password screen copy the new generated Token Code value hold your finger on the value until the Copy icon appears 3 Within the SAS self service portal within the Authenticate to Process page paste the Token Code value next to the PIN Code in the OTP field O hold your finger on the field until the Paste icon appears then tap OK The Sign Out button displayed within the Home page indicates your authentication is Successful SAS SELF SERVICE PORTAL MP APPLICATION SafeNet Authentication Service Self Service tl Orange F 3G 15 44 100 ES One time Password Done Sign In Authenticate to Process jbrown Gp 2 Token Code Your one Copy S sword 59241286 EAA Time remaining 53 End user ef CRYPTOCARD Figure 51 authenticate with server side PIN Code Your login attempt was not successful error message try to authenticate again making sure to enter your PIN Code followed by the Token Code generated by your MP token in the OTP field Copyright Orange Business Services 64 of 102 end user guide Secure Authentication client side PIN Code 1 Within the SAS self service portal within the Authenticate to Process page enter your user ID in the User ID field O 2 Within your MP application enter your PIN Code in the Enter PIN for token field O tap Done within the On
84. nature Unlock Token Rename Token jbrown Token Code 47608474 BE Generate Token Code Resync Token x Resync Token Challenge Response SAS SELF SERVICE PORTAL TOKEN APPLICATION Respond to challenge 43523085 Response Help Me OK Challenge Torem _ Pe BB Ui Services 7 cm er Tools Accessibility Help Resync Token Challenge Response Sprenet Respond to challenge 43523085 Help Me Response Token jbrown Response EE Q Token Code 31840258 CE ox Q Generate Token Code Figure 17 resynchronize token with server side PIN Code The token cannot be synchronized error message try to resynchronize your MP token again making sure to copy paste the right challenge response values Copyright Orange Business Services 30 of 102 end user guide secure Authentication client side PIN Code 1 Within the SAS self service portal within the Challenge Response page copy the Respond to challenge value O 2 Within your Token application select Tools then Resync Within the pop up window paste the challenge value in the Challenge field enter your PIN Code value in the PIN field click on OK and then click on Copy to copy the generated response 3 Within the SAS self service portal within the Challenge Response page paste the response value in the Response field then c
85. ness Services 72 of 102 end user guide secure Authentication KT token Orange Business Services would like to thank you for choosing our Secure Authentication service to helo you protect your on line identity and the networks applications and data you use from unauthorized access In this chapter you will find instructions for installing activating and managing your KT token what is a KT token Up until now you ve logged on with your User Name and Password The problem is that passwords are easily compromised putting your identity and the resources you access at risk By using a KT token you will be able to generate a One time Password or OTP As the name implies an OTP can only be used once Each time you logon you will use your KT token to generate a new OTP what is a KT token The KT 5 Key Chain token generates a new pseudo random Token Code each time the token is activated The KT token is activated by pressing the button located to the right and below the LCD display The KT Token Code consists of a string of 8 characters that is used to guard against unauthorized use how does it protect me Password theft is the single most common way thieves and hackers steal identities and gain unauthorized access to networks and resources While they have many ways to steal a password success depends on the stolen password being valid much the way credit card theft relies on the card being usable until you report it
86. nge Business Services 23 of 102 end user guide secure Authentication how do launch the Token application Within the Windows taskbar click on Start Programs SafeNet Tokens two times how do select my MP token Within your Token application when only one MP token is installed it is automatically selected else use the dropdown menu to select the MP token you want to use Token Ioj x Tools Accessibility Help Token ibrown ED Bibra Token Code 08184331 Ea Token Code Ba Generate Token Code Figure 10 select token Copyright Orange Business Services 24 of 102 end user guide secure Authentication how do authenticate with my MP token You have the ability to test authentication with your MP token thanks to the SAS self service portal 1 Within your e mail client open the SAS Self enrollment message O again and click on the SAS self service portal URL link your web browser will connect to the self service web site 2 Within the SAS self service portal within the Home page click on Sign In within the Authenticate page click on Sign in using your token SafeNet Authentication S SAS Self enrollment james brown Your self enrollment account has been created If you are enrolling a I 11 42 ol 5 SAS Self enrollment Inbox x 4 SafeNet Authentication Server noreply safenet inc com 11 42 2 minut
87. nticate to Process page enter your user ID in the User ID field and your password in the OTP field O click on OK 9 The Sign Out button displayed within the Home page indicates your authentication is successful 1 Business kikid Services a Services Sign In Authenticate to Process User ID jbrown oY My Profile OTP T Help Me Figure 89 authenticate with password Your login attempt was not successful error message click on Home and try to authenticate again making sure to enter the correct password in the OTP field Copyright Orange Business Services 101 of 102 end user guide secure Authentication what to do if forget my password resend my password by e mail 1 Within the SAS self service portal within the Home page click on Sign In within the Authenticate page click on Send Sign in password by e mail within the Send Password by E mail page enter you user ID in the User ID field O and click on Send O Business E mi Services r Self service Portal Self service Portal DSign In Sign In Sign In Aumentcate Sign In Send Password by E mail User ID jprown ED Send Sign in password by e mail 2 My Profile O Send Sign in using your token Figure 90 resend password by e mail 1 2 2 Within your e mail client open the SAS Self service Temporary
88. ode aserareraneraneraneraneraneraneraneraneranernr 62 NOW do launch the MP application snenennsneresnererrsrsrerrrrrrerrrrsrerrrrrrerrrrsrrrrererrrrererens 62 SETNING 62 how do I authenticate with My MP token ccccccsecseceeeeeeeeeeeeeeeeeeeaeeseeeeeeeeeeteetaetaeeaeeaeeees 63 Copyright Orange Business Services 6 of 102 end user guide secure Authentication server side PIN Code EE 64 client side PIN Gode e ssssssssssssssrrsrrsrrerrsrrerresrerrerrerrerrerrerrerrerrerrerrerrerrerrerrerrerrerrereereee 65 Now doleditmy FIN COGE EE 66 ge OOH eg 10 My PIN COOS JE EE 67 server side PIN Code RE 67 client side PIN Code EEE 68 how do resynchronize my MP token e ensnsnesnsnerrrrrrerrrrsrerrrrrrnrrrrrrerrrrrrerrrrsrrrrererrrrrrerene 68 nowdo lrename My ON 70 how do retrieve my MP TOKE Ta 70 how do remove MP Neven 71 how do retrieve the MP application version c cccccecseeceeeeeee eee eeeeeseeeeeeeeeeeeneeaeeaeeaeeeeeens 71 how do RC all tsiie Gil are mall eames Ne 72 TOR EE EE EM 13 what is a KT token kp 3 Wet Sve EE 7 arsnsatoianneannenenastetanneinnananadhoidannanntaenadhuidaniinmerspadhaidantannennadnoidanianntacnadions 3 OW does it PONS IS ar 3 what kind of PIN Code is supported by KT token sssnerssnsrernrrsrerrrrrrrrrrrnrrrrrrerrrrererrrrerne 74 what are my responsibilities EEE ME 74 Hotet your FPN COGG ett te ht th ee he 74 ETEN NN 74 TENNENE 74 how long will
89. oken Code value next to the PIN Code in the OTP field then click on OK The Sign Out button displayed within the Home page indicates your authentication is successful SAS SELF SERVICE PORTAL TOKEN APPLICATION M Services Self service Portal Signin 0 x Tools Accessibility Help Sign In Authenticate to Process Grenet User ID pro OD Token jbrown o oo Token Code Help Me OK QO l PIN Code EER y _ Services End user Self service Portal sionou T fa Z My Profile Reset PIN Resync Token Figure 12 authenticate with server side PIN Code Your login attempt was not successful error message try to authenticate again making sure to enter your PIN Code followed by the Token Code generated by your MP token in the OTP field Copyright Orange Business Services 26 of 102 end user guide secure Authentication client side PIN Code 1 Within the SAS self service portal within the Authenticate to Process page enter your user ID in the User ID field O 2 Within your Token application click on Generate Token Code within the pop up windows enter your PIN Code in the PIN field click on OK then on Copy 3 Within the SAS self service portal within the Authenticate to Process page paste the Token Code value in the OTP field then click on OK The Sign O
90. opyright Orange Business Services 19 of 102 end user guide secure Authentication how do run the Software Tools installer You must have administrator rights on your Window PC to run the Software Tools installer p oe Internet Explorer Within the Software Tools installer click on Run O if a Security Warning pop up window is displayed click on Run O to accept the publisher of the installer File Download Security Warning x Do you want to run or saye this file Name BlackShield ID Software Tools msi Type Windows Installer Package 7 47MB From se safenet inc com Bn sve Internet Explorer Security Warning x While files from the Internet can be useful thi The publisher could not be verified Are you sure you want to run this potentially harm your computer If you do not software run or save this software What s the risk Name BlackShield 201D 20Software gt 20Tools msi Publisher Unknown Publisher This file does not have a valid digital signature that verifies its publisher You i should only run software From publishers you trust How can I decide what software to run Figure 4 run Software Tools installer within Internet Explorer amp Firefox If your Firefox browser displays Additional plugins are required to display all the media on the page banner close it Within the Software Tools installer click on Save File O save the Softw
91. ot be synchronized error message try to resynchronize your MP token again making sure to copy paste the right challenge response values Copyright Orange Business Services 50 of 102 end user guide secure Authentication client side PIN Code 7 Within the SAS self service portal within the Challenge Response page copy the Respond to challenge value O 8 Within your Token application click on the tile of the MP token you want to use select the gear icon then Resync enter you PIN Code in the PIN field click on Continue paste the challenge value in the Challenge field click on Continue then click on Copy to copy the generated response o 9 Within the SAS self service portal within the Challenge Response page paste the response value in the Response field then click on OK O Within the Confirmation page a message indicates your token resynchronization is successful oF MP 1 Software Tools Eu Services Self service Portal Sin Sprenee Authentication SERVICE SAS SELF SERVICE PORTAL r MP APPLICATION Token Resync Enter PIN to begin Resync Operation Resync Token ChallengeiR KR D y Challenge Response dad dude Respond to challenge 87670166 Response a Help Me NE xo penn MP 1 Software Tools Signature xs j ar hen Operatio sti em Jr Grener Authentication SERVICE Business Change PIN P
92. pop up window memorize the MP token serial then click on Close O Token Manager File Options Tokens Load Token Remove Token Token Information Token Information l x 3 Serial 1000026382 User Name jbrown Organization Mame mycompany sas Challenge Made Quicklog Synchronization Event Based PIN Type Server FIM PIN Mode Fixed Valid PIN Characters Numbers Only Minimum FIN Length 3 Maximum PIN Atttempts 3 Invalid PIN Attempts Figure 21 retrieve token serial Copyright Orange Business Services 33 of 102 end user guide Secure Authentication how do remove my MP token For maintenance or troubleshooting purposes your IT administrator may ask you to remove a MP token from your device Within your Token Manager application select the token you want to remove click on Remove Token within the pop up window click on Yes The token has been successfully removed Token Manager E 21 xi File Options Tools Accessibility Help Tokens gt F F i fen Token Code L Fi Generate Token Code Remove Token ed re you sure you want to remove this token Load Token Remove Token Token Information Figure 22 remove token how do I uninstall the Software Tools For maintenance or troubleshooting purposes your IT administrator may ask you to uninstall the Softwa
93. pt the software license agreement on Continue select your Macintosh HD as destination O click on Continue on Install then on Close at the end of the installation Install MP 1 the installation anyway S 7 MP 1 6 pkg was signed with an invalid certificate This package i might not install what you expect Do you want to continue with FI Show Certificate Epson tee Introduction License amp Destination Select Installation Type Installation Summary Go Back 809 Install MP 1 Welcome to the MP 1 Installer Cancel coin install this software Continue Go Back amp Install MP 1 You will be guided through the steps necessary to amp Install MP 1 To continue installing the software you must agree to the terms of the software license agreement Click Agree to continue or click Disagree to cancel the installation Y and quit the Installer Read License Disagree agree C RE nmary 1 Grant of License for Personal Use SafeNet Inc SafeNet grants you a non exclusive non transferable license to use the program with which this license is distributed the Software including any documentation files accompanying the Software Documentation for internal business use only for up to the number of users specified at the time of download and indicated in emailed receipt or for the number of users
94. r1t r111 11t aatatanbien saci naunatantnan sackman 14 Nate PN 14 ROW O T ek 10 amr tnt nt ter een nen ete Nee trent ener a Senne ee een 14 can anybody use my VPN 14 what kind of PIN Code is supported by MP token ccccccseeeseeeeeeeeeseeeeseeeeeeneeneeneeaseaeeaees 15 what are SOM Mee SE 16 what is the Token NN 16 what is Token Manager application enssssnernsnerernrrernrrrrnrrrrrrerrrrrrerrrrsrerrrrsrrrrrrerene 16 what are my responsibilities rrarrarrarrnrrvrrnarsarrarrerrrrnennennarsarnerrernsannennennannsernserrsersennenneneen 16 protect NE 16 what if forget NN 17 what PMY MP Oken iS IOCKGO 7 arisiiinn nnna EAE 17 how long will my MP token continue to operate rrarrrrrrarrarrrrrarrarrnrrnrrnernerserrsrrssrnennennsnnn 17 what should I do if I can t logon using my token esssrssnsrsrerrsrrsrerrrrrrrnrrsrrrrnrrrrnrrnrrsrerne 17 how do I enroll with vr 18 how do I access the enrollment web site ssssessssserrsrrerrsrrerrerrerrerrerrerrerrerrerrerrerrenns 18 how do I select a Windows PC as target device cccccccecceeceeceeeeeeeeseseeseesaeeseesaeeseeegs 19 how do I download the Software Tools installer rarrrarrrnrrrarrrnrrrarrrnrrrnrrrnrrrsrrrsrrrnrennn 19 how do I run the Software Tools Installer ccccccecccsecceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeennnenaes 20 how do l install the Software Tools r 21 how do download the MP token are 22 how do I install the M
95. re Tools from your device You must have administrator rights on your Windows PC to uninstall the Software Tools e Windows XP from the Windows taskbar select Start Settings Control Panel Add or Remove Programs SafeNet Authentication Service Software Tools Click on Remove to run the Software Tools uninstaller and follow the instructions e Windows 7 from the Windows taskbar select Start Control Panel Programs and Features option SafeNet Authentication Service Software Tools Right click on Uninstall to run the Software Tools uninstaller and follow the instructions Software Tools uninstaller does not delete the location where your MP token files are stored After performing a new install of the Software Tools you will be able to use them without enrolling again Copyright Orange Business Services 34 of 102 end user guide secure Authentication MP token for OSX Lion In this chapter you will find instructions for installing activating and managing your MP token on Mac devices running OS X Lion The advantage of software tokens is mass deployment without hardware distribution By thoughtful selection of the type of device upon which a software token can be installed administrators can lock an end user to a specific machine limit the end user to using only secure platforms or provide complete machine independence With our Secure Authentication s
96. rerrrrrrrrrrrerrrrrrerrrrererrrrsrerrrrererrrrerene 87 how long will my GrlDsure token continue to operate es sserssnsrererrrrrrrrrrrrrrrrrrrrrrreren 87 what should do if can t logon using my token serer 88 how do I enroll with a GrlDsure token sssssrssrssresrrsrrsrrtrrsrrsrrsrrsrrtrrtrtsrrtrrtrrerrerrereereere 89 how do I access the enrollment web site rareranrranrraneranrranrrannraneraneraneraneranesanesanesanernn 89 ae Fe ee rss ea ake nT nh EE EEEE RRRS 90 how do I authenticate with my GrlDSUre tOKEN cccecceeceeceeee eee eeneeeeeeeeeeeeeeeeetaetaeeaeeaeeees 92 user selected PIN OG EE 94 fixed PIN reel 94 how do I change my PIN av 95 how do change the PIP of my GrlDsure token rrarerrvarrrarvnnrrannnrrrannnerrannrsrrannrsrvnnessennn 96 FV 97 WE E NO EEE S T 97 what are my des oe as 0 1 ae ne er er en ee 97 TL TV 97 what if my password token is locked EE 97 how long will my password continue to operate e ssssrererrrrerrrrrrerrrrrrrrrrrnrrrrrrrrrrrrrerrn 97 what should I do if I can t logon using my token esssnssneresrerrnrrrrnrrrrrrrnrrsrnrrerrrrnrrrrrrreree 97 how do I enroll with a PASSWOrd rasrarrarrarnnnrnarrarrarrerrnennrnnnrnernarnerrssrsennannennannsrneersersernennennene 98 how do I access the enrollment web Site ss ssrssresrrsrrsrrsrrsrrsrrsrrsrrsrrsrrtrrtrrerrerrsreeresre 98 MENN erssriersrcir rerio rrena EA EEEE EEEE EEEN 99 how do authenticat
97. ri Web browser is used Please use e mail client and not browser webmail to access messages sent by the SAS how do access the enrollment web site Within your e mail client open the SAS Self enrollment message O and tap the self enrollment URL link your web browser will connect to the Secure Authentication enrollment web site To brown1542 gmail com SafeNet Authentication 14 41 SAS Self enrollment a SAS Self enrollment 1 7 d cembre 2012 14 41 james brown Your self enroliment account has been created If you are enrolling a h james brown Your self enrollment account has been created If you are enrolling a hardware token and do not have your token yet please contact your system administrator Please go to the following URL to enroll with Updated 077 123712 14 41 Figure 42 self enrollment link SAS Self enrollment e mail not received verify if the mail is not stored in the junk folder of your e mail client Y Your provisioning task has already been completed error message verify you opened the latest self enrollment message and not an old one Copyright Orange Business Services 58 of 102 end user guide secure Authentication how do select an iPhone as target device Within your Safari browser tap iPhone click on Next read displayed instructions before closing your browser se safenet inc com GAJ e al Orange F 3G
98. ribution By thoughtful selection of the type of device upon which a software token can be installed administrators can lock an end user to a specific machine limit the end user to using only secure platforms or provide complete machine independence With our Secure Authentication service MP tokens can be issued revoked and reissued without restriction or the need to recover the MP token from the end user Multiple MP software tokens can be installed on a single device e g hard drive provided the usernames are unique what is a MP token Up until now you ve logged on with your User Name and Password The problem is that passwords are easily compromised putting your identity and the resources you access at risk By using a MP token you will be able to generate a One time Password or OTP As the name implies an OTP can only be used once Each time you logon you will use your MP to generate a new OTP how does it protect me Password theft is the single most common way thieves and hackers steal identities and gain unauthorized access to networks and resources While they have many ways to steal a password success depends on the stolen password being valid much the way credit card theft relies on the card being usable until you report it as stolen The problem of course is that it is almost impossible for you or the security professionals that manage your network to discover your password has been compromised until long after
99. rrererrrrnrnrrrrnrrrrrrerrrrererrrrererrrre 41 how do I download and install my MP token file arvarrarrarrarrarrnrrnennernarrarrerrsrrsernennennen 42 how do I complete installation process with fixed PIN code r ararrarurrarnrrarvrrervererrerserersenn 43 how do I complete installation process with user selected PIN code cccceceeeeeeeeeeeeees 43 how do launch the MP application Lasser eukeriinkdie 44 how do authenticate with my MP token ccccccsecsecceeceeeeeeeeeeeeeeaeeseeeeeeeeeeeeeetaetaeeaeegeeegs 44 STEEN vare 45 Copyright Orange Business Services 5 of 102 end user guide secure Authentication client side PIN Code EEE EEE 46 how do I change my PIN Code REE 47 SM GO PIN COG i aarer choo strpos cre yates theo EE aai erdiari taria 47 TEN O e A E E E E 48 how do resynchronize my MP token EEE 49 server side PIN Code EEE 50 client side PIN Code ares rice scence ntee actoeeoceacetsetceactoe cites acto tstes ante citchenietaciatdaioduciehanietiaeidsituninanndiaitaioads 51 how do rename ee 52 how do retrieve my PN TG 52 how do retrieve the Token application version ccccecceeceecseeeeeaeeeeeeeeeeeeeeeetaetaeeaeeneeees 53 how do I remove my MP token ccccccecceecseeeeeeeeseeseeeeeeeeeeeeeeeeeeeeeaeeeeeeeeeeeeeeeeeteeeaeegeegeeees D3 METOE TE OTN EEE 54 let a RAOK er E E E E E E TE 54 how does it protect ME s srersrrsrerrrrerrrrrrerrrrrrtrtrrrre ee eA EE ESA EAA SAG HEGRE EERE
100. s Figure 77 self enrollment link Copyright Orange Business Services 89 of 102 end user guide secure Authentication how do create my PIP Within your web browser select your PIP using the grid Try to pick a pattern here O that would be not easily guessed by someone else Memorize the displayed PIN Code O this might be your definitive one if the type of the PIN Code is fixed then click on Next The enrollment web site displays a page that confirms your MP token has been successfully activated Memorize your User ID then click on Close when using Firefox you have to close the browser Business WGL Services SAS self enrollment prenet Authentication SERVICE SAS self enrollment Select a PIP using the grid Try to pick a pattern that would not be easily guessed by someone else Minimum PIP Length 4 Please note your server side PIN is 9147 2 Your token has been successfully activated Please remember your User ID user Erun O You will be required to enter this PIN followed by your passcode during an authentication Enter Value esee n o e Q Copyright 2012 SafeNet Inc All Rights Reserved Copyright 2012 SafeNet Inc All Rights Reserved Figure 78 create PIP Ifthe enrollment web site displays the PIP change failed message Try to enter your new PIP again making sure to meet complexity requirements displayed I
101. s 100 Figure 89 authenticate with password ccccccecceeceecceeceeceeceeceececeeeaueseusueseeseeseesetsaeeseesanes 101 Figure 90 resend password by e mail 1 2 cccecceccsecseceeeeeeeeeeeee eee eeeeeaeeeeeeeeeeeeeteetaeeaeegeees 102 Figure 91 resend password by e mail 2 2 cccccceccsecsecseeeeeeeeeeeeeeeeeeeeeseeseeeeeeeeeeeenetaeegeegeees 102 Copyright Orange Business Services 12 of 102 end user guide secure Authentication Secure Authentication End User Rules These Rules of Use apply to your use of the enclosed token card or other device your Device and your secret Personal Identification Number your PIN You should use your Device and your PIN to identify yourself to any systems or service secured the Orange Secure Authentication service in accordance with these Rules and any written agreements between yourself and your organization and your organization and Orange It is important that you take proper care of your Device keep it safe and secure at all times and guard against loss damage and theft Your PIN must remain secret to you at all times No other person ever needs to know this PIN and you should not disclose it to anyone This includes your colleagues and systems administrators at your company and personnel who are or claim to be representatives of Orange or a Partner of Orange You should be extremely suspicious of anyone who ever tells you at they need to know your PIN and you should report any such
102. s amount of time before your account will unlock Contact your usual help desk to resolve logon problems Copyright Orange Business Services 88 of 102 end user guide secure Authentication how do I enroll with a GriDsure token how do access the enrollment web site Within your e mail client open the SAS Self enrollment message O and click on the self enrollment URL link your web browser will connect to the Secure Authentication enrollment web site D SafeNet Authentication S SAS Self enrollment james brown Your self enrollment account has been created If you are enrolling a I 11 42 SAS Self enrollment inbox x a EI 4 SafeNet Authentication Server noreplyi safenet inc com 11 42 2 minutes ago to me james brown Your seltenrallment account has been created lf you are enrolling a hardware token and do not have your token yet please contact your system administrator Please go to the following URL to enroll with SAS https se safenet Inc com selfEnrollment Index aspx code akmmplovVvuAvLaAgi Tgyxevoall 2 Ifthe above link does not work please copy and paste this url to your web browser Once enrolled you can go to the following URL to access your SAS self service portal https ss safenet inc com blackshieldss O 3H1 74MH T Endex aspx You can go to the following URL to access the Administrator guide http vv orarnge business com secure authentication documerntations end user quide
103. the way credit card theft relies on the card being usable until you report it as stolen The problem of course is that it is almost impossible for you or the security professionals that manage your network to discover your password has been compromised until long after damage has been done Copyright Orange Business Services 84 of 102 end user guide secure Authentication GrlDsure displays a grid of cells containing random characters to an end user As shapes and patterns are remembered more simply than words and numbers GrlDsure involves the end user to remember a sequence of cells in a pattern on the grid that is easily recognizable to them The end user chooses their Personal Identification Pattern PIP from the arrangement and sequence of the cells from the grid Figure 73 how does it work 1 4 When the end user is required to authenticate securely to a protected network resource they select the characters that match their PIP from the unique characters shown to them by the grid Figure 74 how does it work 2 4 Copyright Orange Business Services 85 of 102 end user guide secure Authentication In this example the end user s PIP would be a value of 5582 This is seen in the highlighted cells below Therefore to authenticate the end user would enter 5582 as their one time password value The next time the end user needs to authenticate the characters displayed by the grid will be different but the PIP remains
104. ue in the OTP field then click on OK The Sign Out button O displayed within the Home page indicates your authentication is Successful SAS SELF SERVICE PORTAL MP APPLICATION 2 MP 1 Software Tools Business Services prenet Authentication SERVICE jbrown G OTP selt service Portal on N nt Enter PIN to generate OTP Oe PIN Code i Sign In Authenticate to Process PIN End user User ID ibrowr D OTP reyrryry 6 Cancel Continue Y Help Me DK Z Token Code MP 1 Software Tools prenet Authentication SERVICE Generate OTP Your one time password Self service Portal signout 0 Cancel Continue X An 982 m D My Profile Reset PIN Resync Token Figure 32 authenticate with client side PIN Code Your login attempt was not successful error message try to authenticate again making sure to enter only the Token Code generated by your MP token in the OTP field Copyright Orange Business Services 46 of 102 end user guide secure Authentication how do I change my PIN Code The PIN Code change process depends on the type of the MP token PIN Code server side PIN Code Within the SAS self service portal within the Home page once authenticated Sign Out button must be displayed click on Reset PIN within the Create New PIN page choose a new PIN Code and
105. uld never reveal it to them Never write down your PIN Code what if forget my PIN Code Contact your usual helo desk Upon verifying your identity they will be able to reset your PIN Code what if my MP token is locked Contact your usual helo desk Upon verifying your identity they will be able to unlock your MP token how long will my MP token continue to operate Your MP token will be able to generate OTPs until it is revoked by IT administrators Copyright Orange Business Services 37 of 102 end user guide secure Authentication what should do if can t logon using my token The most common cause of failed logon is entering an incorrect OTP Never attempt to reuse a Token Code and ensure that you enter the Token Code exactly as displayed on the token including any upper and lower case letters and punctuation that it may contain By default your account will automatically lock for 15 minutes if more than 3 consecutive logon attempts fail You must wait this amount of time before your account will unlock Contact your usual help desk to resolve logon problems Copyright Orange Business Services 38 of 102 end user guide secure Authentication how do enroll with a MP token how do access the enrollment web site Within your e mail client open the SAS Self enrollment message and click on the self enrollment URL link your favorite Web browser here Safari will connect to the Secure Authenti
106. ur Safari browser select Mac OS X Lion click on Next read displayed instructions before closing your browser Business MGEN Services SAS self enrollment SafeNet Authentication Service Multi Platform Token MP Token can be installed on many different target devices The allowed targets are set by your SafeNet Authentication Service Administrator User ID jbrown I would like to install an MP token onto Install Locally Secure Flash Drive Java Enabled Phone BlackBerry iPhone oe SAS self enrollment Windows Phone 7 mac os x Lion Business mab Services SafeNet Authentication Service Server will send an e mail to you The e mail will contain initial PIN and Over The Air installation link OTA You may close your browser now et Copyright 2012 SafeNet Inc All Rights Reserved Copyright 2012 SafeNet Inc All Rights Reserved Figure 24 select Mac as target device how do download the MP application Within your e mail client open the Token Installation for Mac OS X message click on httos se safenet inc com selfEnrollment MP 1 pkq link O Within your Safari browser in the upper right corner click on the down arrow to display downloads then click on MP 1 pkg file O to run the MP application installer SafeNet Authentication S Token Installation for Mac OS X james brown Follow
107. ut button O displayed within the Home page indicates your authentication is successful Services 0 x Tools Accessibility Help Sign In Authenticate to Process prenet SAS SELF SERVICE PORTAL TOKEN APPLICATION User ID ibrowr D Token jbrown OTP ei nn Code Help Me OK I D PIN Code End user PIN Requn ovt PIN peed Self service Portal sign out A Oi l My Profile Reset PIN Resync Token Figure 13 authenticate with client side PIN Code Your login attempt was not successful error message try to authenticate again making sure to enter only the Token Code generated by your MP token in the OTP field Copyright Orange Business Services 27 of 102 end user guide secure Authentication how do change my PIN Code The PIN Code change process depends on the type of the MP Token PIN Code server side PIN Code Within the SAS self service portal within the Home page once authenticated Sign Out button must be displayed click on Reset PIN within the Create New PIN page choose a new PIN Code and enter it in the Create New PIN and Verify PIN fields then click on OK Within the Create New PIN page a message indicates your PIN Code change is successful Services Self service Portal Sign out Reset PIN Create New PIN Change your PIN Create New PIN 0000 My
108. w referenced with the new name O gt Token ici Tools Accessibility Help Tools Accessibility Help Change PIN Resync felnet prenet Signature i Unlock Token a ee maesQ a Bal Token Code Bl Rename Token O O O Mew Name my koken Eg Cancel Figure 19 rename token how do I retrieve the Token application version For maintenance or troubleshooting purposes your IT administrator may ask you the version of your Token application MP Within your Token application select Help About memorize the Token application version then click on Ok JO x Token Tools Accessibility Help About Token f x version 1 06 0599 2 Copyright 2012 Safe Met Inc Token jbrown mans safenet inc com Token Code Ba Figure 20 retrieve Token application version Copyright Orange Business Services 32 of 102 end user guide Secure Authentication how do launch the Token Manager application e Windows XP within the Windows taskbar select Start Settings Control Panel BlackShield ID Token Manager e Windows 7 within the Windows taskbar select Start Control Panel BlackShield ID Token Manager how do retrieve my MP token serial Within your Token Manager application select the token you want to find the serial O click on Token Information within the
109. y your life be reducing or eliminating the need to remember or periodically change passwords Your GriDsure token will do this for you every time you logon However you do have a few simple obligations protect your PIN Code You have to protect your PIN Code just as you would the PIN Code for your bank or credit card Never share it with anybody including people you trust Your usual help desk will never ask for your PIN Code and you should never reveal it to them Never write down your PIN Code what if forget my PIN Code Contact your usual helo desk Upon verifying your identity they will be able to reset your PIN Code what if my GrlDsure token is locked Contact your usual helo desk Upon verifying your identity they will be able to unlock your GrlDsure token how long will my GriDsure token continue to operate Your GrlDsure token will be able to generate OTPs until it is revoked by IT administrators Copyright Orange Business Services 87 of 102 end user guide secure Authentication what should do if can t logon using my token The most common cause of failed logon is entering an incorrect OTP Never attempt to reuse a Token Code and ensure that you enter the Token Code exactly as displayed on the token including any upper and lower case letters and punctuation that it may contain By default your account will automatically lock for 15 minutes if more than 3 consecutive logon attempts fail You must wait thi
110. yed PIN and your next token code in the OTP field PIN 0000 Click the Download button to save your token file Once saved double click the token file to begin installing the token Finally click the Next button below to get your initial PIN and authenticate the token Download Net Opening fkevspdemonet 1000026578 7mp x Copyright You have chosen to open On it m EA a Inc All Rights Reserved fkevspdemonet 1000026578 7mp Tools Accessibility Help which is BlackShield ID Token File 192 bytes AN from https se safenet inc com x What should Firefox do with this file 2 Open with BlackShield Token default v C Save File 15 x F Do this automatically For files like this From now on ton le Token Code 82767439 Ba Generate Token Code 5sI Cancel Figure 7 download token file Copyright Orange Business Services 22 of 102 end user guide secure Authentication how do install the MP token file with fixed PIN Within your web browser memorize the displayed PIN Code this will be your definitive PIN Code then click on OK The enrollment web site displays a page that confirms your MP token has been successfully activated Memorize your User ID then click on Close when using Firefox you have to close the browser Windows Internet Explorer x prenet Authentication SERVICE A Your PIN islos36 Memorize it as you wil

Download Pdf Manuals

image

Related Search

Related Contents

Vector VEC090 User's Manual  f40230e-f4024e  Model TR-1518 Carryout® Tripod Mount  Ata - Tribunal de Contas da União  8891 Programmes temporels du PRV2  Black & Decker CS100 User's Manual  Gov Notice - Regulation on EVMs - Electoral Commission of Namibia  The Manual of Mach3, EMC2 Interface Board CM106 1.  Kortex Kx ADSL Router User's Manual    

Copyright © All rights reserved.
Failed to retrieve file