UniOTP Credential Provider Agent - Revision history

Bao at 01:12, 16 August 2016

2016-08-16T01:12:05Z

Joseph at 03:33, 4 April 2013

2013-04-04T03:33:14Z

← Older revision		Revision as of 14:33, 4 April 2013
Line 5:		Line 5:
	The UniOTP Windows Logon Agent is used to integrate the UniOTP dynamic password authentication system with Windows. There are two versions of the UniOTP Windows Agent: GINA (Windows 2000, XP); and Credential Provider (Windows Vista, 7, Windows Server 2008). Both use two different Windows logon architecture models. This document covers the installation and usage of the Credential Provider agent.		The UniOTP Windows Logon Agent is used to integrate the UniOTP dynamic password authentication system with Windows. There are two versions of the UniOTP Windows Agent: GINA (Windows 2000, XP); and Credential Provider (Windows Vista, 7, Windows Server 2008). Both use two different Windows logon architecture models. This document covers the installation and usage of the Credential Provider agent.

	Note: UniOTP MGS Win Logon ~~will~~ not work Windows 7 Home Premium.		Note: UniOTP MGS Win Logon currently does not work Windows 7 Home Premium and Pro.

	== Installation ==		== Installation ==

Joseph at 23:20, 3 April 2013

2013-04-03T23:20:59Z

← Older revision		Revision as of 10:20, 4 April 2013
Line 92:		Line 92:
	== Imperative Remarks ==		== Imperative Remarks ==

	1. After installing the UniOTP Windows Authentication Agent, if none of the UniOTP user accounts pass the authentication test, uninstall the UniOTP Windows Authentication Agent '''without delay''', otherwise no user account on the computer will be able to log in.		# After installing the UniOTP Windows Authentication Agent, if none of the UniOTP user accounts pass the authentication test, uninstall the UniOTP Windows Authentication Agent '''without delay''', otherwise no user account on the computer will be able to log in.
	2. If authentication has failed numerous times in succession (if more than five consecutive attempts, refer to the administrator to inspect configuration settings), wait ten minutes before attempting to authenticate again. If authentication is still unsuccessful, refer to the administrator to repair your device.		# If authentication has failed numerous times in succession (if more than five consecutive attempts, refer to the administrator to inspect configuration settings), wait ten minutes before attempting to authenticate again. If authentication is still unsuccessful, refer to the administrator to repair your device.
	3. Do not modify or delete the "%SYSTEMROOT%\secuagt_cp.conf" file as this is the configuration file for the UniOTP Windows Authentication Agent. Deletion or modification of this file may result in a locked operating system.		# Do not modify or delete the "%SYSTEMROOT%\secuagt_cp.conf" file as this is the configuration file for the UniOTP Windows Authentication Agent. Deletion or modification of this file may result in a locked operating system.

Joseph at 23:19, 3 April 2013

2013-04-03T23:19:45Z

Show changes

Joseph: moved UniOTP CredentialProvider Agent to UniOTP Credential Provider Agent

2012-09-18T02:18:23Z

moved UniOTP CredentialProvider Agent to UniOTP Credential Provider Agent

← Older revision	Revision as of 13:18, 18 September 2012
(No difference)

Joseph: /* UniOTP Windows Logon Agent Installation */

2012-08-17T04:04:30Z

UniOTP Windows Logon Agent Installation

← Older revision		Revision as of 15:04, 17 August 2012
Line 60:		Line 60:
	[[Image:uniotpcp img11.jpg\|370px]]		[[Image:uniotpcp img11.jpg\|370px]]

	<p>13. A popup message indicating the result of the UniOTP authentication test will appear. If unsuccessful, refer to the displayed message to solve the error. '''Do not log off, switch user, lock, shutdown, reboot, or otherwise interact with Windows user credentials until successfully completing the authentication test. If an encountered error cannot be resolved, please uninstall the UniOTP Windows Logon Agent immediately.'''</p>		<p>13. A popup message indicating the result of the UniOTP authentication test will appear. If unsuccessful, refer to the displayed message to solve the error. '''Do not log off, switch user, lock, shutdown, reboot, or otherwise interact with Windows user credentials until successfully completing the authentication test. If an encountered error cannot be resolved, please uninstall the UniOTP Windows Logon Agent immediately.''' Failure to do so will result in the user being unable to log back into Windows. It is recommended to uninstall the UniOTP Windows Logon Agent until the error, if present, has been identified and rectified.</p>

	<p>14. After verifying the two-factor authentication test has completed successful, the user account is now secured with UniOTP authentication. All user accounts identified with UniOTP require the corresponding OTP to successfully authenticate with the user account. To add additional users, repeat the above steps from step 7.</p>		<p>14. After verifying the two-factor authentication test has completed successful, the user account is now secured with UniOTP authentication. All user accounts identified with UniOTP require the corresponding OTP to successfully authenticate with the user account. To add additional users, repeat the above steps from step 7.</p>

Joseph at 01:53, 8 June 2012

2012-06-08T01:53:40Z

← Older revision		Revision as of 12:53, 8 June 2012
Line 74:		Line 74:
	<p>2. In the password field, input the Windows password for the user account to log onto Windows.</p>		<p>2. In the password field, input the Windows password for the user account to log onto Windows.</p>

	<p>3.In the "UniOTP Account" drop-down list, select the corresponding UniOTP account. In the "OTP[PIN]" password field, input the generated one-time password (If the authentication method is set to OTP+PIN, by default, input your dynamic password followed by your PIN immediately afterwards in the field. Refer to your administrator as to how OTP+PIN authentication is set up ~~as.~~).</p>		<p>3.In the "UniOTP Account" drop-down list, select the corresponding UniOTP account. In the "OTP[PIN]" password field, input the generated one-time password (if the authentication method is set to OTP+PIN, by default, input your dynamic password followed by your PIN immediately afterwards in the field. Refer to your administrator as to how OTP+PIN authentication is set up).</p>

	<p>4. Press [Enter] or click the arrow button to authenticate.</p>		<p>4. Press [Enter] or click the arrow button to authenticate.</p>
Line 88:		Line 88:
	<p>If authentication was successful, the Windows user account is secured with UniOTP dynamic password authentication.</p>		<p>If authentication was successful, the Windows user account is secured with UniOTP dynamic password authentication.</p>

	== ~~Important~~ ==		== Imperative Remarks ==

	<p>1. After installing the UniOTP Windows Authentication Agent, if none of the UniOTP user accounts pass the authentication test, uninstall the UniOTP Windows Authentication Agent '''without delay''', otherwise no user account on the computer will be able to log in.</p>		<p>1. After installing the UniOTP Windows Authentication Agent, if none of the UniOTP user accounts pass the authentication test, uninstall the UniOTP Windows Authentication Agent '''without delay''', otherwise no user account on the computer will be able to log in.</p>
	<p>2. If authentication has failed numerous times in succession (if more than five consecutive attempts, refer to the administrator to inspect configuration settings), wait ten minutes before attempting to authenticate again. If authentication is still unsuccessful, refer to the administrator to repair your device.</p>		<p>2. If authentication has failed numerous times in succession (if more than five consecutive attempts, refer to the administrator to inspect configuration settings), wait ten minutes before attempting to authenticate again. If authentication is still unsuccessful, refer to the administrator to repair your device.</p>
	<p>3. Do not modify or delete the "%SYSTEMROOT%\secuagt_cp.conf" file as this is the configuration file for the UniOTP Windows Authentication Agent. Deletion or modification of this file may result in a locked operating system.</p>		<p>3. Do not modify or delete the "%SYSTEMROOT%\secuagt_cp.conf" file as this is the configuration file for the UniOTP Windows Authentication Agent. Deletion or modification of this file may result in a locked operating system.</p>

Joseph at 01:49, 8 June 2012

2012-06-08T01:49:49Z

← Older revision		Revision as of 12:49, 8 June 2012
Line 59:		Line 59:
	<p>If the entered password is incorrect, the following dialog will be displayed instead.</p>		<p>If the entered password is incorrect, the following dialog will be displayed instead.</p>
	[[Image:uniotpcp img11.jpg\|370px]]		[[Image:uniotpcp img11.jpg\|370px]]
	~~<!--Check-->~~
	<p>13. There will be a popup note shows that the implementation for UniOTP dynamic password authentication is succeeded , Otherwise you need to find the error by referring to the prompted note (please don't reboot , shutdown, lock screen, etc during the operation), until successfully pass the authentication test (If the error can't be resolved, please uninstall the UniOTP Windows Logon Agent Immediately).</p>

	<p>14. After verifying the two-factor authentication test completed successful, the user account is now secured with UniOTP~~'s dynamic password~~ authentication. All user accounts identified with UniOTP require the corresponding OTP to successfully authenticate ~~onto~~ the ~~computer~~. To add additional users, repeat the above steps from step 7.</p>		<p>13. A popup message indicating the result of the UniOTP authentication test will appear. If unsuccessful, refer to the displayed message to solve the error. '''Do not log off, switch user, lock, shutdown, reboot, or otherwise interact with Windows user credentials until successfully completing the authentication test. If an encountered error cannot be resolved, please uninstall the UniOTP Windows Logon Agent immediately.'''</p>
	~~<!--EndCheck--->~~
			<p>14. After verifying the two-factor authentication test has completed successful, the user account is now secured with UniOTP authentication. All user accounts identified with UniOTP require the corresponding OTP to successfully authenticate with the user account. To add additional users, repeat the above steps from step 7.</p>

	== Usage ==		== Usage ==

	[[Image:uniotpcp img12.jpg\|370px]]		[[Image:uniotpcp img12.jpg\|370px]]

	<p>15. ~~Choose~~ a user to ~~enter the logon interface~~.</p>		<p>1. In the Windows logon screen, select a user to log into with.</p>

	[[Image:uniotpcp img13.jpg\|370px]]		[[Image:uniotpcp img13.jpg\|370px]]

	<p>16. In the password field, input ~~your~~ password ~~used~~ to log ~~on the system~~.		<p>2. In the password field, input the Windows password for the user account to log onto Windows.</p>
	In the UniOTP Account drop-down list, ~~choose your~~ UniOTP account. In the OTP[PIN] password field, input ~~your dynamic~~ password (If the authentication method is set to OTP+PIN, input your dynamic password followed by your PIN in the field. )</p>
	<p>~~Click on~~ the arrow button to ~~achieve the authentication~~.</p>		<p>3.In the "UniOTP Account" drop-down list, select the corresponding UniOTP account. In the "OTP[PIN]" password field, input the generated one-time password (If the authentication method is set to OTP+PIN, by default, input your dynamic password followed by your PIN immediately afterwards in the field. Refer to your administrator as to how OTP+PIN authentication is set up as.).</p>
	<p>If the OTP[PIN] password ~~that you input~~ is ~~wrong~~, ~~you will get~~ the following error.</p>
			<p>4. Press [Enter] or click the arrow button to authenticate.</p>

			<p>If the OTP[PIN] password entered is incorrect, the following error will appear.</p>

	[[Image:uniotpcp img14.jpg\|370px]]		[[Image:uniotpcp img14.jpg\|370px]]

	<p>If the OTP [PIN] is correct but the Windows account password is incorrect, the following error will appear.</p>		<p>If the OTP[PIN] entered is correct, but the Windows user account password is incorrect, the following error message will appear.</p>

	[[Image:uniotpcp img15.jpg\|370px]]		[[Image:uniotpcp img15.jpg\|370px]]

	<p>~~By now~~, ~~we succeeded in implementing~~ UniOTP dynamic password authentication ~~protection for this computer~~.</p>		<p>If authentication was successful, the Windows user account is secured with UniOTP dynamic password authentication.</p>

	== Important ~~Points~~ ==		== Important ==

	<p>1. ~~When you finish~~ installing UniOTP Windows Authentication Agent, if ~~you cannot~~ pass the authentication test, uninstall the ~~software immediately to avoid being unable to log~~ on the ~~operating system and all the inconvenience it~~ will ~~cause~~.</p>		<p>1. After installing the UniOTP Windows Authentication Agent, if none of the UniOTP user accounts pass the authentication test, uninstall the UniOTP Windows Authentication Agent '''without delay''', otherwise no user account on the computer will be able to log in.</p>
	<p>2. If ~~you~~ failed ~~to authenticate many~~ times ~~consecutively~~(if more than ~~5 times~~, ~~ask an operator~~ to ~~check~~ the configuration), ~~please~~ wait 10 minutes before attempting to authenticate again~~, if you~~ still ~~cannot authenticate for a long time~~, ~~you need~~ to ~~ask an~~ administrator to repair your device.</p>		<p>2. If authentication has failed numerous times in succession (if more than five consecutive attempts, refer to the administrator to inspect configuration settings), wait ten minutes before attempting to authenticate again. If authentication is still unsuccessful, refer to the administrator to repair your device.</p>
	<p>3. ~~Please to try to~~ modify or delete the ~~SYSROOT~~\secuagt_cp.conf ~~by yourself,~~ this ~~file~~ is ~~used as~~ the configuration file for UniOTP Windows ~~authentication agent, if~~ this file ~~is deleted or damaged, you might be unable to log on the~~ operating system.</p>		<p>3. Do not modify or delete the "%SYSTEMROOT%\secuagt_cp.conf" file as this is the configuration file for the UniOTP Windows Authentication Agent. Deletion or modification of this file may result in a locked operating system.</p>

Joseph at 00:29, 1 June 2012

2012-06-01T00:29:18Z

Joseph at 02:59, 29 May 2012

2012-05-29T02:59:40Z

Show changes

← Older revision		Revision as of 11:29, 1 June 2012
Line 34:		Line 34:
	[[Image:uniotpcp img04.jpg\|370px]]		[[Image:uniotpcp img04.jpg\|370px]]

	<p>6. '''Important:''' It is strongly advised that a user account is added for this machine at this point. A new user account must be created before exiting this tool. If a functioning user account is not configured and added on the computer, users will '''not''' be able to log into the machine. Uninstall the UniOTP Windows Logon Agent immediately if any unresolvable errors appear in the following steps.</p>		<p>6. '''Important:''' It is strongly advised that a user account is added for this machine at this point. A new user account must be created before exiting this tool. If a functioning user account is not configured and added on the computer, users will '''not''' be able to log into the machine. '''Uninstall the UniOTP Windows Logon Agent immediately if any unresolvable errors appear in the following steps.'''</p>

	[[Image:uniotpcp img05.jpg\|370px]]		[[Image:uniotpcp img05.jpg\|370px]]

	<p>7. In the "UniOTPManager" window, click [Add] to add a UniOTP account.</p>		<p>7. In the "UniOTPManager" window, click [Add] to add a UniOTP account to be authenticated with on the computer.</p>

	[[Image:uniotpcp img06.jpg\|370px]]		[[Image:uniotpcp img06.jpg\|370px]]
Line 44:		Line 44:
	<p>8. Under the "Add Account" window, in the fields: "Account", input a valid UniOTP account name; "Auth Server", input the IP address of the UniOTP authentication server; "Port", input the service port of the above server (default is 1812); "Share", input the shared key (used by the UniOTP authentication server); and "Max Wait Time", input the number of seconds the computer should wait for the server response.</p>		<p>8. Under the "Add Account" window, in the fields: "Account", input a valid UniOTP account name; "Auth Server", input the IP address of the UniOTP authentication server; "Port", input the service port of the above server (default is 1812); "Share", input the shared key (used by the UniOTP authentication server); and "Max Wait Time", input the number of seconds the computer should wait for the server response.</p>

	<p>9. After the account has been added, and any other additional modifications made, ~~the~~ [Apply] button must be clicked to submit and apply user information.</p>		<p>9. After the account has been added, and any other additional modifications made, click [Apply]. The [Apply] button must be clicked to submit and apply user information.</p>
	[[Image:uniotpcp img07.jpg\|370px]]		[[Image:uniotpcp img07.jpg\|370px]]

Line 50:		Line 50:
	[[Image:uniotpcp img08.jpg\|370px]]		[[Image:uniotpcp img08.jpg\|370px]]

	<p>11. After successfully installing the UniOTP Windows Authentication Agent and adding a new user, performing a logon can be tested. Choose a user in the account list then click [Test] to perform an authentication test.</p>		<p>11. After successfully installing the UniOTP Windows Authentication Agent and adding a new user, performing a two-factor user logon can be tested to ensure all processes are functioning correctly. Choose a user in the account list then click [Test] to perform an authentication test.</p>
	[[Image:uniotpcp img09.jpg\|370px]]		[[Image:uniotpcp img09.jpg\|370px]]

	<p>12. Input the OTP password generated from the corresponding OTP ~~deivce~~ (If the authentication method is set to OTP+PIN, input the PIN directly after the OTP password in the same field), then click [OK]. If the password entered is correct, the following dialog will be displayed.		<p>12. Input the OTP password generated from the corresponding OTP device (If the authentication method is set to OTP+PIN, input the PIN directly after the OTP password in the same field), then click [OK]. If the password entered is correct, the following dialog will be displayed.
	</p>		</p>
	[[Image:uniotpcp img10.jpg\|370px]]		[[Image:uniotpcp img10.jpg\|370px]]
Line 59:		Line 59:
	<p>If the entered password is incorrect, the following dialog will be displayed instead.</p>		<p>If the entered password is incorrect, the following dialog will be displayed instead.</p>
	[[Image:uniotpcp img11.jpg\|370px]]		[[Image:uniotpcp img11.jpg\|370px]]
	<!--J-->		<!--Check-->
	<p>13. There will be a popup note shows that the implementation for UniOTP dynamic password authentication is succeeded , Otherwise you need to find the error by referring to the prompted note (please don't reboot , shutdown, lock screen, etc during the operation), until successfully pass the authentication test (If the error can't be resolved, please uninstall the UniOTP Windows Logon Agent Immediately).</p>		<p>13. There will be a popup note shows that the implementation for UniOTP dynamic password authentication is succeeded , Otherwise you need to find the error by referring to the prompted note (please don't reboot , shutdown, lock screen, etc during the operation), until successfully pass the authentication test (If the error can't be resolved, please uninstall the UniOTP Windows Logon Agent Immediately).</p>

	<p>14. ~~Once~~ the ~~implementation succeeded~~, ~~you can restart or lock~~ the ~~computer to begin experiencing the security provided by~~ UniOTP dynamic password authentication. ~~See below~~ the ~~logon screen when~~ the computer ~~is locked~~. ~~Below you can see the screenshot of~~ the ~~locked screen~~.</p>		<p>14. After verifying the two-factor authentication test completed successful, the user account is now secured with UniOTP's dynamic password authentication. All user accounts identified with UniOTP require the corresponding OTP to successfully authenticate onto the computer. To add additional users, repeat the above steps from step 7.</p>
			<!--EndCheck--->
			== Usage ==

	[[Image:uniotpcp img12.jpg\|370px]]		[[Image:uniotpcp img12.jpg\|370px]]