UniOTP GINA Agent: Difference between revisions

From SecuTech Wiki
Jump to navigationJump to search
No edit summary
Joseph (talk | contribs)
No edit summary
Line 1: Line 1:
<!--Check
Broken Image links
http://www.esecutech.com/wiki/index.php?limit=50&ilsearch=gina&user=&title=Special%3AListFiles
Relevant SDK files-->
[[Category:UniOTP_Tools]]
[[Category:UniOTP_Tools]]


<p>This document mainly introduces how to use and install UniOTP Windows logon Agent, this document is aimed at end users that want to use UniOTP dynamic password authentication to perform system logon.</p>
<p>This document details how to install and use the UniOTP Windows Logon Agent, intended for end users who want to use UniOTP authentication to log onto their system.</p>
<p>UniOTP Windows logon agent is used to integrate Windows logon and UniOTP dynamic password authentication. There are 2 versions of UniOTP Windows Agent: GINA version (XP, Windows 2000) and Credential Provider version (Vista, Windows 7, Windows 2008), used for 2 different kinds of Windows logon architecture models. This document mainly introduces installation and usage of GINAversion agent.</p>
<p>The UniOTP Windows Logon Agent is used to integrate the UniOTP dynamic password authentication system with Windows. There are two versions of the UniOTP Windows Agent: GINA (Windows 2000, XP); and Credential Provider (Windows Vista, 7, Windows Server 2008). Both use two different Windows logon architecture models. This document covers the installation and usage of the GINA agent.</p>


== Implementation procedure ==
== Installation ==


==== Preparation ====
==== Preparation ====
<p>Before implementing UniOTP Windows logon protection, please check the following elements.</p>
* The UniOTP authentication server is already installed and is running.
* The administrator has already created a valid account for the user who will perform the implementation and configured correctly the bind with the corresponding token.


==== UniOTP Windows logon agent implementation ====
<p>Before implementing the UniOTP Windows Logon Agent, please verify the following requirements:</p>
* The UniOTP authentication server is already configured and running.
* The administrator has and is already using an active account for the agent on the server
* The aforementioned account has been bound to the UniOTP device used.


<p>1. Once you got UniOTP Windows distributable package in hands, find the installation file “setup.exe” inside the package and double-click it to launch the installation process.</p>
==== UniOTP Windows Logon Agent implementation ====


[[Image:uniotpgina img01.jpg|370px]]
<p>1. Once the UniOTP Windows Distributable Package has been downloaded, locate and execute the installation file "setup.exe" to launch the installation process.</p>


<p>2. Select “Next” to go the next screen. On that next screen, fill in username and company name. The installation program will use the company name as folder name for the installation.</p>
[[Image:GINA img01.jpg|370px]]


[[Image:uniotpgina img02.jpg|370px]]
<p>2. Click on [Next] in the InstallShield Wizard welcome screen.</p>


<p>3. Click consecutively on “Next” until you get to the screen below. On this screen, click on “Finish” to complete the installation.</p>
[[Image:GINA img02.jpg|370px]]
 
<p>3. Input your User Name and Company Name and click on [Next].</p>


[[Image:uniotpgina img03.jpg|370px]]
[[Image:uniotpgina img03.jpg|370px]]


<p>4. When the installation finishes, UniOTP User management tool will start automatically.</p>
<p>4. Select [Complete] and click on [Next].</p>


[[Image:uniotpgina img04.jpg|370px]]
[[Image:uniotpgina img04.jpg|370px]]

Revision as of 12:46, 1 June 2012


This document details how to install and use the UniOTP Windows Logon Agent, intended for end users who want to use UniOTP authentication to log onto their system.

The UniOTP Windows Logon Agent is used to integrate the UniOTP dynamic password authentication system with Windows. There are two versions of the UniOTP Windows Agent: GINA (Windows 2000, XP); and Credential Provider (Windows Vista, 7, Windows Server 2008). Both use two different Windows logon architecture models. This document covers the installation and usage of the GINA agent.

Installation

Preparation

Before implementing the UniOTP Windows Logon Agent, please verify the following requirements:

  • The UniOTP authentication server is already configured and running.
  • The administrator has and is already using an active account for the agent on the server
  • The aforementioned account has been bound to the UniOTP device used.

UniOTP Windows Logon Agent implementation

1. Once the UniOTP Windows Distributable Package has been downloaded, locate and execute the installation file "setup.exe" to launch the installation process.

2. Click on [Next] in the InstallShield Wizard welcome screen.

3. Input your User Name and Company Name and click on [Next].

File:Uniotpgina img03.jpg

4. Select [Complete] and click on [Next].

File:Uniotpgina img04.jpg

Now that you have finished UniOTP WinLogon Agent installation, you now need to add a UniOTP account. If you try to close this tool without adding an account, you will get the following error message.

File:Uniotpgina img05.jpg

5. Click the “Add” button in order to add an account for this computer.

File:Uniotpgina img06.jpg

Type in a valid UniOTP account name and the dynamic password displayed by UniOTP at this time (If you chose OTP+PIN as authentication method, you need to input the static PIN just after the dynamic password in this same field). Check that server address and port are correct and click on “OK”.

If for a certain reason, you failed to add the account, the following message will appear:

File:Uniotpgina img07.jpg

If the account was added successfully, you will get the following message (In order to enable the account, don’t forget to click on the “Apply” button)

6. When you finish adding a UniOTP user for this computer, restart the computer and enjoy the dynamic password authentication experience provided by UniOTP.

UniOTP Dynamic Password Authentication Experience

Once the installation completed, let’s restart the computer and try to log on.

1. After restarting, the first thing we see is the usual logon screen.

File:Uniotpgina img09.jpg

2. After entering username and password and pass Windows authentication, we also need to pass UniOTP authentication.

File:Uniotpgina img10.jpg

3. Let’s fill in the username and dynamic password (depending on your settings OTP or OTP+PIN) for the account added in UniOTP management tool and you’ll be able to access the operating system. If username is wrong, you’ll get the following message. If the password is wrong, you’ll be redirected to the Windows Logon screen.

File:Uniotpgina img11.jpg

In safe mode, as the computer uses the local backup of user data to perform the user dynamic authentication, and that often the data stored locally are not synchronized with the server, the dynamic password authentication will cost a very long time in safe mode. We don’t recommend using Safe mode when UniOTP authentication is installed on the computer. The picture below is the UniOTP dynamic password authentication screenshot in safe mode.

File:Uniotpgina img12.jpg

File:Uniotpgina img13.jpg

Important points

1. When you finish installing UniOTP Windows Authentication Agent, if you cannot pass the authentication test, uninstall the software immediately to avoid being unable to log on the operating system and all the inconvenience it will cause.

2. If you failed to authenticate many times consecutively, please wait 10 minutes before attempting to authenticate again, if you still cannot authenticate for a long time, you need to ask an administrator to repair your device.

3. In safe mode, UniOTP Authentication usually takes a very long time.