Note: only Software, BlackBerry and SMS tokens can be used with the ICE service.

Transcription

1 We are pleased that you have decided to move ahead with CRYPTO MAS ICE for your emergency protection authentication service. This document explains the simple steps that the CRYPTO MAS Administrator will need to go through to: A: Set up: get you and your company set up within CRYPTO MAS ICE, B: Test: conduct a dry run test, C: Go Live: activate ICE two factor authentication in the event of an emergency, and D: Suspend: discontinue ICE at the end of the emergency and place it back into ready mode. A: SET UP To use the following guide, you must first have your CRYPTO MAS account set up by your Service Provider. Your account will then have the following essential elements to help create your CRYPTO MAS ICE account: a) the Active Token Pool referred to in the instructions below. b) a MAS Administrator account for that token pool and accessed the MAS Authentication Portal (MAP), c) have verified that authentication works for your active account. 1 Submit MAS Registration Form for ICE Service The first step is for you to fill in the CRYPTO MAS Registration Form indicating in the checkbox provided that you are requesting the ICE service. We ask that you please complete the Form in its entirety making sure that the existing AuthNode details are correct. Send your token order and the completed Form to mas@cryptocard.com. Note: only Software, BlackBerry and SMS tokens can be used with the ICE service. The Registration Form can be obtained at: 2 ICE Registration Notice from CRYPTOCard Within one business day of submitting the MAS ICE Registration Form you will receive a Welcome confirming your company has been provided the CRYPTO MAS ICE Service as well as the details of the tokens you ordered. You will notice that a new ICE Token Pool has been created with a different AuthID from your current Active Token Pool (typically just with an ICE prefix). The purpose of the ICE Token Pool is to store frozen ICE tokens so they are at the ready in the event of an emergency. All the ICE tokens will already have been placed into that Token Pool as part of initial registration. Authentication is not possible from the ICE Token Pool. Later in this document we explain how they are activated. 3 Enter ICE Users into the Active Token Pool As part of the initial set up, you should register all your ICE user names into your Active Token Pool so they are also at the ready at the tie of an emergency. Go to the <USERS> tab in MAP and select the Active Token Pool by clicking on the appropriate AuthID in the column on the left side of the page. The AuthID name should now appear in the drop down panel below the SELECTED GROUP title. Click the Add button.

2 Fill in the User s information in the ADD USER INFORMATION panel. Required information fields are marked with red asterisks *. The user cannot be added until valid information has been entered into these fields. If SMS tokens are being used for you ICE service you will need to make sure that their mobile phone number details are entered correctly. Correct format is as follows: 447xxxxxxxxx: 44 is the country code; 7xxxxxxxxx is the cell number. Click the Save button. Repeat this process until all Users have been entered. You can use the Multiple User Import facility if you have a large number of Users to add. The MAP Admin Guide, Group Management Adding Groups section will tell you how to use this feature. If you are using the AD Sync Agent to input Users into your Active Token Pool you cannot add the ICE users to the CRYPTO MAS synchronization at this time. This can only be done at the time of the emergency after the tokens have been transferred to the Active Token Pool. The Go Live section below describes how this is done. In the meantime, you can prepare by establishing an ICE Group in your AD that is ready to be added to the existing CRYPTO MAS Sync Group at the time of the emergency. CRYPTO MAS is now fully configured and ready for Go Live in the event of an emergency. B: TEST We strongly recommend you conduct a dry run exercise within the first two weeks of the ICE tokens being supplied in order to verify your users are able to access the network using CRYPTO MAS ICE. You also need to decide at this point whether you distribute your tokens to your users, or

3 whether you wait until your emergency event. Your IT and Disaster Recovery policies will help you determine this. IMPORTANT: Prior to conducting this exercise we recommend you notify your Service Provider to avoid the test being mistaken as a real emergency activation and thus avoid being charged for use of the tokens. C: GO LIVE Transfer tokens into the Active Token Pool 1 At the time of an emergency you will simply transfer tokens from the ICE Token Pool to the Active Token Pool and assign the tokens to the ICE users for two factor authentication. Go to the <TOKEN> tab in MAP and select the ICE Token Pool by clicking on the appropriate AuthID in the column on the left side of the page. The AuthID name should now appear in the drop down panel below the SELECTED GROUP title. Highlight all the tokens to be transferred to the Active Token Pool for ICE users. All tokens must be in the Unassigned state. Click on the De Allocate button as shown below. This will automatically transfer all the highlighted tokens to the Active Token Pool. If you are using the AD Sync Agent to input Users into your Active Token Pool you now need to add the ICE users to the AD Group that you are synchronizing with CRYPTO MAS so they are included in the next synchronization cycle. IMPORTANT: This must be done after the ICE tokens have been transferred to the Active Token Pool so there is at least one token per user. Synchronisation will fail is there are insufficient tokens for all the users. Assign Tokens to Users 2 Now that you have allocated the tokens to the active token pool and imported the details of all your users, you now need to assign tokens to your users. Go to the <TOKEN> tab in MAP and select the Active Token Pool by clicking on the appear in the drop down panel below the SELECTED GROUP title. Select a Token from the token list appearing in the MANAGE TOKENS panel. Then select a User from the USERS list. Click the Assign To User button as shown below. Repeat this process until all Users have been assigned tokens.

4 D: SUSPEND ICE Users are now able to authenticate using CRYPTO MAS. Follow these steps once the emergency situation is over and there is no longer any need for ICE users to continue two factor authentication. After completing these steps, the Users and Tokens will have been restored back to their original reserve state ready to be re activated following the same steps above should another emergency occur. De Assign Tokes from ICE users 1 Go to the <TOKEN> tab in MAP and select the Active Token Pool by clicking on the appear in the drop down panel below the SELECTED GROUP title. Highlight the token(s) that you wish to de assign from the ICE user(s). Click the De Assign button. The highlighted tokens will have been de assigned from the users. Transfer tokens back into the ICE Token Pool 2 Select the <TOKEN> tab in MAP and select the Active Token Pool by clicking on the appear in the drop down panel below the SELECTED GROUP title. Highlight all the tokens to be transferred for ICE users. Select the name of the ICE Token Pool

5 from the list below the COMPANIES title (lower section of page), Click the Allocate to Company button as shown below. This will transfer all the highlighted tokens back into the ICE Token Pool. For CRYPTO MAS ICE Account Support For CRYPTO MAS ICE Technical Support * Business hours are Monday to Friday 9:00am to 10:00pm GMT