Security-enhanced SVPN Service Guide

Transcription

1 Security-enhanced SVPN Service Guide First Published: April30, 2014 Last Updated: August12, 2014 Contents 1. Introduction 1.1. Background of applying Security-enhancement on SVPN service 1.2. Detail of service change 2. On first login 2.1. PC designation 2.2. OTP Generator automatically installed 2.3. OTP Activation 3. Intranet connection 3.1. Issue the certificate 3.2. Login(Connecting to intranet) 4. Security initialization and Exception procedure 4.1. If you need permission 4.2. Permission procedure [Attachment 1] SVPN Website [Attachment 2] How to install OTP generator [Attachment 3] How to solve the OTP authentication failure 1

2 1. Introduction 1.1 Background of applying Security-enhancement on SVPN service It needs to apply security-enhancement on SVPN service to reduce information leakage. 1.2 Detail of service change Access restriction - It may access only the designated PC. Reinforcement of user authentication to access SVPN service. - Existing authentication (ID/PWD and Certification) + OTP Authentication More details in 3. Intranet connection procedure 2

3 2. On first login 2.1 PC registration Every single SVPN accounts may register only 1 designated PC in the SVPN authentication system. While users try to access SVPN service, the system checks the PC s mac addresses and if it is identified, the system will allow to access SVPN service. Mac address registration The system will get mac-addresses from all of the components in the designated PC. At least one mac-address matching will be fine to access SVPN service. How to register At the first connection, PC Information registers automatically. The process operates only one time below the three methods. You do not need to re-register after the initial one-time registration. 1) When you issue the Certificate 2) When you login to SVPN 3

4 3) When you login to checking user information in Customer support -> Cert, center -> OTP management Please login again after the "OK" button pressed in the window. 2.2 OTP Generator automatically installed For security-enhanced SVPN service, we add OTP authentication process. OTP generator will be installed automatically on first login. The Manual installation refer the [attachment2] 2.3 OTP Activation Issuing the OTP activate code is mandatory to activate OTP and to get OTP authentication. Step 1) Please click the OK button in the following window. 4

5 Step 2) Enter your ID/PW in checking user information, Click the OK button. Step 3) Click Issue the OTP Activation Code, and Click OK button. Step 4) Check the OTP Activation code through the . is private . It will revise to Customer Support Personal information. Step 5) Please check the OTP activation code. 5

6 Step 6) Run the Samsung OTP.. 1) Double-click the SamsungOTP icon on the desktop. 2) Start > All Programs > SamsungOTP > SamsungOTP Click <SamsungOTP Icon> < SamsungOTP of List of programs> Step 7) Enter the User ID / Activation Code / PIN in OTP Activation, and click OK button. You must remember the PIN number required when OTP creating. Step 8) Check the OK button. 6

7 3. Intranet Connection Procedure 3.1 Issue Certificate 2. If the PC designation and OTP Activation is completed Step 1) Click the Issue/Reissue Certificate Step 2) Enter the SVPN ID / Password / mysingle Password / Certificate password first, and then Click the Go to issue. If you don t have mysingle ID, Click the Go to issue after you enter the Q&A for the identification. 7

8 3.2 Login(Connecting to intranet) Step 1) Enter the SVPN ID / Password / Certificate Password / Location, then click the Login button Step 2) After login, Check the following pop-up window. Step 3) Run the Samsung OTP.. 1) Double-click the SamsungOTP icon on the desktop. 2) Start > All Programs > SamsungOTP > SamsungOTP Click <SamsungOTP Icon> < SamsungOTP of List of programs> 8

9 Step 4) Enter the PIN number in SAMSUNG SDS OTP System(generator), and then click the key button. PIN number is the number when you entered the code to activate OTP. Step 5) When the OTP number appears, Click the Copy button and Check the following window. Step 6) In OTP pop-up window, paste as Ctrl +V or type the code manually. Step 7) Click OK, and the intranet Connection will be completed. Click mysingle shortcut button. 9

10 4. Security initialization and Exception procedure 4.1 If you need permission 1) Initialization of registered PC When you want to change registered PC, you have to initialization. 2) Initialization of OTP generator When you forget the PIN number or want to change the PC, you have to initialization of OTP generator. 3) Exception of designated PC When you want to connect using multiple PC or have a problem of registered PC, It s possible to get exception approval. 4) Exception of Checking the Security S/W installation If you get the certain permission regarding the exception of installing security tools before, you may get exception approval. 5) Exception of OTP Authentication If you get the certain permission regarding the exception of OTP authentication, You may get exception approval. 4.2 Permission procedure Step 1) Go to SVPN Website. refer the [attachment1] Step 2) Go to the Customer Support > Support > Notice 10

11 Step 3) Click Notice tab, and then click [Notice] Notice for security exception Step 4) Click the link in the posting, and then download Step 5) Please fill out the application form and get the permission This progress is Get approval from your group leader >Get agreement from Samsung Security Center > Notice to SVPN admin. Go to the Customer support -> my account You can get the information regarding the manager of Samsung Security center, and SVPN administrator. Step 6) After the permission is complete, SVPN Administrator will process. 11

12 [Attachment 1] SVPN Website Location Korean User English User Korea America Eurasia China Singapore [Attachment 2] How to install OTP generator Step 1) Go to the SVPN Website refer the [attachment1] Step 2) Go to the Customer Support > Downloads Step 3) Click All programs, and then click [Samsung OTP_Setup program]. Step 4) Click the link in the posting, and then download. 12

13 Step 5) Click and install the setup program. [Attachment 3] How to solve the OTP authentication failure If the OTP authentication failure, you may fail to authenticate, enter the PIN number incorrectly in OTP generator. Please proceed solution for problem the following below. Step 1) Run the SAMSUNG OTP. Step 2) Click Change PIN as follows. 13

14 Step 3) Enter the User ID, PIN, NEW PIN and then press the OK button. Step 4) If the following window appears, you have entered an incorrect PIN number. Please obtain the OTP after enter the correct PIN number. Step 5) Run the OTP generator again and enter the correct PIN number. Step 6) Please login again. 14