DualShield. Self-Service Console. Administration Guide. Copyright 2011 Deepnet Security Limited

Transcription

1 DualShield Administration Guide Copyright 2011 Deepnet Security Limited Copyright 2011, Deepnet Security. All Rights Reserved. Page 1

2 Trademarks Deepnet Unified Authentication, MobileID, QuickID, PocketID, SafeID, GridID, FlashID, SmartID, TypeSense, VoiceSense, MobilePass, DevicePass, RemotePass and Site Stamp are trademarks of Deepnet Security Limited. All other brand names and product names are trademarks or registered trademarks of their respective owners. Copyrights Under the international copyright law, neither the Deepnet Security software or documentation may be copied, reproduced, translated or reduced to any electronic medium or machine readable form, in whole or in part, without the prior written consent of Deepnet Security. Licence Conditions Please read your licence agreement with Deepnet carefully and make sure you understand the exact terms of usage. In particular, for which projects, on which platforms and at which sites, you are allowed to use the product. You are not allowed to make any modifications to the product. If you feel the need for any modifications, please contact Deepnet Security. Disclaimer This document is provided as is without warranty of any kind, either expressed or implied, including, but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement. This document could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the document. Deepnet Security may make improvements of and/or changes to the product described in this document at any time. Contact If you wish to obtain further information on this product or any other Deepnet Security products, you are always welcome to contact us. Deepnet Security Limited Northway House 1379 High Road London N20 9LP United Kingdom Tel: +44(0) Fax: +44(0) Web: support@deepnetsecurity.com Copyright 2011, Deepnet Security. All Rights Reserved. Page 2

3 Table of Contents Introduction... 4 Installation... 4 Configuration... 4 Creating Realm... 4 Creating Logon Procedure... 5 Creating Logon Steps... 6 Assigning Logon Procedure...10 Customisation Copyright 2011, Deepnet Security. All Rights Reserved. Page 3

4 Introduction The DualShield platform includes a that enables end users to request a variety of services, including requesting for replacement of lost or damaged tokens and issuing on-demand tokens for emergency access. The self-service console can dramatically reduce the call volume into the IT help desk because users are empowered to manage all aspects of their token lifecycles. Installation The DualShield is designed to run as a server application on its own. However, the DualShield installation program always installs a copy of the Self- Service Console as a service in the platform in the same place where DualShield authentication server and management console are installed. The default installed by the DualShield installation program is accessible by the URL below: http(s)://dualshield-server-domain-name:8076/dss where, - dualshield-server-domain-name is the domain name of your DualShield server is the default port of the It is possible for you to install a separate, standalone depending on your requirements and infrastructure. Configuration After the installation, you must configure the by defining its realm. A realm is a collection of domains that contain users who will be allowed to access the. You will also need to create a logon procedure for the Self-Service Console that defines how users must authenticate to the in order to gain access to the console. Creating Realm Assuming that you have already created one or more user domains that will be placed in the realm of the, 1. Select Authentication Realm in the main menu: 2. Click the context menu of the : Copyright 2011, Deepnet Security. All Rights Reserved. Page 4

5 3. Select Domains in the context menu: 4. Select the domains you wish to assign to the realm: 4. Click Save button: You have now defined the realm of the. Next, you will create a logon procedure of the : Creating Logon Procedure 1. Select Authentication Logon Procedure Copyright 2011, Deepnet Security. All Rights Reserved. Page 5

6 2. Click Create button in the toolbar 3. Enter Name and Description, and select Web SSO in the Type list: 4. Click Save button: You have now created the logon procedure of the. Next, you will define logon steps for the logon procedure. Creating Logon Steps 1. Click the context menu icon of the logon procedure: Copyright 2011, Deepnet Security. All Rights Reserved. Page 6

7 2. Select Logon Steps in the context menu: 3. Click Create button on the toolbar: Copyright 2011, Deepnet Security. All Rights Reserved. Page 7

8 4. Select the authenticators the users will be allowed to use: You can create as many steps as you wish. As an example, we are creating 3 logon steps: Copyright 2011, Deepnet Security. All Rights Reserved. Page 8

9 Step 2 Step 3 Copyright 2011, Deepnet Security. All Rights Reserved. Page 9

10 We have created 3 logon steps: Step 1: a number of tokens Step 2: Site Stamp Step 3: Static Password Finally, you need to assign the logon procedure that you have just created to the application. Assigning Logon Procedure 1. Click the context menu of the logon procedure: 2. Select Application in the context menu: Copyright 2011, Deepnet Security. All Rights Reserved. Page 10

11 3. Select in the list, and click Save button: The is now fully configured. Copyright 2011, Deepnet Security. All Rights Reserved. Page 11

12 Customisation In the, there are two pages that you can customise, the Home and Help page. Home Page Help Page Both the Home and Help pages are HTML pages, located in the folder below: C:\Program Files\Deepnet DualShield\tomcat\dssapp\dss\custom Copyright 2011, Deepnet Security. All Rights Reserved. Page 12

13 To customise them, simply edit the contents of these files. Copyright 2011, Deepnet Security. All Rights Reserved. Page 13

14 Copyright 2011, Deepnet Security. All Rights Reserved. Page 14