Defender Desktop Login GrIDsure Token User Guide

Transcription

1 Desktop Login GrIDsure Token User Guide Introduction This guide describes what the user will see when using Desktop Login with GrIDsure tokens. The logon procedure will vary slightly depending on the platform you are using, either Windows XP, Windows Vista, Windows 7, Windows 2003, Windows 2008 or Windows 2008 R2. Examples are provided below. For information on how to configure the Policy and program the GrIDsure token, please refer to the guide entitled - Configuring for Use with GrIDsure Tokens. Using a GrIDsure Token with Windows 7, Windows Vista, Windows 2008 and 2008 R2 First Authentication 1. At the logon screen enter your Windows user name, ensure that the Passcode field is empty and then press return or click. 1

2 2. As this is the first authentication, you need to register the GrIDsure token. You will be prompted for your Active Directory (Windows) password. Click OK. 2

3 3. Enter your Windows password and click 4. When you are prompted to Configure your GrIDsure PIP, click OK. to continue. 3

4 5. The GrIDsure grid associated with your token is displayed allowing you to create your Personal Identification Pattern (PIP). Select squares within the grid and then enter the letters contained in the squares, without spaces, in the Configure your GrIDsure PIP: box. For example, a pattern or PIP such as BOABBFAO would create a pattern using the top left square and then the first 3 squares from row 2. Click to continue. 6. You are prompted to Use your GrIDsure PIP. Click OK. 3. To authenticate, enter the digits on the grid that correspond to your Personal Identification Pattern (PIP), then click to continue. Based on the example above of using the top left square and then the first 3 squares from row 2 the PIP would be If the authentication is successful, you are logged on to the required domain. 4

5 Subsequent Authentications with a GrIDsure Token Now that you have registered your GrIDsure token and completed the first successful authentication, you can authenticate subsequently as described below: 1. Leave the Passcode field empty and click 2. When prompted to Use your GrIDsure PIP:, click OK. to continue. 5

6 3. Using the grid, enter the digits that correspond to your Personal Identification Pattern (PIP), then click to continue. 4. If authentication is successful, you are logged on to the required domain. 6

7 Using a GrIDsure Token for Authentication on Windows XP First Authentication 1. From the Logon to Windows dialog, enter your Windows user name and the domain that you want to logon to. The Passcode field must be empty. Click OK. 2. As this is the first authentication, you need to register the GrIDsure token. You will be prompted for your Active Directory (Windows) password. Click OK. 3. Enter your password in the Response field and click OK. 7

8 4. The GrIDsure grid associated with your token will displayed allowing you to create your Personal Identification Pattern (PIP), select squares within the grid and then enter the letters contained in the squares, without spaces, in the Response field. 8

9 For example, a pattern or PIP such as BACBAGAK would create a pattern using the top left square and then the first 3 squares from row To authenticate, enter the digits on the grid that correspond to your Personal Identification Pattern (PIP) in the Response field then click OK to continue. Based on the example above of using the top left square and then the first 3 squares from row 2 the PIP would be If the authentication is successful, you are logged on to the required domain. 9

10 Subsequent Authentications with a GrIDsure Token Now that you have completed your first successful authentication with your GrIDsure token, you can authenticate subsequently as described below. 1. From the Log On to Windows dialog, enter your Windows user name and domain. Leave the Passcode field empty and click OK. 2. To authenticate, enter the digits on the grid that correspond to your Personal Identification Pattern (PIP) in the Response field, then click OK to continue. 3. If authentication is successful, you are logged on to the required domain. 10

11 What if I have another Token? Windows 7 Platform This section describes what to do if you have another token, in addition to your GrIDsure token. When you have registered your GrIDsure token, you can then have a second token assigned to you. if you have more than one token, the logon procedure is as follows: In this example, the user has a GrIDsure token and a synchronous token (e.g. Go-3) assigned to his account. To use the synchronous token, simply enter the token response, from the Go-3 in this example, into the Passcode field. To use the GrIDsure token, enter the digits on the grid that correspond to your PIP. 11

12 Windows XP Platform This section describes what to do if you have another token, in addition to your GrIDsure token. When you have registered your GrIDsure token, you can then have a second token assigned to you. If you have more than one token, the logon procedure is as follows. In this example, the user has a GrIDsure token and a synchronous token (e.g. Go-3) assigned to his account. To use the synchronous token, simply enter the token response, from the Go-3 in this example, into the Passcode field. If you leave the Passcode field empty and click OK, the following prompt is displayed: 12

13 4. Either enter your synchronous token response, from the Go-3 token in this example, in the Response field or select Use GrIDsure to display the GrIDsure grid and authenticate with your PIP. TRADEMARKS Quest, Quest Software, the Quest Software logo and itoken are trademarks and registered trademarks of Quest Software, Inc. in the United States of America and other countries. Gridsure and the Gridsure logos are trademarks and registered trademarks of Gridlock TS Limited. All other trademarks and registered trademarks are property of their respective owners. 13