Network Identity Manager with SN-Gina Outlook Web Access

Transcription

1 1 System requirements NIM.exe Installation Packages Nim_setup.exe Installation on the Domain Controller SAVERNOVA GINA.dll installation gina_setup.exe Manually installation of SAVERNOVA GINA SNGINA.msi Remote deployment of SAVERNOVA GINA.dll GPO or Logon script owa_setup.exe One Time Password for Steps after Installation of Network ID Manager on DC Using Network ID Manager Import new cards Create a new security group Print cards Apply user to a security group... 9

2 1 System requirements Network ID Manager is an Authentication Software for Windows Domain Networks based on One Time Password. MS SQL Express and dot NET Framework installed on your Domain controller. Server: Windows Domain Networks Platform: Windows Server 2000/2003/SBS NET-Framework: Microsoft.Net Framework 2.0 Database: MS SQL Express Domain Controller: AD active Client (Windows Log on Screen for every Workstation or Computer, belongs to the Domain) Platform: Windows 2000pro / XPpro / 2000server /2003server Protection for 1. Microsoft IIS from version 6 2. Exchange Server 2000 / ASP NET-Framework 2.0 1

3 2 NIM.exe Installation Packages After extracting the NIM.exe file you will find the following Files for installation. Nim_setup.exe gina_setup.exe SNGINA.msi sn_gina.reg owa_setup.exe 2.1 Nim_setup.exe Installation on the Domain Controller Nim_setup.exe: this is the server side installation pack for the administration tool of the Network ID Manager. It has to be installed on one Domain controller in your Network. This hosts the Savernova Service, which you will find after Installation in the Windows Services, the Administrator Console and the certificates for the SSL Connection for server client communication. 1. Please make sure that SQL EXPRESS and.net 2.0 is installed on your Domain Controller. 2. Run the Nim_setup.exe on your domain controller. 3. Select your preferred language in which the rest of the installation will be and accept with ok. 4. To continue the installation accept the license and click Next >. 5. If you would like to have another installation path than the destined, please select another where to install the NIM. Press Install to continue the installation. 6. During the installation you can see the state of it and which files are already copied. 7. The NIM installer automatically installs the SAVERNOVA service, which is needed to update and manage the passwords on the domain controller. This you can see when a console window opens and writes also the state of the installation. You will find him later in the MMC Services. 8. After creating the service on the computer the installation is completed and you can let start the Network Identity Manager immediately by clicking Finish. 2

4 2.2 SAVERNOVA GINA.dll installation gina_setup.exe, SNGINA.msi and sn_gina.reg. This file contains the SAVERNOVA GINA.dll, which replaces the Windows default Login screen on your client Computers gina_setup.exe Manually installation of SAVERNOVA GINA gina_setup.exe: Use this installer, if you do a manually installation on the client computers. For the installation, you need Admin rights. During installation Setup will ask you for the Domain controller which hosts the Savernova Service SNGINA.msi Remote deployment of SAVERNOVA GINA.dll GPO or Logon script SNGINA.msi and sn_gina.reg: If you want to deploy the SAVERNOVA GINA.dll automatically in you network, via GPO or Login Script, you need to use SNGINA.msi. Please add this package to the Software installation in the Group policy. Then edit key the sn_gina.reg file: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "GinaDLL"="C:\\Program Files\\SAVERNOVA\\GINA\\sngina.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Savernova] "server"="servername" "port"=dword: Please replace SERVERNAME with the name of the server where the SAVERNOVA Service is installed. Then you can put it to the login script or ADM File. The Clients need to be restarted after both ways of installation, to have the SAVERNOVA Login is active. 3

5 2.3 owa_setup.exe One Time Password for owa_setup.exe (optional) This is needed, if you want use One Time Password for of your Exchange Server. This tool needs to be installed on the Exchange Server in your Network and need a connection to the Server holds the Savernova Service. 1. Double-click on the server on the icon of owa_setup.exe to start the installation of the OWA. 2. Select your language which you would like to have during the installation process. Confirm with Ok. 3. Choose your folder where to install the OWA. If you want to change the destined folder you can chose your directory by Browse. Click Next when you agree with the destination folder. 4. On the next screen you have to specify the IP or domain of the server where the Outlook Web Access can connect to the internet. Continue the installation with Next. 5. The OWA needs access to the password service which was installed with the NIM. In this step indicate the IP-address or the name of the server on which the NIM is installed. Continue with Next. 6. For the Domain you can chose to which domain the users can login. Finish the installation with Install. 7. When the installation dialogs are closed finish the installation by Close. 4

6 3 Steps after Installation of Network ID Manager on DC 1. The first time when you run the Network Identity Manager you have to make some necessary settings. The integrated wizard from the Network Identity Manager will help you with this. 2. Firstly there is a database needed. There is also the destination of the database which has to be given by the name of the server with the SQL-database. When you have the NIM installed on the same server as the database is you can write localhost. Important: Use the net-bios name. 3. When the NIM knows where its database is it creates the tables in it. Here only click Next to continue. 4. The wizard also confirms the password policies settings of the Active Directory. We suggest to follow our recommendations by using Network ID Manager. 5. The next step installs the SSL-Certificate which the NIM needs communicates with the service. This is done also automatically and you have only to click Next to finish the wizard. 6. During the initialization of the Network Identity Manager you can see the starting panel of it. 7. You have successfully set up your Network Identity Manager. 5

7 4 Using Network ID Manager 4.1 Import new cards When you use the NIM the first time you need to import the cards into your system. The.snc file will provided to with the license. In the test version you are able to use Test-5-20.snc. Without the card you cannot use the NIM. 1. To import new cards go to the menu point Cards in the left menu. 2. The button Import cards opens you the file dialog in which you can chose your cards to import. For this you have to go in the folder where your card-file is and then you click Open. 3. Please confirm the changes also to the service by clicking Apply on the new dialog which opened. 4. Now you can see the new cards in your view. 6

8 4.2 Create a new security group The users which will use the Savernova-login have to be assigned with a security group in the Network Identity Manager. You can create more security groups for different security settings. 1. Switch to the point Security groups in the left menu. 2. Below of the program you click Add OTP and you have the possibility to fill all the important settings for this new group. 3. In the register General settings are some settings for you to remember which security group it is and for what. a. Name: Give a name to the security group. b. Description: A description of this security group. c. Color: This color is shown in the lists of the user. So you can recognize with one view to which group the user belong to. 4. The register Card settings is for general card settings. a. Max Logins: The card is for as many logins as in this field valid. After this amount of logins the user has to activate a new card. b. Card on screen: If this option is checked the users of this security group has the card on screen during the activation and for the logins. Note: Print the cards for the users which card on screen is not active. 5. Password settings are for the complexity of the passwords. a. Use secure code: When this option is checked the users of this security group have to use the secure code which is on every password card. b. Secure code position: If the user has to use the secure code you can decide if the secure code has to be applied in the front or at the end of the normal password from the reading method. 6. In the register Reading method settings you can decide with the option Disable sample reading methods if the user can choose one of the sample reading methods we always use in our animations and examples. 7. After set up the new security group click on Save changes and on the new opened dialog which asks to apply the changes also in the service Apply. 7

9 4.3 Print cards 1. To print a card, go to the point Cards in the left menu. 2. Chose the card or cards you would like to print. You can choose multiple cards by clicking <SHIFT> or <ALT>, depending on which selection you like to do. 3. Click the button Print cards... to open the wizard in which you can print the cards. 4. In the new dialog you can specify that you want to print the selected cards or the unprinted cards. 5. Chose the template you want to use. 6. When you need to change the format of the paper you can do this by clicking Print setup With Print preview... you can see the preview of a printed card how the printer will print it. 8. If you finished the settings you can print the cards by clicking Print. Then you have to chose your printer and then confirm with Ok. 8

10 4.4 Apply user to a security group 1. Change to the menu point Active Directory in the main menu. 2. In the list you see now the structure of the active directory. In this structure you can browser to the user you want to add to a security group. 3. Select in the right list all the users you want to apply on the same security group. 4. Right-click on a selected user and chose the first menu point Assign Security Group -> OTP -> your whished security group 5. After you assigned a security group a new window open in which you have apply the changes with the button Apply 6. After a security group is assigned, users have to activate on their next Login. 7. After a user activates a Card, you will see which Card ID is using and how many times a user logged in. 9