Digipass Plug-In for IAS Product Guide - Vasco

Digipass Plug-In for IAS Product Guide Digipass
Response Check Digit
Whether a check digit may be expected with each OTP from the Digipass Application. This is
generated from the response and allows for faster invalidation of incorrect OTPs.
2.2.4.3 Server PIN
The term 'Server PIN' is used to mean a PIN that the user enters into the login password field
in front of the OTP displayed on the Digipass. It is checked by the authenticating server. The
'Digipass PIN' referred to earlier indicates a PIN entered into a keypad on the Digipass. That is
checked by the device itself, and is never transmitted to the server.
There are a number of Server settings regulating Server PINs:
PIN Supported
Whether a PIN must be included in a User's login.
PIN Change On
Is a User allowed to change their Server PIN for this Digipass?
Force PIN Change
Must the User change their Server PIN the next time they log in?
PIN Length
The length of the current Server PIN.
PIN Minimum Length
The minimum PIN length required by the Server.
2.2.4.4 Backup Virtual Digipass
Policy and Digipass settings
Several settings dictate how a User may utilize the Backup Virtual Digipass feature. These
settings are:
Enable or disable Backup Virtual Digipass and enable method (eg. Required).
Time limit/expiry (applies to Time Limited enable only)
Maximum number of times a User may make use of the Backup Virtual Digipass.
The above settings may be set both at the Policy level and at the Digipass record level.
Individual settings override Policy settings for an individual Digipass, but some Policy settings
(see below) may be used to automatically set Digipass settings which are blank when the
Backup Virtual Digipass is first utilized by the User.
Time Limit and Max. Uses/User
Server Setting User Setting
Time Limit Enabled Until
Max. Uses/User Uses Remaining
Table 2: Backup Virtual Digipass Policy/Digipass Settings
© 2005 VASCO Data Security Inc. 28