CommandCenter Secure Gateway - Admin Guide - Version ... - Raritan

Appendix G Two-Factor Authentication
CC-SG can be configured to point to an RSA RADIUS Server that
supports two-factor authentication via an associated RSA Authentication
Manager. CC-SG acts as a RADIUS client and sends user authentication
requests to RSA RADIUS Server. The authentication request includes
user id, a fixed password, and a dynamic token code.
In This Chapter
Supported Environments for Two-Factor Authentication ......................304
Two-Factor Authentication Setup Requirements...................................304
Two-Factor Authentication Known Issues .............................................304
Supported Environments for Two-Factor Authentication
The following two-factor authentication components are known to work
with CC-SG.
• RSA RADIUS Server 6.1 on Windows Server 2003
• RSA Authentication Manager 6.1 on Windows Server 2003
• RSA Secure ID SID700 hardware token
Earlier RSA product versions should also work with CC-SG, but they have
not been verified.
Two-Factor Authentication Setup Requirements
The following tasks must be completed for two-factor authentication setup.
Consult the RSA documentation.
1. Import tokens.
2. Create a CC-SG user and assign a token to the user.
3. Generate a user password.
4. Create an agent host for the RADIUS server.
5. Create an agent host (type: Communication Server) for CC-SG.
6. Create a RADIUS CC-SG client.
Two-Factor Authentication Known Issues
The RSA RADIUS “New PIN” mode that requires a challenge
password/PIN will not work. Instead, all users in this scheme must be
assigned fixed passwords.
304