RSA Authentication Manager 7.1 Installation and Configuration Guide

RSA Authentication Manager 7.1 Installation and Configuration Guide
Supported RSA Authentication Agents
You install RSA Authentication Agents on the resources that you want to protect, such
as local computers, terminal servers, and web servers.
Authentication agents receive authentication requests and forward them to
Authentication Manager through a secure channel. Based on the response from
Authentication Manager, agents either allow the user to log on or deny the user access.
To download compatible Authentication Agents from the Authentication Agent
software page, go to https://www.rsa.com/node.aspid=1174.
Licensing
Before you install Authentication Manager, make sure that you have a valid
Authentication Manager license close at hand. RSA provides the license files
separately from your RSA Authentication Manager 7.1 DVD or download kit.
The license allows you access to certain functionality and limits the number of users
that can be registered. The license file is accompanied by a server key and certificate
that are used to verify (authenticate) the identity of the server.
Maintaining Accurate System Time Settings
RSA Authentication Manager relies on standard time settings known as Coordinated
Universal Time (UTC). The time, date, and time zone settings on computers running
Authentication Manager must always be correct in relation to UTC.
Make sure that the time on the computer on which you are installing Authentication
Manager is set to the local time and corresponds to the UTC. For example, if UTC is
11:43 a.m. and Authentication Manager is installed on a computer in the Eastern
Standard Time Zone in the United States, make sure that the computer clock is set to
6:43 a.m. This differs during Daylight Saving Time.
To get the correct UTC in the United States, go to www.time.gov or the national time
service provided in your country.
Synchronizing Clocks
RSA requires that all Authentication Manager instances and standalone RADIUS
servers have their time synchronized to the same NTP server. In the absence of a
reliable external time source, Authentication Manager will make a best effort attempt
to synchronize the clock on each instance. Even with these controls, time drift may
still exceed acceptable levels. Having a different time on several Authentication
Manager instances can result in authentication failures and problematic replication
behavior.
Note: If you use VMware, you must link the host to an NTP server and the guest OS
to the same NTP server.
1: Preparing for Installation 19