RSA Authentication Manager 6.1 Administrator's Guide - The Ether ...

RSA Authentication Manager 6.1 Administrator’s GuideQuick AdminWith the RSA Authentication Manager Quick Admin application, a Help Deskadministrator can use a web browser to view and modify user, token, and extensionrecord data in the RSA Authentication Manager database. For more information, see“Web-Based Administration with Quick Admin” on page 46.Audit Log Messages in the Event LogYou can specify that certain audit log messages be written to the Event Log, based onselection criteria such as current logon, user name, affected token, Agent Host name,and Authentication Manager name. For more information, see “MonitoringAuthentication Manager Events in the System Log” on page 170.Customer-Defined Extension RecordsThe database records that define elements of your RSA Authentication Managersystem—tokens, users, groups, Agent Hosts, logs—can be augmented with extensionrecords that include any additional information you want to specify. For example, youmight create a record for a user’s home telephone or badge number. For moreinformation, see “Maintaining Customer-Defined Data (Extension Records)” onpage 100.Introduction to the Database Administration ApplicationThe Database Administration application enables you to perform administrative tasks,such as adding and editing users, Agent Hosts, realms, sites and groups; enablingoffline, domain, and terminal services authentication, and login password integration;and generating reports regarding RSA Authentication Manager activity. Theapplication runs in host mode (on Windows only) or remote mode.Note: On UNIX platforms, while with the sdadmin program you can access many ofthe features of the RSA Authentication Manager software, Remote Administrationprovides a graphical user interface for administering an RSA Authentication Managerdatabase and provides the only supported method of accessing all of the administrativefeatures. For more information, see “Remote Administration” on page 40.In host mode, the Database Administration application must be run on the Primarybecause it needs a direct connection to the RSA Authentication Manager database. Inremote mode, the application can be run on a Windows 2000, Windows XP, andWindows 2003 machines through the Remote Administration service. The applicationhandles multiple sessions by locking records that are in use, so that they cannot bechanged from more than one session.Before you can administer the database remotely, you must perform certain tasksdirectly on the Primary. For information, see the Installation Guide for your platform.For more information and for instructions on running the Database Administrationapplication remotely, see “Remote Administration” on page 40.36 2: Using RSA Authentication Manager Administration Applications