RSA Authentication Manager 6.1 Administrator's Guide - The Ether ...

RSA Authentication Manager 6.1 Administrator’s GuideChoosing Authentication MethodsThe security administrator for each realm decides which administrator authenticationmethods to allow in the realm.The kinds of tokens or passwords that can be used for authentication of remoteadministrators are set in the System Parameters dialog box within the DatabaseAdministration application.Although any token or password type may be selected, RSA Security recommendsthat administrators use hardware tokens because these are most secure. The hardwaretokens in this category are the RSA SecurID PINPad, standard card, and key fob.Authentication ChallengesRemote administrators go through the same authentication process as other users. Theonly difference is in the screens they see. Therefore, if you are already familiar withauthentication, you can omit the following instructions.The instructions in the following section, “Normal Logon and Passcode Challenges,”assume that you are using either an RSA SecurID standard card or key fob. If you areusing a PINPad, when you are asked for a passcode (except at the beginning of theNew PIN procedure):1. Enter your PIN in the PINPad, and press the diamond near the bottom of the card.2. At the keyboard, enter the tokencode displayed by the token, and click OK.Normal Logon and Passcode ChallengesUsually, you see only one authentication dialog box with two challenges in it. If yourtoken is in New PIN mode, go to “Authenticating When Your Token Is in New PINMode” on page 44.To authenticate:1. Click Start > Programs > RSA Security > RSA Authentication ManagerRemote Mode.The Select Server to Administer dialog box opens.2. Select the server you want to administer, and click OK.The Administrator Authentication dialog box opens.3. Enter your user name in the Login field and your passcode in the passcode field.The passcode is your PIN followed by the tokencode displayed on the token.4. Click OK.If your passcode is accepted, the main menu for the Database Administrationapplication appears. The header shows the name of the Primary on which thedatabase resides.If you are prompted for the Next Tokencode, see the following section,“Authenticating When Your Token Is in Next Tokencode Mode.”2: Using RSA Authentication Manager Administration Applications 43