RSA Authentication Manager 7.1 Administrator's Guide - IT Services ...

More documents

Recommendations

Info

RSA Authentication Manager 7.1 Administrator’s Guide Appendix F: RSA Authentication Manager Message IDs .................. 361 Audit Log Messages........................................................................................................ 361 System Log Messages..................................................................................................... 363 RSA Authentication Manager Administrative Audit Log Messages.............................. 373 RSA Authentication Manager Runtime Audit Log Messages ........................................ 380 RSA Authentication Manager System Log Messages .................................................... 382 Appendix G: Troubleshooting ............................................................................ 391 Common Problems and Resolutions ............................................................................... 391 General Troubleshooting Tips ........................................................................................ 400 Using the Activity Monitor and Log Messages for Troubleshooting...................... 400 Making Sure the RSA Authentication Manager Machine Meets Minimum System Requirements........................................................................... 407 Supported Browsers..................................................................................................411 Configuring Browser Settings for the RSA Security Console, RSA Operations Console, and RSA Self-Service Console ...............................................................411 Assessing the Impact of Firewalls on RSA Authentication Manager ..................... 412 Configuring the Cache for Improved Performance ................................................. 415 Test User Access to Restricted Agent...................................................................... 415 User and Token-Related Resolutions.............................................................................. 416 Unlocking a User ..................................................................................................... 416 Assisting Users with Lost, Stolen, Damaged or Expired Tokens............................ 416 Providing Emergency Access .................................................................................. 417 Clearing PINs........................................................................................................... 417 Forcing PIN Changes............................................................................................... 417 Clearing Incorrect Passcodes ................................................................................... 417 Resynchronizing a Token ........................................................................................ 418 System-Related Resolutions ........................................................................................... 418 RSA Authentication Manager Does Not Start......................................................... 418 RSA Security Console Does Not Start .................................................................... 419 RSA Authentication Manager Microsoft Management Console Snap-in Does Not Start....................................................................................................... 419 RSA Security Console Times Out When Searching for Users................................ 419 Name and IP Address Resolution in RSA Authentication Manager ....................... 420 Managing the Node Secret....................................................................................... 421 Resynchronizing RSA Authentication Manager with Coordinated Universal Time................................................................................. 421 Updating an Agent Configuration File .................................................................... 422 Reconfiguring CT-KIP After Promoting a Replica Instance................................... 422 Changing the IP Address or Hostname of a Server ................................................. 423 Glossary ........................................................................................................................... 425 Index ................................................................................................................................... 445 Contents 11
RSA Authentication Manager 7.1 Administrator’s Guide 3 Protecting Network Resources with RSA SecurID • Overview of RSA SecurID Authentication • Installing Authentication Agent Software on the Resource You Want to Protect • Creating an RSA Agent Record Using the RSA Security Console • Creating and Installing the RSA Authentication Manager Configuration File • Specifying Where Agents Send Authentication Requests • Using Authentication Agents to Restrict User Access • Deploying Tokens to Users • Delivering Tokencodes Using Text Message or E-mail • Preventing and Handling User Authentication Problems Overview of RSA SecurID Authentication When a user successfully authenticates through RSA Authentication Manager, he or she is able to access a resource, a VPN server for example, that is protected by Authentication Manager. Authentication Manager uses authentication agents to protect network resources. Authentication agents must be installed on each machine that you want to protect with Authentication Manager and RSA SecurID. You can either install an agent manually or use hardware that comes with preinstalled authentication agents. Authentication agents are software applications that securely pass authentication requests to and from Authentication Manager. When a user attempts to gain access to a network resource, the agent receives the authentication request and submits it to Authentication Manager. The Authentication Manager then approves or denies the request, prompting the agent to allow or deny access to the user. The following figure shows the flow of SecurID authentication: User A (with VPN client) "May I Enter?" RSA SecurID Token VPN Server with Agent "Is This User A?" "Enter." "Yes" Authentication Manager 3: Protecting Network Resources with RSA SecurID 65
Page 1 and 2: RSA Authentication Manager 7.1 Admi
Page 5: RSA Authentication Manager 7.1 Admi
Page 35 and 36: Replacing Tokens RSA Authentication
Page 37 and 38: Resynchronizing Tokens RSA Authenti
Page 43 and 44: Using the Activity Monitor RSA Auth
Page 51 and 52: Resynchronizing a Token RSA Authent
Page 57 and 58:
RSA Authentication Manager 7.1 Admi
Page 59 and 60:
Page 61 and 62:
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
Page 69 and 70:
show all

RSA Authentication Manager 7.1 Administrator's Guide - IT Services ...

Create successful ePaper yourself

Delete template?

Save as template?