UniOTP GINA Agent: Difference between revisions

From SecuTech Wiki
Jump to navigationJump to search
← Older edit

Bao (talk | contribs)

0 edits
No edit summary
Bao (talk | contribs)
0 edits
mNo edit summary
 
(2 intermediate revisions by 2 users not shown)
Line 1: Line 1:
<!--Check
Broken Image links
http://www.esecutech.com/wiki/index.php?limit=50&ilsearch=gina&user=&title=Special%3AListFiles
Relevant SDK files-->
[[Category:UniOTP_Tools]]
[[Category:UniOTP_Tools]]


<p>This document mainly introduces how to use and install UniOTP Windows logon Agent, this document is aimed at end users that want to use UniOTP dynamic password authentication to perform system logon.</p>
This document details how to install and use the UniOTP Windows Logon Agent, intended for end users who want to use UniOTP authentication to log onto their system. The UniOTP Windows Logon Agent is used to integrate the UniOTP dynamic password authentication system with Windows. There are two versions of the UniOTP Windows Agent: GINA (Windows 2000, XP); and Credential Provider (Windows Vista, 7, Windows Server 2008). Both use two different Windows login architecture models. This document covers the installation and usage of the GINA agent.
<p>UniOTP Windows logon agent is used to integrate Windows logon and UniOTP dynamic password authentication. There are 2 versions of UniOTP Windows Agent: GINA version (XP, Windows 2000) and Credential Provider version (Vista, Windows 7, Windows 2008), used for 2 different kinds of Windows logon architecture models. This document mainly introduces installation and usage of GINAversion agent.</p>


== Implementation procedure ==
== Installation ==


==== Preparation ====
==== Preparation ====
<p>Before implementing UniOTP Windows logon protection, please check the following elements.</p>
* The UniOTP authentication server is already installed and is running.
* The administrator has already created a valid account for the user who will perform the implementation and configured correctly the bind with the corresponding token.


==== UniOTP Windows logon agent implementation ====
Before implementing the UniOTP Windows Logon Agent, please verify the following requirements:
* The UniOTP authentication server is already configured and running.
* The administrator has and is already using an active account for the agent on the server
* The aforementioned account has been bound to the UniOTP device used.


<p>1. Once you got UniOTP Windows distributable package in hands, find the installation file “setup.exe” inside the package and double-click it to launch the installation process.</p>
==== UniOTP Windows Logon Agent implementation ====


[[Image:uniotpgina img01.jpg|370px]]
1. Once the UniOTP Windows Distributable Package has been downloaded, locate and execute the installation file "setup.exe" to launch the installation process.


<p>2. Select “Next” to go the next screen. On that next screen, fill in username and company name. The installation program will use the company name as folder name for the installation.</p>
[[Image:GINA img01.jpg|370px|alt=locating setup executable]]


[[Image:uniotpgina img02.jpg|370px]]
2. Click on Next in the InstallShield Wizard welcome screen.


<p>3. Click consecutively on “Next” until you get to the screen below. On this screen, click on “Finish” to complete the installation.</p>
[[Image:GINA img02.jpg|370px|alt=Install Wizard screen]]


[[Image:uniotpgina img03.jpg|370px]]
3. Input your User Name and Company Name and click on Next.


<p>4. When the installation finishes, UniOTP User management tool will start automatically.</p>
[[Image:GINA img03.jpg|370px|alt=input user and company name]]


[[Image:uniotpgina img04.jpg|370px]]
4. Select Complete and click on Next.


<p>Now that you have finished UniOTP WinLogon Agent installation, you now need to add a UniOTP account. If you try to close this tool without adding an account, you will get the following error message.</p>
[[Image:GINA img04.jpg|370px|alt=finished WinLogon installation]]


[[Image:uniotpgina img05.jpg|370px]]
Now that you have finished UniOTP WinLogon Agent installation, you now need to add a UniOTP account. If you try to close this tool without adding an account, you will get the following error message.


<p>5. Click the “Add” button in order to add an account for this computer.</p>
[[Image:GINA img05.jpg|370px|alt=error message for not adding an account]]


[[Image:uniotpgina img06.jpg|370px]]
5. Click the Add button in order to add an account for this computer.


<p>Type in a valid UniOTP account name and the dynamic password displayed by UniOTP at this time (If you chose OTP+PIN as authentication method, you need to input the static PIN just after the dynamic password in this same field). Check that server address and port are correct and click on “OK”.</p>
[[Image:GINA img06.jpg|370px|alt=adding new user account]]


<p>If for a certain reason, you failed to add the account, the following message will appear:</p>
Type in a valid UniOTP account name and the dynamic password displayed by UniOTP at this time (If you chose OTP+PIN as your authentication method, you need to input the static PIN just after the dynamic password in this same field). Check that the server address and port are correct and click on OK. If for a certain reason, you failed to add the account, the following message will appear:


[[Image:uniotpgina img07.jpg|370px]]
[[Image:GINA img07.jpg|370px|alt=failure message]]


<p>If the account was added successfully, you will get the following message (In order to enable the account, don’t forget to click on the “Apply” button)</p>
If the account was added successfully, you will get the following message (In order to enable the account, don’t forget to click on the Apply button).


[[Image:uniotpgina img08.jpg|370px]]
[[Image:GINA img08.jpg|370px|alt=success message]]


<p>6. When you finish adding a UniOTP user for this computer, restart the computer and enjoy the dynamic password authentication experience provided by UniOTP.</p>
6. When you finish adding a UniOTP user for this computer, restart the computer and enjoy the dynamic password authentication experience provided by UniOTP.


==== UniOTP Dynamic Password Authentication Experience ====
==== UniOTP Dynamic Password Authentication Experience ====


<p>Once the installation completed, let’s restart the computer and try to log on.</p>
Once the installation has been completed, restart the computer and try to log on.


<p>1. After restarting, the first thing we see is the usual logon screen.</p>
1. After restarting, the first thing we see is the usual login screen.


[[Image:uniotpgina img09.jpg|370px]]
[[Image:GINA img09.jpg|370px|alt=user login window]]


<p>2. After entering username and password and pass Windows authentication, we also need to pass UniOTP authentication.</p>
2. After entering username, password and Windows authentication, we also need to provide UniOTP authentication.


[[Image:uniotpgina img10.jpg|370px]]
[[Image:GINA img10.jpg|370px]]


<p>3. Let’s fill in the username and dynamic password (depending on your settings OTP or OTP+PIN) for the account added in UniOTP management tool and you’ll be able to access the operating system. If username is wrong, you’ll get the following message. If the password is wrong, you’ll be redirected to the Windows Logon screen.</p>
3. Let’s fill in the username and dynamic password (depending on your settings OTP or OTP+PIN) for the account added in UniOTP management tool and you’ll be able to access the operating system. If username is wrong, you’ll get the following message. If the password is wrong, you’ll be redirected to the Windows Login screen.


[[Image:uniotpgina img11.jpg|370px]]
[[Image:GINA img11.jpg|370px]]


<p>In safe mode, as the computer uses the local backup of user data to perform the user dynamic authentication, and that often the data stored locally are not synchronized with the server, the dynamic password authentication will cost a very long time in safe mode. We don’t recommend using Safe mode when UniOTP authentication is installed on the computer. The picture below is the UniOTP dynamic password authentication screenshot in safe mode.</p>
In safe mode, as the computer uses the local backup of user data to perform the user dynamic authentication, and often the data stored locally is not synchronized with the server, the dynamic password authentication will take a very long time in safe mode. We don’t recommend using safe mode when UniOTP authentication is installed on the computer. The picture below is the UniOTP dynamic password authentication screenshot in safe mode.


[[Image:uniotpgina img12.jpg|370px]]
[[Image:GINA img12.jpg|370px]]


[[Image:uniotpgina img13.jpg|370px]]
[[Image:GINA img13.jpg|370px]]


== Important points ==
== Important points ==


<p>1. When you finish installing UniOTP Windows Authentication Agent, if you cannot pass the authentication test, uninstall the software immediately to avoid being unable to log on the operating system and all the inconvenience it will cause.</p>
# When you finish installing UniOTP Windows Authentication Agent, if you cannot pass the authentication test, uninstall the software immediately to avoid being unable to log onto the operating system and the inconvenience brought with it.
<p>2. If you failed to authenticate many times consecutively, please wait 10 minutes before attempting to authenticate again, if you still cannot authenticate for a long time, you need to ask an administrator to repair your device.</p>
# If failing to authenticate consecutively, please wait 10 minutes before attempting to authenticate again, if you still cannot authenticate, you need to ask an administrator to repair your device.
<p>3. In safe mode, UniOTP Authentication usually takes a very long time.</p>
# In safe mode, UniOTP Authentication usually takes a very long time.

Latest revision as of 11:32, 16 August 2016


This document details how to install and use the UniOTP Windows Logon Agent, intended for end users who want to use UniOTP authentication to log onto their system. The UniOTP Windows Logon Agent is used to integrate the UniOTP dynamic password authentication system with Windows. There are two versions of the UniOTP Windows Agent: GINA (Windows 2000, XP); and Credential Provider (Windows Vista, 7, Windows Server 2008). Both use two different Windows login architecture models. This document covers the installation and usage of the GINA agent.

Installation

Preparation

Before implementing the UniOTP Windows Logon Agent, please verify the following requirements:

  • The UniOTP authentication server is already configured and running.
  • The administrator has and is already using an active account for the agent on the server
  • The aforementioned account has been bound to the UniOTP device used.

UniOTP Windows Logon Agent implementation

1. Once the UniOTP Windows Distributable Package has been downloaded, locate and execute the installation file "setup.exe" to launch the installation process.

locating setup executable

2. Click on Next in the InstallShield Wizard welcome screen.

Install Wizard screen

3. Input your User Name and Company Name and click on Next.

input user and company name

4. Select Complete and click on Next.

finished WinLogon installation

Now that you have finished UniOTP WinLogon Agent installation, you now need to add a UniOTP account. If you try to close this tool without adding an account, you will get the following error message.

error message for not adding an account

5. Click the Add button in order to add an account for this computer.

adding new user account

Type in a valid UniOTP account name and the dynamic password displayed by UniOTP at this time (If you chose OTP+PIN as your authentication method, you need to input the static PIN just after the dynamic password in this same field). Check that the server address and port are correct and click on OK. If for a certain reason, you failed to add the account, the following message will appear:

failure message

If the account was added successfully, you will get the following message (In order to enable the account, don’t forget to click on the Apply button).

success message

6. When you finish adding a UniOTP user for this computer, restart the computer and enjoy the dynamic password authentication experience provided by UniOTP.

UniOTP Dynamic Password Authentication Experience

Once the installation has been completed, restart the computer and try to log on.

1. After restarting, the first thing we see is the usual login screen.

user login window

2. After entering username, password and Windows authentication, we also need to provide UniOTP authentication.

File:GINA img10.jpg

3. Let’s fill in the username and dynamic password (depending on your settings OTP or OTP+PIN) for the account added in UniOTP management tool and you’ll be able to access the operating system. If username is wrong, you’ll get the following message. If the password is wrong, you’ll be redirected to the Windows Login screen.

File:GINA img11.jpg

In safe mode, as the computer uses the local backup of user data to perform the user dynamic authentication, and often the data stored locally is not synchronized with the server, the dynamic password authentication will take a very long time in safe mode. We don’t recommend using safe mode when UniOTP authentication is installed on the computer. The picture below is the UniOTP dynamic password authentication screenshot in safe mode.

File:GINA img12.jpg

File:GINA img13.jpg

Important points

  1. When you finish installing UniOTP Windows Authentication Agent, if you cannot pass the authentication test, uninstall the software immediately to avoid being unable to log onto the operating system and the inconvenience brought with it.
  2. If failing to authenticate consecutively, please wait 10 minutes before attempting to authenticate again, if you still cannot authenticate, you need to ask an administrator to repair your device.
  3. In safe mode, UniOTP Authentication usually takes a very long time.
Retrieved from "https://esecutech.com/wiki/index.php?title=UniOTP_GINA_Agent&oldid=1961"