UniOTP Management System: Difference between revisions
No edit summary |
No edit summary |
||
| Line 52: | Line 52: | ||
== Add a User == | == Add a User == | ||
<p>From the administration interface, click on [Add User] from either under the [User Management] menu on the left or the [User Search] shortcut on the main panel.</p> | <p>From the administration interface, click on [Add User] from either under the [User Management] menu on the left or the [User Search] shortcut on the main panel.</p> | ||
[[Image:uniotpmgs img12.jpg|370px]] | [[Image:uniotpmgs img12.jpg|370px]] | ||
<p>In the "Add User" interface, fill in the corresponding fields (a unique) user name in [Username], (a unique) User ID in [UserID], contact number in [Tel], the serial ID of the corresponding UniOTP device for the user in [Serial], email address in [Email] | <p>In the "Add User" interface, fill in the corresponding fields (a unique) user name in [Username], (a unique) User ID in [UserID], contact number in [Tel], the serial ID of the corresponding UniOTP device for the user in [Serial], email address in [Email], the user PIN, and authentication method (The one-time password with the user PIN, OTP+PIN, authentication method is recommended for maximum security). | ||
<!--Check--> | |||
Username and system UserID can be used together to perform binding, the token serial number has to be a valid serial number.</p> | |||
[[Image:uniotpmgs img13.jpg|370px]] | [[Image:uniotpmgs img13.jpg|370px]] | ||
<p>If | <p>If an invalid token serial number is entered, the error message below will appear.</p> | ||
[[Image:uniotpmgs img14.jpg|370px]] | [[Image:uniotpmgs img14.jpg|370px]] | ||
<p> | <p>After inputting valid user information, click [Submit].</p> | ||
[[Image:uniotpmgs img15.jpg|370px]] | [[Image:uniotpmgs img15.jpg|370px]] | ||
<p> | <p>The below notification will appear if the user was added successfully.</p> | ||
[[Image:uniotpmgs img16.jpg|370px]] | [[Image:uniotpmgs img16.jpg|370px]] | ||
== User | == Change User State == | ||
<p> | <p>From the administration interface, click on [Add User] from either under the [User Management] menu on the left or the [User Search] shortcut on the main panel.</p> | ||
[[Image:uniotpmgs img17.jpg|370px]] | [[Image:uniotpmgs img17.jpg|370px]] | ||
<p> | <p>Under the Change User State interface, functions such as flagging a token as lost/stolen, unflagging lost/stolen tokens and permanently removing tokens can be performed. Functions are performed on users based on the user's User ID.</p> | ||
[[Image:uniotpmgs img18.jpg|370px]] | [[Image:uniotpmgs img18.jpg|370px]] | ||
== | == Resynchronize Token == | ||
<p> | <p>Under certain circumstances, a token may desynchronize with the server. In this case, the token must be resynchronized with the server to be able to authenticate with it. This can be done from the [Token Reparation] interface.</p> | ||
<p>From the administration interface, click on [Token Reparation] from either under the [User Management] menu on the left or the [Token Reparation] shortcut on the main panel.</p> | |||
[[Image:uniotpmgs img19.jpg|370px]] | [[Image:uniotpmgs img19.jpg|370px]] | ||
<p> | <p>To resynchronize the token, the User ID of the user whom the token is assigned under and the token itself is needed.</p> | ||
<p>Input the User ID in [UserID]. Afterwards, generate a one-time password from the token device, then input the generated OTP in [First OTP]. Generate a second OTP immediately after the previously generated OTP, and input the generated OTP in [Second OTP]. Two consecutive one-time passwords are needed in order for the the server and the token to be synchronized. When done, click [Submit].</p> | |||
[[Image:uniotpmgs img20.jpg|370px]] | [[Image:uniotpmgs img20.jpg|370px]] | ||
<p> | <p>The below message will appear when synchronization is successful.</p> | ||
[[Image:uniotpmgs img21.jpg|370px]] | [[Image:uniotpmgs img21.jpg|370px]] | ||
<p>If the two | <p>If the two generated one-time passwords are not consecutive with one another, or if the generated OTPs exceeds a certain generation range, synchronization with fail, and an error message similar to below will appear.</p> | ||
[[Image:uniotpmgs img22.jpg|370px]] | [[Image:uniotpmgs img22.jpg|370px]] | ||
== Add | == Add Operator == | ||
<p>Under the Add Operator interface, new operators can be added into the system. The user to be added should not be one with a higher privilege level than the operator privilege level, otherwise the operation will be denied.</p> | |||
<p> | <p>From the administration interface, click on [Add Operator] from either under the [Operator Management] menu on the left or the [Add Operator] shortcut on the main panel.</p> | ||
[[Image:uniotpmgs img23.jpg|370px]] | [[Image:uniotpmgs img23.jpg|370px]] | ||
<p> | <p>In the "Add Operator" interface, input the [Name], [Password] and [Confirm] password, and select the privilege level in the [Level] list, then click [Submit].</p> | ||
[[Image:uniotpmgs img24.jpg|370px]] | [[Image:uniotpmgs img24.jpg|370px]] | ||
<p>If the operation | <p>If the operation is successful, the following message will be returned. The Operator ID of newly added operator will be displayed.</p> | ||
[[Image:uniotpmgs img25.jpg|370px]] | [[Image:uniotpmgs img25.jpg|370px]] | ||
<p>If | <p>If the privileges of the new user is higher than the operator level or that of the current user, the following error message will appear.</p> | ||
[[Image:uniotpmgs img26.jpg|370px]] | [[Image:uniotpmgs img26.jpg|370px]] | ||
== Delete | == Delete Operator == | ||
<p> | <p>The Delete Operator interface provides removal of an operator from the database. An operator can only be deleted if the privilege level of the current user is higher the the privilege level of the operator to be deleted.</p> | ||
<p>From the administration interface, click on [Delete Operator] from either under the [Operator Management] menu on the left or the [Delete Operator] shortcut on the main panel.</p> | |||
[[Image:uniotpmgs img27.jpg|370px]] | [[Image:uniotpmgs img27.jpg|370px]] | ||
<!--Check--> | |||
<p>An operator(s) can be removed in one of two methods: An individual operator account can be deleted by Operator ID; multiple operator accounts can be deleted by a range of Operator IDs, specifying the beginning Operator ID under [Begin ID] and ending Operator ID range under [EndID]. All operators in this specified range, inclusive, will be deleted.</p> | |||
<p> | <p>Input the corresponding data into either forms, then click [Submit] or [Execute]. | ||
[[Image:uniotpmgs img28.jpg|370px]] | [[Image:uniotpmgs img28.jpg|370px]] | ||
<p>If | <p>If the current user does not possess sufficient privileges to delete the specified or affected operator, the following error message will be returned.</p> | ||
[[Image:uniotpmgs img29.jpg|370px]] | [[Image:uniotpmgs img29.jpg|370px]] | ||
<p>If | <p>If deletion was successful, the following message will be displayed.</p> | ||
[[Image:uniotpmgs img30.jpg|370px]] | [[Image:uniotpmgs img30.jpg|370px]] | ||
== Operator | == Search Operator == | ||
<p> | <p>Under the Operator Search interface, information concerning operators can be searched and viewed.</p> | ||
<p>From the administration interface, click on [Operator Search] from either under the [Operator Management] menu on the left or the [Operator Search] shortcut on the main panel.</p> | |||
[[Image:uniotpmgs img31.jpg|370px]] | [[Image:uniotpmgs img31.jpg|370px]] | ||
<!--J--> | |||
<p>You can indicate the operator ID to search for information concerning this operator, or you can also indicate a specific range of operators to search for all operators that have privilege level inferior to the current operator.</p> | <p>You can indicate the operator ID to search for information concerning this operator, or you can also indicate a specific range of operators to search for all operators that have privilege level inferior to the current operator.</p> | ||
Revision as of 12:17, 5 June 2012
Introduction
The UniOTP Management System is a web-based management system. Administration and maintenance operations concerning dynamic password system configuration such as user information, token information, operator information, log information and so forth can be performed with this system.
The system employs different levels of privileges for compartmentalization of information and tasks.
Operator Login
On the login page of the UniOTP Management System, input the Operator ID in the [OperatorID] field and enter the corresponding password in the [Password] field. Click [Submit] to log in.
The default Operator ID for the Super Operator is "1000000001" with the corresponding default password "123456", both without quotation marks.
If Operator login was successful, the administration interface will be accessible on the main page, otherwise an error message will appear if login credentials are incorrect.
From the administration interface, actions to perform can be chosen from the menu on the left or from the shortcut icons in the main panel.
Logout
To logout of the system, click [Exit System] located on the top-right of the window, as shown in the screenshot above. For security purposes, please always use this method to log out ofthe system.
Change Password
From the administration interface, click on [Change Password] from either under the [Operator Management] menu on the left or the [Change Password] shortcut on the main panel.
In the "Change Password" interface, input the current password in the [Old Password] field, and enter the new password in both the [New Password] and [Confirm] fields, enter the new password. Click [Submit] to apply changes.
A message will appear indicating if the password change was successful or unsuccessful.
Search User
From the administration interface, click on [User Search] from either under the [User Management] menu on the left or the [User Search] shortcut on the main panel.
Users can be searched by either User ID or Username. Fill either field then click [Search].
For example, if searching User ID "US20110127002", without quotation marks, a .
If you enter "t" in the Username field, you will see information about all users whose username contains a [t], you can choose the user you want to manage, modify or delete the user or his information.
Add a User
From the administration interface, click on [Add User] from either under the [User Management] menu on the left or the [User Search] shortcut on the main panel.
In the "Add User" interface, fill in the corresponding fields (a unique) user name in [Username], (a unique) User ID in [UserID], contact number in [Tel], the serial ID of the corresponding UniOTP device for the user in [Serial], email address in [Email], the user PIN, and authentication method (The one-time password with the user PIN, OTP+PIN, authentication method is recommended for maximum security). Username and system UserID can be used together to perform binding, the token serial number has to be a valid serial number.
If an invalid token serial number is entered, the error message below will appear.
After inputting valid user information, click [Submit].
The below notification will appear if the user was added successfully.
Change User State
From the administration interface, click on [Add User] from either under the [User Management] menu on the left or the [User Search] shortcut on the main panel.
Under the Change User State interface, functions such as flagging a token as lost/stolen, unflagging lost/stolen tokens and permanently removing tokens can be performed. Functions are performed on users based on the user's User ID.
Resynchronize Token
Under certain circumstances, a token may desynchronize with the server. In this case, the token must be resynchronized with the server to be able to authenticate with it. This can be done from the [Token Reparation] interface.
From the administration interface, click on [Token Reparation] from either under the [User Management] menu on the left or the [Token Reparation] shortcut on the main panel.
To resynchronize the token, the User ID of the user whom the token is assigned under and the token itself is needed.
Input the User ID in [UserID]. Afterwards, generate a one-time password from the token device, then input the generated OTP in [First OTP]. Generate a second OTP immediately after the previously generated OTP, and input the generated OTP in [Second OTP]. Two consecutive one-time passwords are needed in order for the the server and the token to be synchronized. When done, click [Submit].
The below message will appear when synchronization is successful.
If the two generated one-time passwords are not consecutive with one another, or if the generated OTPs exceeds a certain generation range, synchronization with fail, and an error message similar to below will appear.
Add Operator
Under the Add Operator interface, new operators can be added into the system. The user to be added should not be one with a higher privilege level than the operator privilege level, otherwise the operation will be denied.
From the administration interface, click on [Add Operator] from either under the [Operator Management] menu on the left or the [Add Operator] shortcut on the main panel.
In the "Add Operator" interface, input the [Name], [Password] and [Confirm] password, and select the privilege level in the [Level] list, then click [Submit].
If the operation is successful, the following message will be returned. The Operator ID of newly added operator will be displayed.
If the privileges of the new user is higher than the operator level or that of the current user, the following error message will appear.
Delete Operator
The Delete Operator interface provides removal of an operator from the database. An operator can only be deleted if the privilege level of the current user is higher the the privilege level of the operator to be deleted.
From the administration interface, click on [Delete Operator] from either under the [Operator Management] menu on the left or the [Delete Operator] shortcut on the main panel.
An operator(s) can be removed in one of two methods: An individual operator account can be deleted by Operator ID; multiple operator accounts can be deleted by a range of Operator IDs, specifying the beginning Operator ID under [Begin ID] and ending Operator ID range under [EndID]. All operators in this specified range, inclusive, will be deleted.
Input the corresponding data into either forms, then click [Submit] or [Execute].
If the current user does not possess sufficient privileges to delete the specified or affected operator, the following error message will be returned.
If deletion was successful, the following message will be displayed.
Search Operator
Under the Operator Search interface, information concerning operators can be searched and viewed.
From the administration interface, click on [Operator Search] from either under the [Operator Management] menu on the left or the [Operator Search] shortcut on the main panel.
You can indicate the operator ID to search for information concerning this operator, or you can also indicate a specific range of operators to search for all operators that have privilege level inferior to the current operator.
For example, if you enter 1000000001 for the operatorID and click [Submit], information about the operator having for ID [1000000001]( As 1000000001 stands for Super OperatorID, you need to be super operator to be able to see this information). You can use the icon in front of the operator ID to delete the operator, of course, if your privilege level is lower than the user you want to delete, the operation will not succeed.
Search for operator ID in a specific range:
Token/User batch import
Token/User batch import interface allows the service provider to import many tokens information at once inside the database, it also can import many users bound to a token at once inside the database. Refer to the picture below to enter the corresponding interface.
In order to import Token files, you need to provide decryption keys for those files, there is no decryption key function for user import. The extension for token files and user information files is [.unif].
If there is an error with the secret key error or if the file is corrupted, the following message will be displayed.
the token file part will successfully prompt an error information for the error token , there is no line in front of the failure of the token serial number corresponding to the record, you can export the information to the service provider to determine the cause of the error (duplicate import should be excluded due to errors)
If token import succeeds, a message will be displayed specifying the number of token imported
In the case user import has failed, the following error message, containing the details about the concerned users, will be displayed.
Log information search
Log information search feature provides a log search, which includes everyday’s operations logs and users’ authentication logs. Refer to the icon pointed in the picture below to enter the log information search interface.
In the log information interface, the [LogDomain] field is used to choose the type of logs, Syslos for everyday’s tasks logs, Commonlog for user authentication logs. In the QueryMode field you can choose logs for a specific operator, once you have specified an operator, the logs information displayed are only for the specified operator (If you specify username, the authentication logs information for this user only will be displayed.)
If you select the [Specific Operator] query mode, you have to fill in the [OperatorID] field, if you don’t, the operation will fail.
In the two fields [BeginData] and ]EndData] you can set the dates (from when to when) for the logs, click [submit] to search.
The logs from a certain period will look like below:
If no corresponding result has been found:
Logs export
Export logs information to a file.
Set the dates in the two fields BeginDate and EndDate, in the LogDomain field, choose the logs type. In the compress field, choose the type of compression you want to use. Click Submit to backup the selected logs.
Clear logs
Before clearing all logs, we recommend to make a logs backup.
When clearing logs succeeds, the following message will be displayed.
Database backup
The database backup feature is used to restore all the needed information.
In the [Backup Mode] choose the backup mode. You can choose to backup the whole database, including the tables structure and the data contained inside (You can specify which data you want to backup from the [Log Backup] field). You can also choose to backup only the table structure. In this case, the data contained inside the database will not be backed up.
Statistics
You can see temporal and spatial repartition, make statistics, analyze about authentication strength repartition and operation repartition.
Once you entered the statistics page, In the [Load Analysis] part, you can perform load statistics. In Operation statistics, you can perform operation statistics. You can choose a scale for these two parts (Year or month). In [Display Mode] field, you can choose the display method, there are three kinds: histograms, line charts, pie charts.
The picture below shows the histogram of operation type analyze.
System information
Click the home icon in the left menu to show system information and system configuration page this page displays system information and the current settings list.
System configuration
Using the system configuration page you can change system settings. Click [Config Database] to configure the database.
Once you’ve entered the database settings page, you can change database settings such as database host, database name, port, login username, login password. You can also test the connection to the database, after you submitted it, a new configuration file will be created.
