UniOTP GINA Agent
This document mainly introduces how to use and install UniOTP Windows logon Agent, this document is aimed at end users that want to use UniOTP dynamic password authentication to perform system logon.
UniOTP Windows logon agent is used to integrate Windows logon and UniOTP dynamic password authentication. There are 2 versions of UniOTP Windows Agent: GINA version (XP, Windows 2000) and Credential Provider version (Vista, Windows 7, Windows 2008), used for 2 different kinds of Windows logon architecture models. This document mainly introduces installation and usage of GINAversion agent.
Implementation procedure
Preparation
Before implementing UniOTP Windows logon protection, please check the following elements.
- The UniOTP authentication server is already installed and is running.
- The administrator has already created a valid account for the user who will perform the implementation and configured correctly the bind with the corresponding token.
UniOTP Windows logon agent implementation
1. Once you got UniOTP Windows distributable package in hands, find the installation file “setup.exe” inside the package and double-click it to launch the installation process.
2. Select “Next” to go the next screen. On that next screen, fill in username and company name. The installation program will use the company name as folder name for the installation.
3. Click consecutively on “Next” until you get to the screen below. On this screen, click on “Finish” to complete the installation.
4. When the installation finishes, UniOTP User management tool will start automatically.
Now that you have finished UniOTP WinLogon Agent installation, you now need to add a UniOTP account. If you try to close this tool without adding an account, you will get the following error message.
5. Click the “Add” button in order to add an account for this computer.
Type in a valid UniOTP account name and the dynamic password displayed by UniOTP at this time (If you chose OTP+PIN as authentication method, you need to input the static PIN just after the dynamic password in this same field). Check that server address and port are correct and click on “OK”.
If for a certain reason, you failed to add the account, the following message will appear:
If the account was added successfully, you will get the following message (In order to enable the account, don’t forget to click on the “Apply” button)
6. When you finish adding a UniOTP user for this computer, restart the computer and enjoy the dynamic password authentication experience provided by UniOTP.
UniOTP Dynamic Password Authentication Experience
Once the installation completed, let’s restart the computer and try to log on.
1. After restarting, the first thing we see is the usual logon screen.
2. After entering username and password and pass Windows authentication, we also need to pass UniOTP authentication.
3. Let’s fill in the username and dynamic password (depending on your settings OTP or OTP+PIN) for the account added in UniOTP management tool and you’ll be able to access the operating system. If username is wrong, you’ll get the following message. If the password is wrong, you’ll be redirected to the Windows Logon screen.
In safe mode, as the computer uses the local backup of user data to perform the user dynamic authentication, and that often the data stored locally are not synchronized with the server, the dynamic password authentication will cost a very long time in safe mode. We don’t recommend using Safe mode when UniOTP authentication is installed on the computer. The picture below is the UniOTP dynamic password authentication screenshot in safe mode.
Important points
1. When you finish installing UniOTP Windows Authentication Agent, if you cannot pass the authentication test, uninstall the software immediately to avoid being unable to log on the operating system and all the inconvenience it will cause.
2. If you failed to authenticate many times consecutively, please wait 10 minutes before attempting to authenticate again, if you still cannot authenticate for a long time, you need to ask an administrator to repair your device.
3. In safe mode, UniOTP Authentication usually takes a very long time.
