UniOTP Credential Provider Agent

This document mainly introduces how to use and install UniOTP Windows logon Agent, this document is aimed at end users that want to use UniOTP dynamic password authentication to perform system logon.

UniOTP Windows logon agent is used to integrate Windows logon and UniOTP dynamic password authentication. There are 2 versions of UniOTP Windows Agent: GINA version (XP, Windows 2000) and Credential Provider version (Vista, Windows 7, Windows 2008), used for 2 different kinds of Windows logon architecture models. This document mainly introduces installation and usage of Credential Provider version agent.

Implementation procedure

Preparation

Before implementing UniOTP Windows logon agent, please verify the following elements:

• UniOTP authentication server is already correctly configured and is running.
• The administrator already added an active account for the agent on the server, and this account has been binded correctly to the UniOTP device you are using.

UniOTPWindows logon agent implementation

1. Once you got UniOTP Windows distributable package in hands, find the installation file “setup.exe” inside the package and double-click it to launch the installation process.

2. Installation process welcome screen (picture below)

3. Fill in your username and company name. (the program will be installed in the directory C:\Program Files\”name of the company”)

4. Choose “Complete” installation

5. Keep the default settings and finish the installation process. Once the installation completed, User management tool will open automatically. (see picture below)

6. As there is not any user account added for this machine, you need to use this tool to add a UniOTP account. (If there is no valid account added, it is not possible to close the tool normally)

7. Click the “Add” button to add a UniOTP account.

8. In the field “Account”, enter a valid UniOTP account name. In the field “Auth Server”, type the UniOTP authentication server address. In “Port”, enter the service port (default is 1812). In “Share”, enter the shared key (attributed by UniOTP authentication server). In “Max Wait time”, enter the longest waiting time for server response.

9. Once the account added, you need to click “Apply” to submit user information.

10. The dialog box below indicates that the user was added successfully.

11. By now, we already implemented successfully UniOTP Windows Authentication Agent. Now, we can choose a user in the list and click the button “Test” to perform UniOTP authentication test. (picture below)

12. Input OTP password (If the authentication method is set to OTP+PIN, input the PIN just after the OTP password in the same field), click the OK button, if the password is correct, the following dialog will be displayed.

If password is wrong:

13. There will be a prompt note shows that the implementation for UniOTP dynamic password authentication is succeeded , Otherwise you need to find the error by referring to the prompted note (please don't reboot , shutdown, lock screen, etc during the operation), until successfully pass the authentication test (If the error can't be solved , please uninstall the UniOTP windows logon agent immediately )

14. Once the implementation succeeded, you can restart or lock the computer to begin experiencing the security provided by UniOTP dynamic password authentication. See below the logon screen when the computer is locked. Below you can see the screenshot of the locked screen.

15. Choose a user to enter the logon interface.

16. In the password field, input your password used to log on the system. In the UniOTP Account drop-down list, choose your UniOTP account. In the OTP[PIN] password field, input your dynamic password (If the authentication method is set to OTP+PIN, input your dynamic password followed by your PIN in the field. )

Click on the arrow button to achieve the authentication.

If the OTP[PIN] password that you input is wrong, you will get the following error.

If the OTP[PIN] is right but the operating system password is wrong, you will get the following error.

By now, we succeeded in implementing UniOTP dynamic password authentication protection for this computer.

Important Points

1. When you finish installing UniOTP Windows Authentication Agent, if you cannot pass the authentication test, uninstall the software immediately to avoid being unable to log on the operating system and all the inconvenience it will cause.

2. If you failed to authenticate many times consecutively(if more than 5 times, ask an operator to check the configuration), please wait 10 minutes before attempting to authenticate again, if you still cannot authenticate for a long time, you need to ask an administrator to repair your device.

3. Please to try to modify or delete the SYSROOT\secuagt_cp.conf by yourself, this file is used as the configuration file for UniOTP Windows authentication agent, if this file is deleted or damaged, you might be unable to log on the operating system.