aXsGUARD Identifier 3.0.2.0 Product Guide v1.5
DIGIPASS
These processes are described in section
. DIGIPASS self- and auto-assignment methods can also be
combined with
Dynamic User Registration
(see section
17.3.3
Searching for DIGIPASS Records
The Administration Web interface allows you to search for DIGIPASS records in a number of ways:
You can search directly for the DIGIPASS record by entering the DIGIPASS Serial Number
You can search for DIGIPASS records assigned to a User by searching for the User and then double clicking on
the DIGIPASS record on the User Details Screen
You can enter the first few numbers of the DIGIPASS Serial Number followed by a wild card (*). This provides a
list from which you can select the DIGIPASS record you require.
17.3.4
DIGIPASS Actions
A number of actions are possible for managing DIGIPASS records including assigning and unassigning DIGIPASS to
Users. These are typically required for maintenance, e.g. for a User who has forgotten their Server PIN or when a
DIGIPASS device has been locked and needs unlocking. These are listed in the table below, with explanations.
Some of these actions can be applied to a single application for a specific DIGIPASS device, for example, or applied
globally to a certain application for multiple DIGIPASS devices.
Table 13: DIGIPASS Record Actions supported in the Administration Web Interface
Name
Explanation
Reset Application
A DIGIPASS Application may need to be reset if the time difference between it and the
server needs to be recalculated. This would typically be for time-based Response Only
DIGIPASS after a very long period of inactivity. The 'reset' widens the allowable time
window for the next login, allowing the User to log in and the aXsGUARD Identifier to
calculate the current time shift.
Activate Application
Activates a previously deactivated application for selected DIGIPASS records.
Deactivate Application
Deactivates a previously activated application for selected DIGIPASS records.
Delete Application
Deletes an application for selected DIGIPASS records.
If the event count for an event-based application has become unsynchronized between
the DIGIPASS device and the server, this function can be used to set the server event
count to the event count on the DIGIPASS device.
Reset PIN
If a User’s Server PIN needs to be changed (usually because the User has forgotten it), it
can be reset and the User can create a new Server PIN when they next log in. This may
be done when unassigning or re-assigning a DIGIPASS record.
Force PIN Change
This function can be used when an administrator wants a User to change their Server PIN
on their next login. This may be desirable as a security measure.
Set PIN
A User’s Server PIN can be set to a specific value and communicated to the User.
©
2009 VASCO Data Security
104
