aXsGUARD Identifier 3.0.2.0 Product Guide v1.5
DIGIPASS
DIGIPASS device again, the administrator must reset the time period to allow re-use of the Backup Virtual
DIGIPASS.
Max. Uses/User: s
et a maximum number of times a User may request an OTP using the Backup Virtual
DIGIPASS. When the User has reached this number of uses, any further OTP requests are rejected. If the User
still needs to use the Backup Virtual DIGIPASS, an administrator must reset the number of permitted uses.
These settings may be set both at the Policy level and at the DIGIPASS record level. Configuring the setting at
policy level implements organizational-wide regulations for all Virtual DIGIPASS use. Configuring the setting at
DIGIPASS level implements an exception.
Global settings affect all DIGIPASS records with an individual option set to '
Default
'. Global options are defined in
the Policy which controls authentication. Using multiple Policies, therefore, provides some additional flexibility.
Some Policy settings (see below) may be used to automatically set DIGIPASS settings which are blank when the
Backup Virtual DIGIPASS is first used by the User.
If Backup Virtual DIGIPASS is enabled for a DIGIPASS record and set to
Time Limited
, and the
Enabled Until
field in
the DIGIPASS property sheet is blank, the time limit begins when the Backup Virtual DIGPASS is first used. The
expiry date (today’s date + Time Limit) is then displayed in the
Enabled Until
field.
If a
Max. Uses/User
is set for the relevant Policy and a DIGIPASS record's
Uses Remaining
field in the User
property sheet is blank, on first use of the Backup Virtual DIGIPASS, a number (Max Uses/User) is automatically
entered into the
Uses Remaining
field and immediately decremented by
1
.
Note
If a User has Backup Virtual DIGIPASS enabled with the
Enabled Until
date set
and
the
Uses
Remaining
set (automatically or manually), whichever expires first disables the Backup Virtual
DIGIPASS.
Example:
Backup Virtual DIGIPASS is enabled for a User as Time Limited, and the server
Time Limit
setting is 3 days. The
Max. Uses/User
Policy setting is 5. On first use of the Backup Virtual DIGIPASS,
Enabled Until
is set to a date 3 days hence and
Uses Remaining
set to 4. During the next 48 hours, the User logs in 4 more times. Although the User’s time limit does not run out for another 24
hours, Uses Remaining is now 0 and the Backup Virtual DIGIPASS is disabled.
©
2009 VASCO Data Security
114
