Two-Factor Authentication Service (TFAS) First-Time User Guide. Version 4.2

Transcription

1 Two-Factor Authentication Service (TFAS) Version 4.2 Revised: July 13, 2015

2 Table of Contents PREFACE...1 Purpose...1 Need Help?...1 QUICK REFERENCE INSTRUCTIONS...2 APPENDIX A - STEP 1: TOKEN ACQUISITION DETAILED INSTRUCTIONS...3 APPENDIX B WINDOWS TOKEN DETAILED INSTRUCTIONS...4 APPENDIX C MAC OS TOKEN DETAILED INSTRUCTIONS...6 APPENDIX D - APPLE IOS TOKEN DETAILED INSTRUCTIONS...9 APPENDIX E BLACKBERRY TOKEN DETAILED INSTRUCTIONS APPENDIX F ANDROID TOKEN DETAILED INSTRUCTIONS APPENDIX G SMARTPHONE TOKEN DETAILED INSTRUCTIONS APPENDIX H- STEP 2: TOKEN REGISTRATION DETAILED INSTRUCTIONS Prerequisite...15 APPENDIX I REGISTER A SECOND TOKEN Prerequisites...18 APPENDIX J SECURITY CODES What You Need to Know About Security Codes...20 Soft Token for Mobile and Des ktop...20 Hard Token*...20 APPENDIX K MODIFYING YOUR PHONE NUMBER IN OUTLOOK APPENDIX L- STEP 3: TOKEN VERIFICATION... 23

3 Preface Tw o-factor Authentication Service Purpose This document provides instruction to acquire and register a token for use with Allstate s Two-Factor Authentication Service. Allstate s Two-Factor Authentication Service security process requires a user to provide two (2) forms of identification when accessing the Allstate network remotely your Allstate ID/password and a six-digit security code. Only one token is required per person; once the token is registered, you can use that same token when logging in from any device. We recommend installing the token on a device that is easily accessible when you are connecting from any device. This is a three-step process: Step 1: Download the VIP Access token application. Step 2: Register the token and associate it with your Allstate ID. Step 3: Validate your registered token. ipad/android tablet users only: Additional step is required to reconfigure Citrix Receiver. Need Help? Please refer to the Frequently Asked Questions (FAQs) to learn more about the Two-Factor process and troubleshooting information. You can also visit the MyATSC self-service site or contact the ATSC at PROPRIETARY Page 1

4 Quick Reference Instructions Tw o-factor Authentication Service TYPICAL USE CASE CHECKLIST (Detailed instructions can be found in the user guide) Step 1: TOKEN ACQUISITION Download the VIP Access token application to your device Recommended: Install the VIP Access token application on a handheld mobile device (e.g., mobile phone, tablet) o THIS IS THE MOST SECURE, PREFERRED METHOD OF USING A TOKEN To install the VIP Access token application on an Allstate-issued laptop, you must request a softw are drop v ia the Allstate Serv ice Catalog ios (iphone or ipad): Go to App Store In Search tab ty pe vip access Select VIP Access application Click GET and INSTALL Open VIP Access for iphone If y ou receiv e a message about Push Notifications, click Don t Allow Proceed to Step 2 Android Device Go to Android Marketplace In Search ty pe vip access Select VIP Access Click Install Click OK to confirm install Go to main menu and open VIP Access On Welcome screen click OK Proceed to Step 2 Windows (non-allstate-issued laptop or desktop): Visit Click Get VIP Access Desktop In VIP Access Desktop box, click Get VIP Access Desktop Click Download for Windows Follow instructions to install Proceed to Step 2 Mac (laptop or desktop): Visit Click Get VIP Access Desktop In VIP Access Desktop box, click Get VIP Access Desktop Click Download for Mac Follow instructions to install Proceed to Step 2 If the above devices or Blackberry and other Smartphone devices are not viable options for you, order a hard token through your B2B administrator; there is an associated cost and delivery time. Step 2: TOKEN REGISTRATION Associate the token with your Allstate ID o Check y our listing in the Allstate Address Book Update page to ensure y our mobile or office phone is listed and includes the prefix 1 If OK, click red X in top right to ex it. Or, make required changes and click Submit. Changes w ill take effect in one hour; check the Allstate Address Book Update page to v erify updates prior to proceeding. If y ou can t add a number, contact the ATSC for registration help. o Visit Enter Allstate ID and password (For Window s admin users this could be the account that ends w ith a) o Obtain temporary security code by SMS (tex t) or voice call (office phone) o Enter temporary security code from tex t or v oice call in Confirm Your Identity box o Click Sign In On Select Your Credential page, click Register Enter Credential Name o Enter Credential ID from dow nloaded VIP Access token application in step 1 o Enter Security Code from token application Click Submit Click Sign out Step 3: TOKEN VALIDATION Validate your registered token Use the security code from the dow nloaded token; if the security code is accepted, y ou hav e v alidated that the token is associated successfully to y our profile and ready to use. o Visit Enter Allstate ID and password o Open VIP Access token application on y our dev ice o Enter the six -digit Security Code from the dow nloaded VIP Access token app o Click Continue Progress to Manage Your Credentials page At top left of screen y ou should see You have successfully signed in o Click Sign Out ******* *** ******** *** ipad/android Tablet Users You must dow nload and configure the Citrix Receiv er; this w ill ensure y ou are prompted to enter ID, passw ord and security code w hen logging in. Instructions are prov ided in TFAS Citrix User Guide.pdf Congratulations! You successfully completed token installation, registration and v alidation; y ou can use y our token w hen prompted. PROPRIETARY Page 2

5 Appendix A - Step 1: Token Acquisition Detailed Instructions VIP Access Soft Token Application (Download and Installation) Software tokens can be installed on a wide variety of personal computers or mobile devices for use with Allstate s Two-Factor Authentication Service (TFAS). For instructions on how to acquire and install the software token, select your corresponding device from the list below. - Windows PC* (Appendix B) - Mac (Appendix C) - Apple ios, iphone/ipad (Appendix D) - Blackberry (Appendix E) - Android (Appendix F) - Smartphones (Appendix G) *Note: It is not required but recommended that you install the token on a mobile device for easy access and added security. If you need to install the token on an Allstate-issued device, you must request a software drop. Alternatively, you can connect to to download and install the VIP Access software to your device. The estimated time to complete this step is 15 minutes. Time may vary based on the speed of your Internet connection. Soft tokens have no cost associated to the user or business unit Helpful Hint: Visit to view a list of all supported devices. Hard Token If the soft token options are not viable for your environment, you must order a hard token. Your B2B coordinator must submit an order via the B2B system. There is a one-time charge of $9.50 each for hard tokens. To find hard tokens in the B2B system, the requester selects: Allstate Catalog, and Sayers, (the supplier) then searches for the word Token. There are two options for hardware tokens: models HV08 and HAI08. Both are the same price. HAI08 is waterproof; HV08 is not. Otherwise they are the same. Note: Only one token is required per person. Once the token is registered, you can use that same token when logging in from any device. We recommend installing the token on a device that is easily accessible when you are connecting from any personal or Allstate-owned device. PROPRIETARY Page 3

6 Appendix B Windows Token Detailed Instructions Follow these instructions if you w ant to install your token on a personally ow ned PC running a Window s Operating System System Requirements: Internet Explorer 7, 8, or 9, or Firefox 3, 5, 6, 7, or 8 Window s 7 SP1 or XP Professional SP3 (32-bit only) You must have administrative permission on your personal computer to install the VIP Access Desktop. 1. On your personal computer, open Internet Explorer or a different browser. 2. In the address field, highlight the existing address. 3. With the address highlighted, type 4. Press Enter. The VeriSign ID Protection Center Web page opens. 5. Click Get VIP Access Desktop. The VIP Access Desktop Download screen appears. 6. Click Dow nload VIP Access Desktop. The Download and Install VIP Access Desktop screen appears. 7. You w ill receive a message to Save or Run the Setup File, click Run. A Welcome to the VIP Access Setup Wizard screen appears w hen the dow nload is complete. 8. Click Next. The License Agreement screen appears. PROPRIETARY Page 4

7 9. Click the radio button for I accept the terms in the license agreement. 10. Click Next. A Select Install Location screen appears. Note: Do NOT change the default folder location. 11. Click Next. The Ready to Install the Program screen appears. 12. To start the installation process, click Install. A Please wait installation bar appears on your screen. The installation process may take a few minutes to complete. An InstallShield Wizard Completed screen appears after the installation process is completed. 13. Click Finish. A VIP Access menu is created in your Start Menu. 14. To close this screen, in the upper right side of the screen click X. 15. To open the VIP Access application, click Start. Token Example 16. Click on the VIP Access icon. The application opens w ith your token s Credential ID and Security Code information. 17. Close the VIP Access program and proceed to: Appendix H - Step 2: Token Registration Detailed Instructions. Credential ID (Unique token identifier) Security Code (Changes every 30 seconds) PROPRIETARY Page 5

8 Appendix C Mac OS Token Detailed Instructions Tw o-factor Authentication Service Follow these instructions if you w ant to install your token on a Mac Operating System System Requirements: Mac OS X 10.5 or higher 1. On your Mac computer, open Safari or a different browser. 2. In the Address field, highlight the existing address. 3. With the address highlighted, type: 4. Press Enter. The VeriSign ID Protection Center Web page opens. 5. Click Get VIP Access Desktop. The VIP Access Desktop Download screen appears. 6. Click Dow nload for Mac. The Dow nload and Install VIP Access Desktop screen appears. You w ill receive a message to Save. 7. Click the VIP_Access.dmg file. The VIP Access file opens w ith the VIP Access icon displayed. PROPRIETARY Page 6

9 8. Open the VIP Access icon and click Copy VIP Access. 9. Paste the VIP Access application to the Applications folder. 10. To start the installation process, double-click on the VIP Access icon. The VIP Access application download confirmation screen appears. 11. Click Open. The License Agreement screen appears. 12. Click I Accept. The dow nload and installation process begins. 13. After the installation is complete, open the VIP Access application. The application opens w ith your token s Credential ID and Security Code information. VIP Access Token Application Example Credential ID (Unique token identifier) Security Code (Changes every 30 seconds) PROPRIETARY Page 7

10 14. From your desktop, click the VIP Access file. 15. Click Eject the VIP Access drive on your desktop. 16. Close the VIP Access screen and proceed to: Appendix H - Step 2: Token Registration Detailed Instructions PROPRIETARY Page 8

11 Appendix D - Apple ios Token Detailed Instructions Follow these instructions if you w ant to install your token on an ios device iphone, ipod, ipad You can choose one of these options: Dow nload from the Apple App Store by searching the Business category for VIP Access Dow nload from itunes and sync your iphone or ipod touch Visit from your iphone/ipod 1. On your ios device (iphone, ipod, or ipad), go to the App Store. Note: In this demonstration w e are using the iphone and App Store. 2. From the App Store select Categories. 3. In the Search field, type vip access. 4. From your search results select one of the follow ing: For iphone - VIP Access for iphone For ipod users - VIP Access For ipad users select VIP Access for ipad 5. To install the VIP Access application, click Install. 6. Type your Apple ID Passw ord and click OK. Note: The VIP Access application is free. A Loading icon w ill appear on the screen to indicate the dow nload process. PROPRIETARY Page 9

12 7. After the installation is complete, open the VIP Access application. 8. Click Launch VIP Access. The application opens w ith your token s Credential ID and Security Code information. VIP Access Token Application Example 9. Close the VIP Access screen and proceed to Appendix H - Step 2: Token Registration Detailed Instructions. Credential ID (Unique token identifier) Security Code (Changes every 30 seconds) After the token is downloaded and registered, users who want to connect remotely to SVD/DVD/ERD from an ipad tablet will need to setup the Citrix Receiver Application. Refer to the following document: Citrix User Guide.pdf PROPRIETARY Page 10

13 Appendix E Blackberry Token Detailed Instructions Follow these instructions if you w ant to install your token on a Blackberry *Please visit to view a list of all supported phones. 1. On your Blackberry, go to m.vip.symantec.com. The VeriSign ID Protection Mobile Center Web page opens. 2. Below the message Get VIP access to help protect your online accounts, click Dow nload Now and follow the process for your Blackberry. Sample screen 3. Confirm your dow nload, click Dow nload. 4. After the dow nload is complete, click Install. After the installation process is complete, The application was successfully installed message appears. 5. Click Run. 6. To open the VIP Access application, open Menu (looks similar to ) and click OK. VIP Access Token Application Example The application opens w ith your token s Credential ID and Security Code information. Credential ID (Unique token identifier) 7. Close the VIP Access screen and proceed to: Appendix H - Step 2: Token Registration Detailed Instructions. Security Code (Changes every 30 seconds) PROPRIETARY Page 11

14 Appendix F Android Token Detailed Instructions Tw o-factor Authentication Service Follow these instructions if you w ant to install your token on an Android device You can choose one of these options: Dow nload from the Android Market by searching for VIP Access Visit from your Android phone. 1. On your Android phone, go to m.vip.symantec.com. The VeriSign ID Protection Mobile Center Web page opens. 2. Below the message Get VIP access from the App Store, click Dow nload Now and follow the installation process for your Android. Sample screen You w ill be transferred to the Android Marketplace. 3. In the Search field, type vip access, if necessary. 4. Click VIP Access. 5. On the VIP Access Description screen, click Install. PROPRIETARY Page 12

15 6. Confirm the installation, click OK. 7. After the installation is complete, go to the Main Menu and open VIP Access. 8. On the Welcome to VIP Access screen, click OK. 9. Open the VIP Access application. The token s Credential ID and Security Code information appear on the screen. VIP Access Token Application Example 10. Close the VIP Access menu screen and proceed to Appendix H - Step 2: Token Registration Detailed Instructions. Credential ID (Unique token identifier) Security Code (Changes every 30 seconds) After the Token is dow nloaded and registered, users w ho w ant to connect remotely to SVD/DVD/ERD from an Android device w ill need to setup the Citrix Receiver Application. Refer to the follow ing document: Citrix User Guide.pdf PROPRIETARY Page 13

16 Appendix G Smartphone Token Detailed Instructions Follow these instructions if you w ant to install your token on a Smartphone* device other than those above *Please visit to view a list of all supported phones. 1. On your Smartphone, go to m.vip.symantec.com. The VeriSign ID Protection Mobile Center Web page opens. 2. Below the message Get VIP Access from the App Store, select Dow nload Now and follow the installation process for your Smartphone. Sample screen 3. After the installation is complete, open the VIP Access application. The application opens w ith your token s Credential ID and Security Code information. VIP Access Token Application Example 4. Close the VIP Access screen and proceed to: Appendix H - Step 2: Token Registration Detailed Instructions. Credential ID (Unique token identifier) Security Code (Changes every 30 seconds) PROPRIETARY Page 14

17 Appendix H- Step 2: Token Registration Detailed Instructions After completing Step 1: Token Acquisition, you will need to register your token. The registration process will take approximately five minutes. Prerequisite During this step you will be sent a temporary, one-time code to validate your identity prior to registration. You will be asked to choose a method to receive the code; either by text message or at your Allstate office phone. To receive your temporary code by office phone (Voice Call) or SMS (Text Message) your office phone and mobile phone must be listed in Allstate s Outlook Address Book with a 1 preceding it. Example: 1(847) Check your listing in the Allstate Address Book Update page to ensure your mobile or office phone is listed and includes the prefix 1 If OK, click red X in top right to exit. Or, make required changes and click Submit. Changes typically take effect in 15 minutes; check the Allstate Address Book Update page to verify updates have occurred prior to proceeding. Detailed instructions can also be found in Appendix K Modifying your Phone number in the Address Book. If you wish to receive your temporary security code by voice call, you must be available to answer the office phone number listed in Allstate s Outlook Global Address Book, as the call is interactive. Users with no desk phone or mobile phone registered in Allstate s Outlook Address Book will need to contact the ATSC for registration help. 1. From your Allstate desktop, home PC, or personal device, open Internet Explorer or a different browser. Note: Internet Explorer is used in this example. 2. In the address field, highlight the existing address 3. With the address highlighted, type Press Enter. The VeriSign ID Protection Self Service Portal Web page opens. 5. Enter your Window s NT ID and Passw ord 6. Click Sign In. A Complete Your Sign-in screen appears. PROPRIETARY Page 15

18 7. Click the radio button next to the method you prefer to receive a temporary security code. Reminder: If you w ish to receive the temporary code via SMS, you must have your mobile phone number listed in Allstate s Outlook Address Book. If you prefer to receive a Voice Call, you must be at the phone number listed in the address book as the call is interactive. U.S. phone number should begin with prefix 1 8. Click Continue. The Enter Your Temporary Security Code screen appears. Note: You can expect to receive your temporary security code via text message or phone w ithin a few minutes. 9. In the Security Code field, enter your six-digit temporary security code. 10. Click Sign In. A Welcome to Validation & ID Protection (VIP) Self Service screen appears. 11. Click Register. PROPRIETARY Page 16

19 12. In the Credential Name field, enter a name for your credential (e.g., Tom s iphone) 13. In the Credential ID field, enter the Credential ID number found on the VIP Access token application you dow nloaded to your device in step 1 token acquisition. You must open this application on your device to view the Credential ID. Ex ample: You must insert your own information Security Code example 14. In the Security Code field, type the security code displayed on your token. Reminder: The security code changes every 30 seconds. Type the new code number should you miss entering the code show n in the allotted time. 15. Click Submit. A Manage Your Credentials screen appears. 16. Click Sign Out, located in the upper right side of the screen. The Welcome to VeriSign Identity Protection (VIP) Self Service Portal screen reappears. 17. To close this program, click the Red X in the upper right side of your screen. Note: Only one token is required per person. Once the token is registered, you can use that same token when logging in from any device. We recommend installing the token on a device which is easily accessible when you are connecting from any personal or Allstate-owned device. PROPRIETARY Page 17

20 Appendix I Register a Second Token Tw o-factor Authentication Service For personal convenience, you may want to register a second token on a separate device. This situation is not typical for most users. These instructions will guide you through registering a second token. Remember, only one token is required per person. Once the token is registered, you can use that same token when logging in from any personal device. We recommend installing the token on a device which is easily accessible when you are connecting from any personal device. Prerequisites You will need to acquire a second token prior to completing this step (see Step 1: Token Acquisition). The following registration process will take approximately five minutes. In addition, be ready to receive your temporary security code by SMS (text message) or voice call. 1. From your Allstate desktop, home PC, or personal device, open Internet Explorer or a different browser. Note: Internet Explorer is used in this example. 2. In the Address field, highlight the existing address. 3. With the address highlighted, type 4. Press Enter. The VeriSign ID Protection Self Service Portal Web page opens. 5. Enter your Window s NT ID and Passw ord. 6. Click Sign In. A Complete Your Sign-in screen appears. The screen displays credential information on the token already registered. 7. In the Security Code field, type the security code displayed on the first token you previously dow nloaded to your device and registered. Note: For soft tokens - the security code changes every 30 seconds. If you have less than 10 seconds on the clock remaining, it is recommended to w ait and enter the next security code to display on the token. For hard tokens - the security code is generated every time you push the button. 8. Click Continue. The Manage Your Credentials screen appears. PROPRIETARY Page 18

21 9. On the right of your screen, under Register another credential, click Register. 10. In the Credential Name field, enter a name for your credential (e.g., Tom s iphone ). 11. In the Credential ID field, enter the Credential ID number found on your second token. Example: You must insert your own information 12. In the Security Code field, type the security code displayed on your second token. Example: You must insert a code generated from your token Reminder: The security code changes every 30 seconds. Type the new code number should you miss entering the code show n in the allocated time. 13. Click Submit. The Manage Your Credentials screen reappears. 14. Click Sign Out, located in the upper right side of the screen. The Welcome to VeriSign Identity Protection (VIP) Self Service Portal screen reappears. 15. To close this program, click the Red X in the upper right side of your screen. PROPRIETARY Page 19

22 Appendix J Security Codes Tw o-factor Authentication Service What You Need to Know About Security Codes When accessing the network remotely, you will need to enter a six-digit security code number, randomly generated by your token, each time you login to the network. You have 30 seconds to enter the security code displayed on your token before the number changes. Should you miss entering the code within the allotted time, enter the new security code number that displays on the screen. A new security code is generated every 30 seconds for soft tokens and a new security code is generated each time you press the button on the token for hard tokens. Soft Token for Mobile and Desktop Launch the VIP Access software (soft token) from your Smartphone or personal computer to see both your Credential ID and a six-digit security code. VIP Access Token Application Examples Hard Token* Press the button once on the token to generate your six-digit security code. Model HV08* PROPRIETARY Page 20

23 Model HAI08* Both hard token models work the same way. Model HAI08 is waterproof; model HV08 is not. Otherwise, there is no difference; both cost the same amount ($9.50) and can be used with TFAS. PROPRIETARY Page 21

24 Appendix K Modifying Your Phone Number in Outlook Important Note: U.S. phone numbers need to start w ith the prefix 1 to receive a temporary code through a voice call or SMS. International users could update their mobile phone numbers in Allstate s Outlook Global Address Book to get temporary codes via SMS messages. Phone number formats should be Country code + Phone number. India Country code: 91 UK Country code: 44 If you are an international user and need help, call ATSC for enrollment. 1. Connect to the Allstate Intranet and open Internet Explorer. 2. In the Address bar type 3. Press Enter. 4. In the Phone and Mobile fields, verify that the number 1 is listed in front of the phone numbers. If not, add a 1 and click Submit Changes. 5. You w ill receive an update message. Note that your changes generally take effect after 15 minutes. Return to the Address Book Update site after 15 minutes to verify that your changes have taken effect. Your changes have been submitted successfully. Please check your account in the Global Address Book tomorrow to verify the information appears correctly. PROPRIETARY Page 22

25 Appendix L- Step 3: Token Verification Tw o-factor Authentication Service After completing Step 2: Token Registration, Step 3 helps you verify that the token works. 1. From your Allstate desktop, home PC, or personal device, open Internet Explorer or a different browser. Note: Internet Explorer is used in this example. 2. In the address field, highlight the existing address. 3. With the address highlighted, type 4. Press Enter. The VeriSign ID Protection Self Service Portal Web page opens. 5. Enter your Allstate ID and Passw ord. 6. Click Sign In. A Complete Your Sign-in screen appears. 7. The screen displays credential information on the token already registered. If users have multiple Credential IDs they should select the specific Credential ID that they w ould like to validate. 8. Open the VIP Access application that w as installed in Step 1. PROPRIETARY Page 23

26 9. In the Security Code field, type the security code displayed on the token. Note: For soft tokens - the security code changes every 30 seconds. If you have less than 10 seconds on the clock remaining, it is recommended to w ait and enter the next security code that w ill display on the token. For hard tokens - the security code is generated each time you push the button. 10. Click Continue. The Manage Your Credentials screen appears 11. A message should be displayed: You have Successfully signed in 12. Click Sign Out, located in the upper right side of the screen. The Welcome to VeriSign Identity Protection (VIP) Self Service Portal screen reappears. 13. To close this program, click the Red X in the upper right side of your screen. 14. The token registration process is complete. You re ready to start using the Tw o-factor Authentication Service Note: Only one token is required per person. Once the token is registered, you can use that same token when logging in on any device. We recommend installing the token on a device that is easily accessible when you are connecting from any personal or Allstate-owned device. PROPRIETARY Page 24