FortiToken Administration Guide

Transcription

1 FortiToken Administration Guide

2 FortiToken Administration Guide December 19, Copyright 2012 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, and FortiGuard, are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance metrics contained herein were attained in internal lab tests under ideal conditions, and performance may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to the performance metrics herein. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet s internal lab tests. Fortinet disclaims in full any guarantees. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Technical Documentation Knowledge Base Customer Service & Support Training Services FortiGuard Document Feedback docs.fortinet.com kb.fortinet.com support.fortinet.com training.fortinet.com fortiguard.com techdocs@fortinet.com

3 Table of Contents Introduction... 4 How this guide is organized... 4 Installing... 5 Downloading and installing... 5 Downloading... 5 Installing... 5 Uninstalling... 5 Using FortiToken Administrator... 6 Getting Started... 6 Unblocking a FortiToken device... 7 Using the soft keyboard... 7 Initializing... 7 Changing SO PIN (Administrator PIN)... 8 Appendix: Terms and Abbreviations... 9 Page 3

4 Introduction Welcome and thank you for selecting Fortinet products for your network protection. This guide provides an information on the installation and setting up of the FortiToken-300 USB key. How this guide is organized This guide contains the following chapters: Installing lists the system requirements and how to install and uninstall the FortiToken-300 Runtime and administrative software. Using FortiToken Administrator provides an information on using FortiToken-300 USB key, logging in and certificate management. Appendix: Terms and Abbreviations lists key terms and abbreviations used in this guide. Page 4

5 Installing Downloading and installing The Runtime software is required on your computer to use the FortiToken-300 Administration software. The software is supported on the following Microsoft Windows platforms: Windows 2000 Windows XP x86/x64 Windows 2003 x86/x64 Windows Vista x86/64 Windows 2008 x86/x64 Windows 7 x86/x64 Windows 8 As well, ensure the following requirements are satisfied: Your computer has at least one USB port available Your BIOS supports the USB device, and USB support has been enabled in CMOS settings USB extension or hub available (optional) FortiToken-300 Token USB dongle is available Downloading Installing Uninstalling The FortiToken-300 Runtime and Administration software is available for download from the Fortinet Customer Service web site. To download the software 1. Login to the web site at: 2. In the Download section, select Firmware Images. 3. Select FortiToken from the drop down menu. The FortiToken-300 Runtime file is FTK300_Setup_V1.exe. The FortiToken-300 Administration software is FTK300Admin_V1.exe. Once downloaded, locate the install file and double-click the file. Follow the instructions of the install wizard. There are two methods to uninstall the FortiToken software: Go to Start Menu > Control Panel > Add or Remove Programs. Select FortiToken 300 (Remove Only) and select Change/Remove. Go to Start Menu > All Programs > Fortinet > FortiToken > Uninstall FortiToken. For both methods, the uninstall requires a reboot of the system to complete the uninstall. Page 5

6 Using FortiToken Administrator Getting Started To launch the FortiToken manager, go to Start Menu > All Programs > Fortinet > FortiToken, and select the FortiToken PKI Manager icon. The FortiToken Administrator software is similar to the FortiToken-300 Runtime software. To view the administrative options, select the Up arrow at the bottom of the window. Figure 1: Select arrow for Administrative options Figure 2: Administrative options Page 6

7 Unblocking a FortiToken device Use the FortiToken PKI Manager to unblock a FortiToken-300 device. To unblock a FortiToken Insert the FortiToken-300 into the USB port on the computer. 2. Select Unblock. 3. Enter the SO PIN. 4. Enter a new User PIN and confirm. 5. Select OK. Using the soft keyboard Optionally, you can use a soft keyboard by checking the Soft keyboard option to avoid monitoring of a potential Trojan program. Note that your physical keyboard is disabled when using the soft keyboard. Use the mouse to enter the user information. Figure 3: Using the soft keyboard option You can also select the Check intensity option to see the security strength of the PIN. Initializing Before providing the FortiToken-300 to a user, it must be initialized for that user. When initializing the FortiToken-300, all data will be wiped from it, including any containers, certificates and keys. To initialize the FortiToken Insert the FortiToken-300 into the USB port. 2. Select Initialize. 3. Complete the Initialization parameters and select OK. Do not unplug the token while it is being initialized. Fortinet Technologies Inc. Page 7 FortiToken Administration Guide

8 Changing SO PIN (Administrator PIN) To change the administrator PIN 1. Select Change SO PIN. The default SO PIN for all FortiToken-300 tokens is $F0rt1N3t!. 2. Enter the Old SO PIN, a New SO PIN and confirm the new PIN. 3. Select OK. Optionally, you can use a soft keyboard by checking the Soft keyboard option to avoid monitoring of a potential Trojan program. Note that your physical keyboard is disabled when using the soft keyboard. Use the mouse to enter the user information. You can also select the Check intensity option to see the security strength of the PIN. Fortinet Technologies Inc. Page 8 FortiToken Administration Guide

9 Appendix: Terms and Abbreviations FortiToken-300 A FIPS compliant smart card based token for PKI applications. CryptoAPI Interface (CAPI) An interface used for cryptography operations, provided by Microsoft. It provides cryptographic algorithm encapsulation of equipment irrelevant or implemented by software. With this interface, it is easy to develop PKI applications for data encryption/decryption, authentication and signature on Windows platforms. PKCS#11 Interface A programming interface introduced by RSA. It abstracts the cryptographic device into a universal logic view - Cryptographic Token, for use by upper-level applications, providing device independency and a manner of resource sharing. Certificate Signing Request A certificate signing request is sent from an applicant to a certificate authority in order to apply for a digital identity certificate. The most common format for CSRs is the PKCS#10 specification. SO Security Office Admin for the FortiToken-300. Page 9

10