RSA SecurID Token 4.0 for Windows Desktops Quick Start

Transcription

1 Welcome to RSA SecurID Token for Windows Desktops. This application allows you to import software tokens that you can use to verify your identity to Virtual Private Networks (VPNs) and other resources protected by RSA SecurID. A software token generates a number called a tokencode every 30 seconds or every 60 seconds. A tokencode is a one-time password. You use a new tokencode whenever you log on to a protected resource. Your administrator may issue you a token that requires a personal identification number (PIN). The PIN and the tokencode displayed in the RSA SecurID Token application form a passcode. Entering both credentials adds an extra layer of security. Your administrator may instead issue you a token that does not require a PIN. In that case, you use a tokencode to log on to a protected resource. Getting Started 1. Install RSA SecurID Token, if it has not already been installed for you. Go to Installing RSA SecurID Token. 2. Import a software token, as directed by your administrator: Importing a Software Token from an Attachment Importing a Software Token from Desktop or My Documents Importing a Software Token from a Web Service 3. Connect to your VPN client or another protected resource, and set your PIN (if required). Setting a PIN in a VPN Client That Prompts for a User Name and PIN Setting a PIN in a VPN Client That Prompts for a User Name and Passcode Once you have set your PIN (or, if your token does not require a PIN), you can use your token to log on to any protected resources that your administrator has authorized. Click the link for the instructions you need. Logging On to a VPN Client That Prompts for a User Name and PIN Logging On to a Web Resource with the Browser Plug-In for Internet Explorer Logging On to a VPN Client That Prompts for a User Name and Code Installing RSA SecurID Token You can install RSA SecurID Token if you have administrator privileges on your computer. If you do not have administrator privileges, the software will have to be installed for you. 1. Double-click RSASecurIDToken400.msi. 2. In the Welcome dialog box, click Next. 3. In the Place of Purchase dialog box, select the region where your company ordered the software and click Next. 4. In the License Agreement dialog box, read the license agreement and select I accept the terms in the license agreement. Click Next. 5. In the Setup Type dialog box, select Complete and click Next. 6. In the Ready to Install the Program dialog box, click Install. 7. When the installation is complete, click Finish. You do not need to restart your system. Importing a Software Token Before you can log on to your VPN client or another protected resource, you must import a software token. You can import a token from a file or from a web service. Token files have the extension.sdtid, for example, token1.sdtid. Important: If you import a token from a file, you may need to enter a file password that your administrator gave you to complete the process. Be sure to note the file password before you begin. Importing a Software Token from an Attachment 1. Double-click the file attachment, for example, token1.sdtid. 2. When prompted to open or save the attachment, click Open. RSA SecurID Token detects the token file and starts up. 3. If prompted, enter the file password, and click OK. 4. If prompted to select a device where the token will be stored, click the name of the device, for example, Local hard drive (RSA). 5. If the word Enabled is not listed next to the device name, select the Enable button to activate the device. 1

2 6. Click OK. A success message is displayed, and you are prompted to rename your token. 7. Do one of the following: If you want to change the token name, click Change Name. The Change Token Name screen opens. If you do not want to change the name, click OK to close the screen. 8. To change the token name, enter a name of 1 to 24 characters (for example, My VPN Token). Click OK. 3. If prompted to select a device where the token will be stored, click the name of the device, for example, Local hard drive (RSA). Importing a Software Token from a Web Service 1. Start RSA SecurID Token. (Click Start > Programs > RSA SecurID Token.) The Import Token screen opens. Importing a Software Token from Desktop or My Documents 1. Start RSA SecurID Token. (Click Start > Programs > RSA SecurID Token.) RSA SecurID Token automatically detects token files that you saved either to Desktop or My Documents and imports them, one by one. 2. If prompted, enter the file password and click OK. 4. If the word Enabled is not listed next to the device name, select the Enable button to activate the device. Click OK. A success message is displayed, and you are prompted to rename your token. 5. Do one of the following: If you want to change the token name, click Change Name. The Change Token Name screen opens. If you do not want to change the name, click OK to close the screen. 6. To change the token name, enter a name of 1 to 24 characters (for example, My VPN Token). Click OK. 2. Click Import from Web. The Import from Web dialog box opens. 3. In the Enter URL field, enter the URL of the download site. If the Enter URL field is prefilled, go to step 4. 2

3 4. In the Enter Activation Code field, enter the activation code that your administrator gave you. Click OK. 5. If prompted to select a device where the token will be stored, click the name of the device where you want to store the token, for example, Local hard drive (RSA). 8. To change the token name, enter a name of 1 to 24 characters (for example, My VPN Token). Click OK. 3. In the PIN field, type 0000 (four zeros) and click OK. 6. If the word Enabled is not listed next to the device name, select the Enable button to activate the device. Click OK. A success message is displayed, and you are prompted to rename your token. 7. Do one of the following: If you want to change the token name, click Change Name. The Change Token Name screen opens. If you do not want to change the name, click OK to close the screen. Setting a PIN in a VPN Client That Prompts for a User Name and PIN Some VPN clients can automatically detect a software token. If so, when you connect to the VPN client, you see user name and PIN prompts. Note: If you have multiple tokens and you want to set a PIN for a token other than the active token (the last token you used or the last token you imported), start RSA SecurID Token and click the down arrow next to the current token name. Select the token you want, and then start the VPN client application. Setting a PIN in a VPN Client That Displays Username and PIN Prompts The VPN client prompts for a user name and PIN. The VPN client prompts you to create a PIN. 4. Follow the prompts to create and confirm your PIN. Use the PIN format that your administrator specified. Be sure to memorize your PIN. 5. Click OK. Setting a PIN in a VPN Client That Prompts for a User Name and Passcode Some VPN clients cannot automatically detect a software token. When you connect to this type of VPN client, you see user name and passcode prompts. To set a PIN to use with your token, you must start both RSA SecurID Token and your VPN client. When you start RSA SecurID Token, the display that you see is determined by the type of token you have. You will see either an Enter PIN prompt or a tokencode. 1. Start RSA SecurID Token, and keep it open on your desktop. (Click Start > Programs > RSA SecurID Token.) 2. Do one of the following: If you see an Enter PIN prompt, go to the next section, Setting a PIN if RSA SecurID Token Displays an Enter PIN Prompt. If you see a tokencode, go to Setting a PIN if RSA SecurID Token Displays a Tokencode. 3

4 Setting a PIN if RSA SecurID Token Displays an Enter PIN Prompt The VPN client prompts for a user name and passcode. 5. Return to the VPN client and paste the tokencode into the Passcode field. 8. Enter your PIN and click the right arrow button. 3. In RSA SecurID Token, when prompted to Enter PIN, click the right arrow button. (Do not enter anything in the Enter PIN field.) You are prompted to create a PIN. 6. Follow the prompts to create and confirm your PIN. Use the PIN format that your administrator specified. Be sure to memorize your PIN. After you create your PIN, the VPN client prompts for a new passcode. A passcode is displayed. A tokencode is displayed. 4. Click the Copy button to copy the tokencode. 7. Return to RSA SecurID Token and wait for the tokencode to change. After the tokencode changes, click the Re-Enter PIN button to open the Enter PIN screen. 9. Click the Copy button to copy the passcode. 10. Return to the VPN client. Paste the passcode in the Passcode field. Click OK. 4

5 Setting a PIN if RSA SecurID Token Displays a Tokencode The VPN client prompts for a user name and passcode. 3. In RSA SecurID Token, click the Copy button to copy the tokencode. 6. Enter your PIN in the Passcode field. 7. Return to RSA SecurID Token and wait for the tokencode to change. After the tokencode changes, click the Copy button to copy the tokencode. Logging On to a VPN Client That Prompts for a User Name and PIN If your VPN client is configured to detect a software token automatically, you log on by entering the user name your administrator assigned you and a PIN (or four zeros, if your token does not require a PIN). Note: If you have multiple tokens and you want to log on with a token other than the active token (the last token you used or the last token you imported), start RSA SecurID Token and select a different token before you start the VPN logon process. 4. Return to the VPN client and paste the tokencode into the Passcode field. Click OK. You are prompted to create a PIN. 5. Follow the prompts to create and confirm your PIN. Use the PIN format that your administrator specified. Be sure to memorize your PIN. After you create your PIN, you are prompted for a new passcode. 8. Return to the VPN client. Paste the tokencode to the right of your PIN. 9. Click OK to submit your passcode. Logging On To a VPN Client (If a PIN Is Required) 3. In the PIN field, enter your PIN. 4. Click OK. Logging On To a VPN Client (If No PIN Is Required) 3. In the PIN field, type 0000 (four zeros). 4. Click OK. 5

6 Logging On to a Web Resource with the Browser Plug-In for Internet Explorer The browser plug-in for Internet Explorer allows you to log on to protected web pages without having to enter a tokencode. When you attempt to load a protected web page, the browser plug-in recognizes it as a page that is requesting SecurID authentication and displays a logon dialog box. 1. Open the URL of the protected web site. The RSA SecurID logon screen opens. The Select Token field displays your active token (the last token you used or the last token you imported). If you want to use a different token, select it from the Select Token list. Note: You can optionally use a hardware token to log on to a protected resource through the browser plug-in. Instead of selecting a software token, select Hardware Token from the Select Token list. Then enter the user name your administrator assigned you and the PIN you use with your hardware token. Logging On to a VPN Client That Prompts for a User Name and Code Some VPN clients are not configured to detect a software token automatically. When you connect to this type of VPN client, you see user name and passcode prompts. If your token requires a PIN, go to the next section, Logging On to a VPN Client with a User Name and Passcode. If your token does not require a PIN, go to Logging On to a VPN Client with a User Name and Tokencode. Logging On to a VPN Client with a User Name and Passcode The VPN client prompts for a username and passcode. 4. Do one of the following: If RSA SecurID Token displays a PIN field, enter your PIN and click the right arrow button. A passcode is displayed. Click the Copy button to copy the passcode. Return to your VPN client. Paste the passcode in the Passcode field. If RSA SecurID Token displays a tokencode, click the Copy button to copy the tokencode. Return to your VPN client. Enter your PIN in the Passcode field. Paste the tokencode to the right of your PIN. 5. Click OK to submit your passcode. Logging On to a VPN Client with a User Name and Tokencode 2. Enter the user name your The VPN client prompts for a passcode. 3. Start RSA SecurID Token. (Click Start > Programs >RSA SecurID Token.) A tokencode is displayed. 4. Click the Copy button to copy the tokencode. 5. Return to the VPN client and paste the tokencode in the Passcode field. Click OK. 2. In the Enter User Name field, enter the user name your 3. Do one of the following: If your token requires a PIN, type your PIN in the Enter PIN field and click OK. If your token does not require a PIN, the Enter PIN field is not available. Click OK to complete your logon. 2. Enter the user name your 3. Start RSA SecurID Token. (Click Start > Programs > RSA SecurID Token.) Note: If the tokencode displayed in RSA SecurID Token expires before you can paste it, wait for it to change and then copy the new tokencode and paste it in the Passcode field in your VPN client RSA Security Inc. All rights reserved. 6