Quest Soft Token for Android. Administration and User Guide

Transcription

1 Quest Soft Token for Android Administration and User Guide

2 2010 Quest Software, Inc. ALL RIGHTS RESERVED. This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser's personal use without the written permission of Quest Software, Inc. If you have any questions regarding your potential use of this material, contact: Quest Software World Headquarters LEGAL Dept 5 Polaris Way Aliso Viejo, CA USA legal@quest.com Refer to our Web site for regional and international office information. TRADEMARKS Quest, Quest Software, the Quest Software logo and itoken are trademarks and registered trademarks of Quest Software, Inc. in the United States of America and other countries. Gridsure and the Gridsure logos are trademarks and registered trademarks of Gridlock TS Limited. All other trademarks and registered trademarks are property of their respective owners. Disclaimer The information in this document is provided in connection with Quest products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest products. EXCEPT AS SET FORTH IN QUEST'S TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest does not make any commitment to update the information contained in this document. Quest Soft Token for Android Administration and User Guide Updated - November 2010 Software Version - 5.6

3 Contents ABOUT THIS GUIDE QUEST ONE IDENTITY SOLUTION AUDIENCE AND SCOPE CONVENTIONS ABOUT QUEST SOFTWARE CONTACTING QUEST SOFTWARE CONTACTING CUSTOMER SUPPORT CHAPTER 1 ADMINISTRATION GUIDE INTRODUCTION WHAT IS THE QUEST SOFT TOKEN FOR ANDROID PROGRAMMING A QUEST SOFT TOKEN FOR ANDROID DEFENDER PRE-REQUISITES DEFENDER TOKEN DEPLOYMENT SYSTEM CHAPTER 2 USER GUIDE INSTALLING ACTIVATING AUTHENTICATING iii

4 About this Guide Quest One Identity Solution Audience and Scope Conventions About Quest Software Contacting Quest Software

5 Quest Soft Token for Android Administration and User Guide Quest One Identity Solution Defender is a component of the Quest One Identity Solution, a set of enabling technologies, products, and integration that empowers organizations to simplify identity and access management by: Reducing the number of identities Automating identity administration Ensuring the security of identities Leveraging existing investments, including Microsoft Active Directory. Quest One improves efficiency, enhances security and helps organizations achieve and maintain compliance by addressing identity and access management challenges as they relate to: Single sign-on Directory consolidation Provisioning Password management Strong authentication Privileged account management Audit and compliance. Audience and Scope This book is intended for administrators who want to configure, assign and distribute the Quest Soft Token for Android and users who need to authenticate to a Defender protected network using the Quest Soft Token for Android. This book does not provide tutorial information on the use of the Windows operating system or on network communication concepts. Users must have experience in using the specified operating system and an understanding of networking concepts 6

6 About Conventions In order to help you get the most out of this guide, we have used specific formatting conventions. These conventions apply to procedures, icons, keystrokes, and cross-references. ELEMENT Select Bolded text courier text Italic text Bold Italic text Blue text CONVENTION This word refers to actions such as choosing or highlighting various interface elements, such as files and radio buttons. Used to highlight installation questions and responses. File, daemon, utility, option, attribute names. Used for comments. Used for emphasis. Indicates a cross-reference. When viewed in Adobe Acrobat, this format can be used as a hyperlink. Used to highlight additional information pertinent to the process being described. Used to provide Best Practice information. A best practice details the recommended course of action for the best result. Used to highlight processes that should be performed with care. + A plus sign between two keystrokes means that you must press them at the same time. A pipe symbol (vertical bar) between elements means that you must select the elements in that particular sequence. \ The back slash, immediately followed by a new line, indicates a Unix command line continuation. <version>.<build number> References to the product version you are installing are displayed with <version>.<build number> in angle brackets. 7

7 Quest Soft Token for Android Administration and User Guide About Quest Software Quest Software, Inc., a two-time winner of Microsoft s Global Independent Software Vendor Partner of the Year award, delivers innovative products that help organizations get more performance and productivity from their applications, databases Windows infrastructure and virtual environments. Through a deep expertise in IT operations and a continued focus on what works best, Quest helps more than 100,000 customers worldwide meet higher expectations for enterprise IT. Quest s Windows management solutions simplify, automate, secure and extend Active Directory, Exchange Server, SharePoint, SQL Server,.NET and Windows Server as well as integrating Unix, Linux and Java into the managed environment. Quest Software can be found in offices around the globe and at Contacting Quest Software Phone Mail (United States and Canada) info@quest.com Quest Software World Headquarters 5 Polaris Way Aliso Viejo, CA Web site Please refer to our Web site for regional and international office information. Contacting Customer Support Quest Software's world-class support team is dedicated to ensuring successful product installation and use for all Quest Software solutions. 8 SupportLink at support@quest.com You can use SupportLink to do the following: Create, update, or view support requests Search the knowledge base Access FAQs Download patches.

8 1 Administration Guide Introduction What is the Quest Soft Token for Android Programming a Quest Soft Token for Android Defender Token Deployment System 13

9 Quest Soft Token for Android Administration and User Guide Introduction This guide describes how to administer the Quest Soft Token for Android when using Defender as your authentication server and how to authenticate using the Quest Soft Token for Android. What is the Quest Soft Token for Android The Quest Soft Token for Android is a software token that can be used to gain secure access to network, web, and applications-based resources when used with Quest Defender. The picture above shows an example of the Quest Soft Token for Android displayed on the Android phone. The token response, , is used as the One Time Password (OTP) when the user is prompted to authenticate. 14

10 Programming Programming a Quest Soft Token for Android This section describes how to program the Quest Soft Token for Android. Defender Pre-requisites Quest Soft Token for Android can be used on all Android phones running Android version 1.6 or later. When using Quest Defender as the authentication server for the Quest Soft Token for Android, the following software versions are required: Defender Administration Console or later Defender Security Server or later. These are available from Quest SupportLink at You will need to obtain a Quest Soft Token for Android license from Quest Licensing at Please refer to the Defender Installation Guide for information on installing a Desktop Token license. 15

11 Quest Soft Token for Android Administration and User Guide The Quest Soft Token for Android is programmed in the same way as a Defender Desktop token. The following example describes how to program a Quest Soft Token for Android for an individual user. The Quest Soft Token for Android can also be programmed through the ActiveRoles Server Web Interface using the Defender ActiveRoles Server Integration Pack. The Quest Soft Token for Android is also available through the Defender Token Deployment System. 1. Using Active Directory Users & Computers (ADUC), open the Defender - username Properties dialog for the required user and select the Defender tab: 16

12 Programming 2. Select Program to start the Token Programming Wizard: 3. Click Next to display the Token Types dialog: 4. Select Defender Desktop Token. 17

13 Quest Soft Token for Android Administration and User Guide 5. Click Next. The Defender Desktop Token Types dialog is displayed: 6. Select Android. 18

14 Programming 7. Click Next. The Select Token Mode dialog is displayed: In the Encryption Strength box, select the encryption strength for the token, either Defender SNK Encryption, AES Encryption, Triple DES Encryption or OATH Compliant HMAC/SHA1. In the Response Length box, select the length of the response, either 6 or 8 characters, that will be issued by the token. 19

15 Quest Soft Token for Android Administration and User Guide 8. Click Next. The Checking User License dialog is displayed: The number of available user licenses and the number of allocated user licenses are displayed. 9. Click Next. The Token Location dialog is displayed. 10. Click Next to accept the default location to store the tokens. Alternatively, click Browse and navigate to the required location. 11. The Save Activation Codes dialog is displayed: 20

16 Programming 12. If you wish to create an individual file for each activation code, select File per user. To change the location in which the file will be saved, click Browse and navigate to the required location. To save to a single file, select Single File and provide the filename. If required, check the box to append new activation codes to the end of existing files. 13. Click Next. The Defender Token Programming Complete dialog is displayed: 14. Click Finish. 21

17 Quest Soft Token for Android Administration and User Guide 15. The Quest Soft Token for Android has now been created and assigned to the user s account and is displayed in the Token Management section of the Defender - username Properties - Defender tab as shown below: 16. The activation code for this token is contained in the text file created in step 8. An example is shown below: 17. Now send the activation code to the user. Refer to Chapter 2 - Installing and Activating the Quest Soft Token for Android for information on how to install and activate the token on the Android phone, and how to authenticate using the Quest Soft Token for Android. 22

18 Programming Defender Token Deployment System For information on how to program the Quest Soft Token for Android using the Defender Token Deployment System, please refer to the Defender Token Deployment System User Guide. 23

19 2 User Guide Installing Activating Authenticating 25

20 Quest Soft Token for Android Administration and User Guide This section provides information on installing and activating the Quest Soft Token for Android on the Android Operating systems. Installing The Quest Soft Token for Android can be downloaded and installed in the same way as any other Android application, as described below: 1. From the Android phone, select the Market icon. 2. Click Search located at the top right hand side of the phone. 3. Search for Quest Soft Token and then click Search Select Quest Soft Token and click Install.

21 Installing, Activating and Authenticating When the installation is complete, your token, called Quest Soft Token, will be available from the Programs menu on your Android phone. Note: You can also use a browser on your Android device to download the Quest Soft Token for Android from 27

22 Quest Soft Token for Android Administration and User Guide Activating To activate the Quest Soft Token for Android, you need to import the activation code provided to you by your Defender administrator. To do this from your Android phone: 1. Launch the Quest Soft Token application. 2. Press Menu on your Android phone. 3. Select Preferences. 4. Select Activate Token. 5. Enter your token activation code provided by your administrator. You can long press the screen and paste the code from your original Click the Activate button. The message Successfully Activated will be displayed. Please ensure that the activation code is entered correctly. If it is not entered correctly, you will receive an incorrect token response that will not be valid for Defender authentication. 28

23 Installing, Activating and Authenticating Authenticating Launch the Quest Soft Token from your programs menu. 1. A new token response will be generated for you immediately. 2. To display the next response, press. The 6 digit value displayed is your One Time Password (OTP). 29