Defender 5.7 - Token Deployment System Quick Start Guide This guide describes how to install, configure and use the Defender Token Deployment System, based on default settings and how to self register Defender hardware and software tokens. For detailed information on these topics, please refer to the: Defender Management Portal Installation and Configuration Guide Defender Token Deployment System User Guide For Defender 5.7, the Token Deployment System is included within the Defender Management Portal. Installation Pre-requisites The Defender Management Portal requires the following software: Microsoft Windows Server 2003, 2008 or 2008 R2 located in the same domain as your Defender system (x86 and x64 servers are supported) Microsoft IIS for Windows Server with ASP.NET 2 Microsoft.NET Framework 3.5 (available on the Defender Installation CD as a Redistributable) Adobe Flash Player installed on the machine you will use to display the Defender Management Portal. Before you install Defender, ensure that you have administrative privileges on all the machines on which you install Defender components. When the installation is complete, please ensure that Integrated Windows Authentication is enabled for the Defender Web Interface website.
Installation Select Defender Management Portal from the Defender Autorun, or run DefenderWebInterface.msi - the Defender Management Portal Setup Wizard starts: 1. Accept all the default settings, changing only the port number (80) if required. 2. Check the box to Launch configuration page after install. This option will display the Defender Management Portal in a web browser. Make a note of the URL displayed on this page, eg http://localhost:80/admin 3. Click Next and then Install. 4. When the setup wizard finishes, click Finish to display the Defender Management Portal login page. 5. Login using an account with the correct administrative privileges for your environment. 2
Configuration On the Credentials tab, configure an Active Directory (AD) service account for the Token Deployment System and/or Defender Reports: 1. Enter the domain and username of a domain admin or service account. The permissions required for the service account can be delegated using the Delegate Control wizard from the Defender menu in Active Directory Users and Computers. 2. Enter the password for the account. 3. Re-enter the password to confirm. 4. Click Save. To configure the Token Deployment System, select the Token Deployment System Configuration page: 3
Software Tokens 1. In the Permissions section, enter the name of the AD group that contains the users who are allowed to register the token types. 2. In the User Verification section, select the required Verification Method. If you are selecting the ticket system ensure that the email address to which ticket information will be sent is specified for each Defender user on the General tab of the User Properties dialog in Active Directory. 3. Select Save. Hardware Tokens The URLs required to access the web pages where Defender tokens can be registered are displayed. If your users will be using one particular token type, you can set that token as the default type. The default token type can be registered by accessing the Token Deployment System web page at http://<ip>:port/register where <IP> is the IP address of the Management Portal host machine and the port number configured during setup. If you are using hardware tokens: 1. Select the default token type from the dropdown list. 2. Click Save. Email Settings If you want to use software tokens, enter the details of your SMTP Server on the Email Settings tab. 1. Enter the name or IP Address of the SMTP Server that will be used to send e-mails to Defender token users. 2. Accept the default port number, 25, or change if required. 3. In Email details, enter the Email address that will be displayed in the From field on e-mails sent to software token users. 4. Click Save. PINs If you want your users to use PINs with hardware and / or software tokens enable the required setting and select Save. What Next? For detailed instructions on installing and configuring the Defender Management Portal, please refer to the Defender Management Portal Installation and Configuration Guide. Token Registration This section is intended for administrators and users who want to self register Defender hardware tokens and software tokens using the Defender Token Deployment System. 4
Hardware Token Registration Your administrator will: provide you with a token provide you with the web page address for the Token Deployment System. 1. Open a browser and access the Token Deployment System website. 2. Select Register a Hardware Token, then select Next. 3. When prompted, enter the serial number located on the back of your token. Click Next. 4. Press the button on your token and enter the passcode shown in the display into the Value displayed: field. Click Next. 5. If prompted, enter a PIN. You will need to enter this PIN each time you use your token. 6. Re-enter the PIN to confirm. Click Next. What Next? For detailed instructions on the use of Defender hardware tokens, please refer to the Defender Hardware Token User Guide. Requesting a Software Token To request a software token: 1. Open a browser and access the Token Deployment System website. 2. Select Request a Software Token. 3. Click the icon for the required token type. If you cannot see the software token you need, contact your administrator for assistance. A message confirms your request and an Email is sent to your address. Follow the instructions provided in the Email to complete the registration process. Activating a Software Token The following steps describe the procedure for activating a Defender software token on a BlackBerry device where your administrator has configured the Token Deployment System to use the ticket system. The procedure is similar for all other supported devices. 1. Locate the token activation email and click the link contained within it. Alternatively, copy and paste the link into your web browser. 2. If prompted, enter a personal identification number (PIN) for your token. If you do not see the Set PIN dialog, skip to step 5. 3. Enter your PIN. You will be prompted to enter the PIN each time you use your token. 4. Re-type your PIN to confirm. 5
5. Click Next. The Install and Activate Token dialog is displayed, which includes information on how to install and activate the token. If the token software is not already installed on your device, you can download it using the Download Token Software link in the email. When the Defender token software is installed on your device, click the Defender Token icon to open the token. You will be prompted to enter the activation code. For BlackBerry, Windows Mobile and Palm (PDA) devices Copy and paste the activation code from the Email into the Defender token, then click Activate. For Android and iphone (or ipad) devices An Activate Token link is provided in the Email. Click this link to automatically copy the activation code to the token. For further information on downloading and installing the Defender token software, please refer to the documentation for your token type. What Next? For detailed instructions on using the Token Deployment System please refer to the Defender Token Deployment System User Guide. For detailed instructions on how to authenticate with a Defender software token, please refer to the Defender documentation for your token type. 2014 Dell Inc. ALL RIGHTS RESERVED. Quest, Quest Software, the Quest Software logo and Defender are trademarks of Quest Software, Inc., and its subsidiaries. See http://www.quest.com/legal/trademarks.aspx for a complete list of Quest Software's trademarks. Other trademarks are property of their respective owners. 6