SafeNet Authentication Manager 8.2 and Windows Azure
Copyright 2013 SafeNet, Inc. All rights reserved. All attempts have been made to make the information in this document complete and accurate. SafeNet, Inc. is not responsible for any direct or indirect damages or loss of business resulting from inaccuracies or omissions. The specifications contained in this document are subject to change without notice. SafeNet, SafeNet Authentication Manager, and SafeNet Authentication Client are either registered with the U.S. Patent and Trademark Office or are trademarks of SafeNet, Inc., and its subsidiaries and affiliates, in the United States and other countries. All other trademarks referenced in this Manual are trademarks of their respective owners. SafeNet Hardware and/or Software products described in this document may be protected by one or more U.S. Patents, foreign patents, or pending patent applications. Please contact SafeNet Support for details of FCC Compliance, CE Compliance, and UL Notification. Contacting SafeNet We work closely with our reseller partners to offer the best worldwide technical support services. Your reseller is the first line of support when you have questions about products and services. However, if you require additional assistance you can contact the SafeNet technical support team help-desk which is available 24 hours a day, seven days a week: Country/Region Telephone USA +1-800-545-6608 International +1-410-931-7520 For further assistance submit additional questions to the SafeNet technical support team at the following web page: http://c3.safenet-inc.com/secure.asp For assistance via email to SafeNet technical support send the request to the following address: support@safenet-inc.com Overview 2
Publication History Date Description Revision 04/28/2013 Initial Release 1.0 Overview 3
Table of Contents Overview... 5 Applicability... 5 Preparation and Prerequisites... 6 SAM and SRP Installation... 9 OTP Authentication with SRP Installed in Azure... 10 Overview 4
Overview Windows Azure is Microsoft s new cloud platform that allows users and companies to store information on MS servers, create web based services, and create and use virtual machines in the cloud. This service reduces the payments on hardware and maintenance. This guide describes how to install SAM on the Windows Azure platform and authenticate to the SAM portal (SRP) using OTP. For more information about Windows Azure please refer to: www.windowsazure.com Applicability This guide is applicable to: Security Partner Information Security Partner Microsoft Product Name and Version SAM 8.2 Protection Category Cloud Services Overview 5
Preparation and Prerequisites 1. In the Windows Azure interface, create a virtual network module. 2. Create the following subnets: Frontend subnet for the SRP Backend for the SAM server. Note: In the sample topology used in this section, the DC was also created in the Backend subnet. For more information on creating subnets, please refer to: http://www.windowsazure.com/en-us/man: age/services/networking/create-a-virtual-network/ Preparation and Prerequisites 6
3. Create Virtual Machines. 4. After creating the virtual machine, make sure to configure the virtual machine s network to the relevant subnet created in Step 2. For more information on creating virtual machines, please refer to: http://www.windowsazure.com/en-us/manage/windows/tutorials/virtual-machine-from-gallery/ Preparation and Prerequisites 7
Preparation and Prerequisites 8
SAM and SRP Installation Follow the steps below to install SAM and SRP. To install SAM and SRP: 1. On the designated internal server, install SAM 8.2 server according to your network requirements. 2. On the designated external server, install the SRP server according to your Access Parameters requirements. 3. Open the required ports in the Windows Azure interface for the SRP services (e.g. 443). SAM and SRP Installation 9
OTP Authentication with SRP Installed in Azure After installation, test the authentication mechanism by accessing the SRP website. To test the authentication mechanism: 1. Open a web browser and browse to the SRP address. 2. In the User Identification page, enter the user name. 3. Click Next. You will be prompted to select the authentication method. 4. In the Authentication Method page, select OTP. 5. Click Next. You will be prompted to enter OTP logon credentials. 6. Enter the OTP authentication code and click Log On. OTP Authentication with SRP Installed in Azure 10