Digipass Plug-In for SBR Administrator Reference - Vasco

Digipass Plug-In for SBR Administrator Reference Field Listings
Field Name in
Administration
Interfaces
Backup Virtual Digipass
– Time Limit
Backup Virtual Digipass
– Max. Uses/User
Backup Virtual Digipass
– Request Method
Backup Virtual Digipass
– Request Keyword
Identification Time
Window
Description
Max. Uses/User limit is.
When the Enable Backup VDP setting is Yes – Time Limited, the Time Limit setting
indicates the number of days for which the Backup Virtual Digipass feature may be used by
a User, once they start using it.
The Backup Virtual Digipass Enabled Until setting on the Digipass record will be set
automatically the first time that the User requests a Backup Virtual Digipass OTP, using the
Time Limit defined in the Policy. Once this date has expired, it requires administrator
intervention either to extend it or to reset it to blank for the next time that the User needs
to use Backup Virtual Digipass.
Note that if a User has more than one Digipass capable of Backup Virtual Digipass, they will
have a separate limit for each one.
The maximum number of uses of the Backup Virtual Digipass feature permitted for each
User, if they do not have a specific limit set for them.
If the Backup Virtual Digipass Uses Remaining on the Digipass record is blank and
there is a Max. Uses/User limit defined in the Policy, the Uses Remaining will be set
automatically the first time that the User requests a Backup Virtual Digipass OTP.
Once the Uses Remaining has reached zero, Backup Virtual Digipass can no longer be used
with this Digipass, unless the administrator increases it or resets it to blank.
Note that if a User has more than one Digipass capable of Backup Virtual Digipass, they will
have a separate limit for each one.
The method by which a User has to request a Backup Virtual Digipass login.
The 'request' is made in the password field during login. The request will be ignored if the
User does not have a Digipass assigned that is activated for the Backup Virtual Digipass
feature, or if other Policy or Digipass settings do not permit Backup Virtual Digipass use.
Options:
Default Use the setting of the parent Policy.
None Do not use Backup Virtual Digipass.
Keyword Use the Request Keyword. For Backup Virtual Digipass, this is not
permitted to be blank.
Password Use the static password.
KeywordPassword Use the Request Keyword followed by the static password. No
separator characters or whitespace should be between them.
PasswordKeyword Use the static password followed by the Request Keyword. No
separator characters or whitespace should be between them.
Defines the Keyword that a User must enter to request a Backup Virtual Digipass login, if a
method using a Keyword is selected in the Request Method. For Backup Virtual Digipass,
this is not permitted to be blank.
Controls the maximum number of time steps' variation allowable between a Digipass and
the authentication server during login. This only applies to time-based Response Only and
Challenge/Response Applications.
The Dynamic Time Window option may be used to allow more variation according to the
length of time since the last successful login.
If this setting is not specified at all, there is an inbuilt default value of 20.
Signature Time Window Controls the maximum number of time steps' variation allowable between a Digipass and
the authentication server during Digital Signature verification. This only applies to timebased
Signature Applications.
If this setting is not specified at all, there is an inbuilt default value of 24.
Signature Applications are not currently used in RADIUS environments.
Initial Time Window Controls the maximum allowed time variation allowable between a Digipass and the
authentication server, the first time that the Digipass is used. The time is specified in hours.
This Initial Time Window is also used directly after a Reset Application operation, which
can be used if it appears that the internal clock in the Digipass has drifted too much since
© 2006 VASCO Data Security Inc. 92