Embed Size (px)
Citation preview
Contents
1. Introduction 3
2. Enrolling your Virtual Smartcard 3
3. Using the Self-Service Portal 6
3.1 Home & User Details 8
3.2 Devices 8
3.3 Windows Accounts & HR Cards 8
3.4 Settings Page 9
3.4.1 Changing a Virtual Smartcard Passcode 9
3.4.2 Changing Your Phone Number 10
3.4.3 Changing Registered Security Questions 11
4. Adding a Device 1 2
4.1 Supported Devices 12
4.2 Where to obtain the Isosec Apps 13
4.3 Adding the Isosec Authenticator App 14
4.4 Adding MIA device 16
4.5 Removing a Device 19
5. Authenticating With A Virtual Smartcard (Without Two Factor Authentication) 20
6. Authenticating With A Virtual Smartcard (Two Factor Authentication Enabled) 22
7. Logging Out with a Virtual Smartcard 25
8. Resetting a forgotten passcode 26
9. Need Help? 28
2
1. Introduction Welcome to your Isosec Virtual Smartcard. You’ll soon be up and running to easier, faster, authentication without the hassle of a physical smartcard. To use this guide, you’ll need these things first:
- A Virtual Smartcard issued to you by your Registration Authority - The iO Identity Agent installed on your machine - You may also require a Smartphone if your Organisation is enforcing
Two-Factor Authentication. If you experience any issues while following any of the steps in this guide, please contact your Registration Authority or Local Support Team.
2. Enrolling your Virtual Smartcard Your Virtual Smartcard will be issued to you by your local Registration Authority. Once the card has been created, you’ll receive an email inviting you to enrol your Virtual Smartcard.
1. Click the Start self-enrolment button within the email to begin the enrolment process.
3
2. You’ll now be taken to the Virtual Smartcard Self-Enrolment form. If you are using clinical applications such as EMIS, your passcode will need to be 4-8 characters.
3. After entering a passcode of your choice, select 3 Security Questions and Answers as shown below - These questions will later be used in the event you forget your passcode. Once complete, select Continue enrolment
4
4. An SMS code will now be sent to the mobile phone number associated with
your Virtual Smartcard. Enter the the 6-digit SMS Code and select Complete enrolment If your SMS code does not arrive, click the Resend SMS Code button. If you continue to experience issues, please contact your local Support Team.
5. You’ll now be redirected to the Self-Service Portal. You’re all set! You can now
close the page and start to use your Virtual Smartcard with the iO Identity Agent. If your Organisation has opted to enforce Two-Factor Authentication, please follow the steps outlined in Section 4 to register your device and the Isosec Authenticator App.
5
3. Using the Self-Service Portal The Self-Service Portal gives you the ability to manage your own Virtual Smartcard, this includes:
● Associate 2FA devices ● Virtual Smartcard passcode reset ● Change security questions/answers ● Review any associated account information
1. You can access your Self-Service Portal by right clicking the iO icon in the system tray and selecting the Self-Service Portal.
2. To log in, enter your registered email address and Virtual Smartcard Password - Click Continue to proceed.
6
3. For additional security, an SMS message will be sent to the mobile number
registered to the Virtual Smartcard - Enter the 6-digit code and select Login
4. Select Re-send SMS code if the SMS fails to arrive - If you continue to experience issues, contact your local support team to check the number has been entered correctly.
5. After you've successfully authenticated, you’ll be redirected to the Home
page of the Self-Service Portal and presented with your User Details.
3.1 Home & User Details
7
The Home screen will allow you to review any information associated with your Virtual Smartcard, this includes:
● Associated email address ● Associated Windows account ● Associated devices
When logging into the Self-Service Portal you’ll be able to change your own Security Questions, Passcode and link devices to your account. Only an RA is able to amend the associated Windows AD account, so get in touch with your RA team if you require any changes to your Windows AD account. 3.2 Devices From within the Home section, you’ll find the list of devices associated with your Virtual Smartcard for use with 2-Factor Authentication or Isoec’s MIA platform - When initially logging in, this list will be empty. These devices can be added by a user or by a Registration Authority - more information on how to add a device can be found in Section 4 of this document.
3.3 Windows Accounts & HR Cards A Registration Authority can associate a Windows Account or HR Card to your Virtual Smartcard For more information on this, please contact your local support team.
8
3.4 Settings Page The Settings page will allow you to change your passcode, phone number and associated Security Questions. 3.4.1 Changing a Virtual Smartcard Passcode
1. To change your Virtual Smartcard Passcode, from the Self-Service Portal Homepage, select Settings and locate the Change Your Passcode option.
2. Enter your current and new passcode you wish to set. Please note the
passcode requirements - If you are using clinical applications such as EMIS, your passcode will need to be 4-8 characters as a minimum.
3. Once complete, select “Change passcode”. You’ll now be able to
authenticate with your new passcode on the iO Identity Agent or Self-Service Portal.
9
3.4.2 Changing Your Phone Number This form will allow you to change the mobile number associated with your Virtual Smartcard.
1. From the Homepage, select Settings then locate the Change your Phone Number option.
2. Enter your Virtual Smartcard Passcode followed by your new Mobile Number.
Once complete select Update Phone Number
3. A 6-digit code will be sent via SMS to your new number. Enter the code and
select Verify new phone number
10
4. Once verified, confirmation will be shown at the bottom of the page. The Current phone number will also update.
3.4.3 Changing Registered Security Questions
1. To change your security questions, go to the Settings section then locate the Change Security Questions option.
2. Select three new Security Questions from the drop-down menu and enter the corresponding answers. Your current Virtual Smartcard passcode must be re-entered in order to amend these.
3. Once three new questions and answers have been entered, select Update
security Q&As. The new Q&As can now be used for passcode resets.
11
4. Adding a Device In order to authenticate when 2FA is enforced by your Organisation, a device will need to be registered and associated with your Virtual Smartcard.
There are two Isosec applications which can be installed and used as 2FA apps depending on the use case.
● Isosec Authenticator - This application type is needed to complete any 2FA request by iO Identity Agent for desktop users of Virtual Smartcard. You’ll need to register your Virtual Smartcard with the Isosec Authenticator application to be able to authenticate using 2FA with iO Identity Agent. This is covered in Section 6.3
● MIA - This application type is used by Virtual Smartcard MIA users who need to have access to supported clinical systems directly on their mobile devices. Registration of this application type is not needed for 2FA authentication with iO (iO requires the Isosec Authenticator App to complete 2FA) . This is covered in Section 6.4
4.1 Supported devices
● Android devices running Android 5.0 onwards
● iOS devices running iOS 9.0 onward
12
4.2 Where to obtain the Isosec Apps
Isosec Authenticator App - This App can be found via the App Store (iOS/Apple) or Google Play Store (Android) on your Smartphone. Search for “Isosec Authenticator”, the icon will appear as below:
MIA - This App can be found via the App Store (iOS/Apple) or Google Play Store (Android) on your Smartphone. Search for “Isosec MIA”, the icon will appear as below:
13
4.3 Adding the Isosec Authenticator App
1. To begin the device registration, click the “Add Device” button. This will bring up a form for you to fill out.
2. You’ll now need to enter some details about the device you’re setting up. Give the device a unique name and select the “Device type” as “Phone”. For the “Authenticator Application Type”, select “Isosec Authenticator” from the drop down menu
Do NOT click “Continue” yet until you have worked through the next few steps.
3. Open the Isosec Authenticator App on your Smartphone.
4. Select the “Register” button - The camera will open on your device. If
prompted, select “Allow” to give the application access to your camera.
14
5. From your PC, click “Generate QR Code” on the “Add Device” page you filled out earlier.
6. A QR Code will appear ready for you to scan on the Smartphone.
7. With the camera open on the Isosec Authenticator App, scan the QR Code
and enter the users Virtual Smartcard passcode. Select “Submit” to complete the device registration.
15
8. Please note, the QR code will only be displayed for 60 seconds. If you are returned back to the “Add Device” form shown above due to the QR Code expiring, please select “Continue” again and re-scan the QR Code again.
9. The device will now be successfully registered to the users profile - The Isosec Authenticator App will now show a counter along with a unique generated One Time Passcode that can be used as one of the Two-Factor Authentication methods when logging into the iO Identity Agent.
4.4 Adding MIA Device
1. To begin the device registration, click the “Add Device” button. This will bring up a form for you to fill out.
2. You’ll now need to enter some details about the device you’re setting up.
Give the device a unique name and select the “Device type” as “Phone”. For the “Authenticator Application Type”, select “Isosec MIA” from the drop down menu as shown below.
Do NOT click “Generate QR Code” yet until you have worked through the next few steps.
16
3. Open the Isosec MIA App on your device and click the “Authentication” button
4. Select the “Register” button - The camera will open on your device. If
prompted, select “Allow” to give the application access to your camera.
5. From your PC, click “Generate QR Code” on the “Add Device” page you filled
out earlier.
6. A QR Code will appear ready for you to scan on the Smartphone.
17
7. Enter your Passcode and hit “Register”
8. Once complete, the “Authentication” button will have a green dot shown
next to it, indicating the device is now linked to the Virtual Smartcard.
9. The device will now show within the device list as shown below:
10. Information on how to use MIA can be found in the MIA End-User Guide
18
4.5 Removing a Device
1. You can remove an associated device by clicking the Delete option as shown below. A Registration Authority can also perform this action should you experience any issues.
2. A pop-up prompt will appear asking you to confirm the deletion. Tick the
button and click Delete device.
19
5. Authenticating With A Virtual Smartcard (Without Two Factor Authentication)
1. The iO Identity Agent can be found within the Windows System tray - To
login, right-click on the iO Identity Agent icon and select Login
2. Enter the registered email address and Virtual Smartcard passcode. Select
Submit to login.
3. After logging in, select the role you wish to authenticate with and click OK.
20
4. The iO Identity Agent icon will turn green once authenticated (accessed from the System Tray) as shown below:
5. That’s it! You’ll now be able to use your clinical applications as you would with a physical smartcard.
21
6. Authenticating With A Virtual Smartcard (With Two Factor Authentication Enabled) To login with a Virtual Smartcard with Two Factor Authentication, you’ll need to have registered your Isosec Authenticator App device as per Section 4.3.
1. The iO Identity Agent can be found within the system tray - To login, right-click on the iO Identity Agent icon and select Login
2. Enter the registered email address and Virtual Smartcard passcode. Select
Submit to login.
3. After authenticating with your registered email address and passcode, you’ll
receive the Two-Factor Authentication prompt as shown below:
22
4. A notification will be sent to your Smartphone provided your device has an active internet connection. Open the Isosec Authenticator App to see the push notification.
Tap Yes to approve the authentication. If no Push notification is sent or no internet connection is available on the Smartphone, the One Time Passcode within the Isosec Authenticator App can be entered into the Two-Factor Authentication box:
Please note, this One Time Passcode will change every 30 seconds.
5. Once the Two-Factor Authentication has been accepted, you’ll be prompted to select the role you wish to authenticate with. Once selected, click “OK”.
23
6. The iO Identity Agent icon will turn green once authenticated (accessed from the System Tray)
You’ll now be able to use your clinical applications as you would with a physical smartcard.
24
7. Logging Out With a Virtual Smartcard
1. To logout of the iO Identity Agent, right-click the icon in the system tray and click the Logout button. This will de-authenticate your session, disconnecting you from any clinical applications.
2. Once logged out, the iO Identity Agent will be shown with a red X next to it as shown below:
25
8. Resetting a Forgotten Passcode
1. If you forget your passcode, you can request a new one by accessing the Self-Service Portal as shown below:
2. With the login screen loaded, select the Forgotten your passcode? link to start the reset process.
3. When prompted, enter the email address associated with your Virtual
Smartcard and select Email me a passcode reset link
26
4. An email will be sent to your registered email address - Select the Reset passcode button within the email to be taken to the reset page.
If the button fails to load, copy and paste the URL provided into an internet browser.
5. Once the reset form has loaded, enter the answers to the security questions you set at the time of enrolment.
If you are experiencing issues answering your security questions, please contact your local Registration Authority.
6. After answering each question, enter a new Virtual Smartcard passcode - Please note the passcode requirements. Select “Reset passcode”
7. Your passcode reset will now be complete. You can now close the page and
authenticate with the iO Identity Agent or alternatively, access the Self-Service Portal.
27
9. Need help? We hope you find this guide useful to help you manage your Virtual Smartcard. If you need any further help your first port of call should be your Registration Authority team. If you have any feedback on this guide or feel there is anything missing please do get in touch with the Isosec support team [email protected]
28
