Applies to: IDENTIKEY Authentication Server 3.4

KB 160017 2010 VASCO Data Security. All rights reserved.

Page 1 of 3

KB 160017

IDENTIKEY Authentication Server user account has

expired due to inactivity.

Creation date: 26/11/2012 Last Review: 02/01/2013 Revision number: 2

Document type: How To Security status: EXTERNAL

Summary

IDENTIKEY Authentication Server 3.4 or later has the ability to lockout user accounts

after a certain number of days since their last logon time. When a user account is

locked out you will see the following message in IDENTIKEY auditing.

{Status Message : The user account has expired due to inactivity.} {Auxiliary Message

: {Error Code: '(1043)' ; Error Message: 'The user account has expired due to

inactivity.'}}

details.

The “Max Days Since User Login” setting can be found in the User section of the Policy

that is in use. Resetting the user’s last authentication time will allow the user to logon

again. This setting can also be disabled by setting the value to 0.

Applies to: IDENTIKEY Authentication Server 3.4

KB 160017 2010 VASCO Data Security. All rights reserved.

Page 2 of 3

Reset Last Authentication Time when using IDENTIKEY 3.4 with an ODBC

data store

1. Click on the user account within the IDENTIKEY Authentication Server Webadmin:

2. Select Reset Last Authentication Time from the other actions drop down list.

Applies to: IDENTIKEY Authentication Server 3.4

KB 160017 2010 VASCO Data Security. All rights reserved.

Page 3 of 3

Resetting Last Authentication time when Active Directory is the data store.

1. Open the Active Directory Users and Computers MMC with the IDENTIKEY Authentication Server extension

2. Right click the user and select Reset Last Authentication Time