Upload
elie-balka
View
146
Download
4
Tags:
Embed Size (px)
Citation preview
Used for:
Secure User Authentication to NSN Network
resources
Validity:Coverage: Global
Location: Anywhere
Applicable for: Any terminal with a web browser
Needed hardware/software: Web browser,
RSA Software token application
Please read this before you proceed:
Replacement of your hard token with a soft token requires the following steps:
• Installing the RSA Soft Token Application on your laptop if not
already installed (Start -> Programs -> RSA -> RSA SecurID Token)
• Locating the DeviceSerialNumber generated by the RSA Soft Token
Application
• Requesting a replacement token from the NSN IT SD
• Activating the Soft Token using the RSA Soft Token Application
• Creating a pin code using the RSA Soft Token Application and the
VPN client software
Make sure that you complete all steps above as described on the next pages in
this guide.
For any questions or issues, contact [email protected]
SecurID Quick Guide – NSN Internal Employee
How to order and activate a soft token without access to the NSN Intranet
Used for:
Secure User Authentication to NSN Network
resources
Validity:Coverage: Global
Location: Anywhere
Applicable for: Any terminal with a web browser
Needed hardware/software: Web browser,
RSA Software token application
Step 1 - Install the RSA SecurID Token application from the internet if not already installed (Start -> Programs -> RSA)
3
4
5
6
7
9
4
10
SecurID Quick Guide – NSN Internal Employee
How to order and activate a soft token without access to the NSN Intranet
1. Download the RSA SecurID Token application from:
ftp://ftp.rsasecurity.com/pub/agents/RSASecurIDToken411.zip
2. Open the RSASecurIDToken411.zip file, double-click the installer
executable file RSASecurIDToken411.msi.
Do not select the file RSASecurIDTokenAuto411.msi
3. Click on the Next button.
4. Select Europe as the Place of Origin and click on the Next button.
5. Accept the terms in the License Agreement and click on the Next button.
6. Select Typical as the Setup Type and click Next –button.
7. Click on the Install button to begin the installation process.
8. Wait until the installation is completed.
9. Uncheck the “Launch RSA SecurID Software Token” checkbox.
10. Click on the Finish button.
Used for: Secure User Authentication to NSN Network resources
Validity:Coverage: Global Location: Anywhere Applicable for: Any terminal with a web browser Needed hardware/software: Web browser, RSA Software token application
Step 2 - Starting the RSA SecurID Token application to locate the Device Serial Number
1.Open the Windows Start –menu and
Click the RSA / RSA SecurID / RSA SecurID Token icon.
2.When application starts, the Import Token screen is displayed. Click on
the Token Storage Device link to display the DeviceSerialNumber. Note:
This is a calculated number, not your token serial number or the serial
number that is on a label affixed to your laptop. See note on the right
for details.
3. Copy this DeviceSerialNumber which will be needed to order your token
activation code from the RSA Self-Service Console. Be prepared to provide
this when requested.
2 3
What is a Device Serial Number?
Device Serial Number is a unique number that separates different
software token application installations from each other. It’s calculated
using your computers information and information about your
username.
When the Token seed is requested from Self Service Portal, this
unique number is bounded to the request. After that, the token can
only be installed to software token application with same Device
Serial Number.
Version 1.0 2011-08-26 Most recent version: NSN SecurID intranet pages Network Connectivity Service / User Access For internal use
SecurID Quick Guide – NSN Internal Employee
How to order and activate a soft token without access to the NSN Intranet
Used for: Secure User Authentication to NSN Network resources
Validity:Coverage: Global Location: Anywhere Applicable for: Any terminal with a web browser Needed hardware/software: Web browser, RSA Software token application
1. Create an email with the subject “I need a SecurID Soft Token – please review and approve”
2. In the body of the email, enter the text: “Please forward this email to the [email protected] with your approval that I am authorized for a SecurID token. My Device Serial Number is <Paste the Device Serial Number that you copied from the RSA Soft Token application form>
3. Send the email to your Line Manager or Business Responsible Person as identified on the phone book organization tab.
4. Line Manager will forward the token request email to [email protected] and enter the text “request approved” in the body of the email
5. Wait for a “request approved” email from the NSN IT Service Desk with your token activation code and instructions.
Step 3 – Submit a token request email for approval
Version 1.0 2011-08-26 Most recent version: NSN SecurID intranet pages Network Connectivity Service / User Access For internal use
3.
2.
SecurID Quick Guide – NSN Internal Employee
How to order and activate a soft token without access to the NSN Intranet
Line managers name is shown here
Your line manager
Used for: Secure User Authentication to NSN Network resources
Validity:Coverage: Global Location: Anywhere Applicable for: Any terminal with a web browser Needed hardware/software: Web browser, RSA Software token application
After receiving the “I need a SecurID Soft Token – please review and approve” email with approval from your Line Manager or Business
Responsible Person the NSN IT Service Desk will approve the request in the RSA Security Console. This will generate and send you an
e-mail with a token activation code and instructions how to complete the install.
Note: The Activation Code expires after 72 hours or when the activation is completed, whichever comes first.
Version 1.0 2011-08-26 Most recent version: NSN SecurID intranet pages Network Connectivity Service / User Access For internal use
SecurID Quick Guide – NSN Internal Employee
How to order and activate a soft token without access to the NSN Intranet
SecurID Software token
SecurID Software token is a small application used for secure
authentication.
The token application displays a passcode that changes once
a minute when the memorized PIN code is entered.
Note: This passcode is the token code plus your embedded pin
code. So you simply copy this and paste it in the password field
of your VPN login screen. You do not need to enter the pin code
separately as with the logging onto the VPN via a hard token.
xxxx
Step 4 – Activate your soft token
1. Start the RSA SecurID Token application.
2. Click the “Import from Web” link in the application.
• Click on “Options” then “Import Token” if “Import from
Web” is not displayed
3. If not already entered, copy/paste the CT-KIP URL from
e-mail to the “Enter URL” field.
4. Copy/paste the Activation Code from e-mail to the “Enter
Activation Code” field.
5. Click OK. Token will be imported.
6. Click OK again when Token is successfully imported.
7. Software Token is ready to be used.
Used for: Secure User Authentication to NSN Network resources
Validity:Coverage: Global Location: Anywhere Applicable for: Any terminal with a web browser Needed hardware/software: Web browser, RSA Software token application
SecurID Quick Guide
How to set initial soft token PIN code when PIN code was not set via RSA
Self-Service Console
Version 0.3 2011-08-16 Most recent version: NSN SecurID intranet pages Network Connectivity Service / User Access For internal use
1. Start the RSA SecurID Token –application.
2. Enter “0000” as the PIN code and press enter. A code is displayed:
3.
4.Launch the Cisco VPN client but do not click on the “Connect” button.
5.Enter your username and the code displayed on the token application:
6.Click OK. The VPN client requests you to enter a new PIN.
7.Please enter a PIN code (4-8 numbers), known only to you:
Step 5 - Set the PIN code for your soft token 7. Please re-enter the PIN code you just entered:
8. Wait for the displayed code to change on the soft token.
9. Click the Re-enter PIN on the soft token application, enter the PIN code you just set and press enter. A passcode is displayed:
10. Enter the passcode displayed on the soft token application into the VPN client.
11. Your PIN code is now set. You will need to use this PIN code on all subsequent uses of the software token.
0000
Your_username
18885938
71904508
Used for:
Secure User Authentication to NSN Network
resources
Validity:
Coverage: Global
Location: Anywhere
Applicable for: Any terminal with a web browser
Needed hardware/software: Web browser,
RSA Software token application
Remote Access Authentication
Quick Guide
How to use Software SecurID token with
Cisco VPN (Windows XP)
Step 1: Start the Software Token Application
1. Click Window’s ‘Start’ button
2. Select RSA -> RSA SecurID Token -> RSA SecurID Token
2.
Step 2: Start the Cisco VPN Client
1. Click Window’s ‘Start’ button
2. Select NRA Cisco VPN Client -> VPN Client
Used for:
Secure User Authentication to NSN Network
resources
Validity:
Coverage: Global
Location: Anywhere
Applicable for: Any terminal with a web browser
Needed hardware/software: Web browser,
RSA Software token application
Remote Access Authentication
Quick Guide
How to use Software SecurID token with
Cisco VPN (Windows XP)
Step 3: Enter PIN and Copy & Paste the Passcode to VPN client
1. Click Connect button in VPN Client. Wait for username/password form to appear.
2. From the RSA SecurID Token application click on the arrow next to the token list to select
your NSN soft token.
3. Enter your PIN code to RSA SecurID Token application.
4. Click the ‘right arrow’ button.
5. Copy the displayed Passcode with ‘Copy’ button.
6. Enter your NSN Intra username to VPN Client.
7. Paste the copied Passcode to VPN Client with right clicking the password field with your
mouse and selecting the ‘Paste’.
8.Press OK.
1.
4.
5. 6.
3.
8.
7.
2.
Used for:
Secure User Authentication to NSN Network
resources
Validity:
Coverage: Global
Location: Anywhere
Applicable for: Any terminal with a web browser
Needed hardware/software: Web browser,
RSA Software token application
Remote Access Authentication
Quick Guide
How to use Software SecurID token with
AnyConnect VPN (Windows 7)
Step 1: Start the Software Token Application Step 2: Start the AnyConnect VPN Client
Used for:
Secure User Authentication to NSN Network
resources
Validity:
Coverage: Global
Location: Anywhere
Applicable for: Any terminal with a web browser
Needed hardware/software: Web browser,
RSA Software token application
Remote Access Authentication
Quick Guide
How to use Software SecurID token with
AnyConnect VPN (Windows 7)
Step 3: Enter your PIN code Step 4: Click on the “OK” button
Step 5: The token passcode is displayed Step 6: Copy the token passcode
Used for:
Secure User Authentication to NSN Network
resources
Validity:
Coverage: Global
Location: Anywhere
Applicable for: Any terminal with a web browser
Needed hardware/software: Web browser,
RSA Software token application
Remote Access Authentication
Quick Guide
How to use Software SecurID token with
AnyConnect VPN (Windows 7)
Step 6: Select the VPN network Step 7: Paste your passcode to the VPN password field
Step 8: Connect to the network