Managing Token Authentication

Novell BorderManager 3.7 Authentication Services enables you to use NDS or eDirectory as the database to manage token authentication. Using the NetWare Administrator utility on the administration workstation, you can perform the following management tasks:

• Creating an Authentication Container Object
• Creating an Authentication Device Object
• Importing a Token
• Manually Initializing a Token
• Locally Initializing a Token
• Assigning a Single Token
• Assigning a Series of Tokens
• Synchronizing a Token
• Unlocking a Token
• Testing Passwords

Creating an Authentication Container Object

To create an authentication container:

1. In NetWare Administrator, select Object > Create > Authentication Container.

2. Specify the name of the authentication container and click OK.

Refer to the NetWare Administrator online help for more detailed configuration instructions.

Creating an Authentication Device Object

To create an authentication device object:

1. In NetWare Administrator, select Object > Create > Authentication Device.

2. Specify the name of the authentication device and click OK.

Refer to the NetWare Administrator online help for more detailed configuration instructions.

Importing a Token

To import a token:

1. In NetWare Administrator, select the authentication container object.

2. Select Object > Details > Import Device Images and browse to the file that contains the token device image to import.

3. Click Import Images > Create Objects Now > OK.

Refer to the NetWare Administrator online help for more detailed configuration instructions.

Manually Initializing a Token

To manually initialize a token:

1. In NetWare Administrator, select the authentication container object.

2. Select Object > Details > Manual Initialization > specify the following information:

   • Profile
   • Language
   • Token serial number
   • Token initial PIN

3. Click Initialize Device > Create Object Now.

Refer to the NetWare Administrator online help for more detailed configuration instructions.

Locally Initializing a Token

To locally initialize a token:

1. In NetWare Administrator, select the authentication container object.

2. Select Object > Details > Local Initialization > specify the following information:

   • Profile
   • Language
   • Token type
   • Serial port
   • Welcome message
   • Token initial PIN

3. Click Initialize Device > Create Object Now.

Refer to the NetWare Administrator online help for more detailed configuration instructions.

Assigning a Single Token

To assign a single token:

1. In NetWare Administrator, select the authentication device object.

2. Select Object > Details > Assignment > browse to the User object to assign the token.

3. Click OK.

Refer to the NetWare Administrator online help for more detailed configuration instructions.

Assigning a Series of Tokens

To assign a series of tokens:

1. In NetWare Administrator, select the authentication container object.

2. Select Object > Details > Token Assignment > specify the following information for each token:

   • Token serial number
   • User name

3. Click Assign Now.

Refer to the NetWare Administrator online help for more detailed configuration instructions.

Synchronizing a Token

To synchronize a token:

1. In NetWare Administrator, select the authentication device object.

2. Select Object > Details > Synchronization > click OK.

Refer to the NetWare Administrator online help for more detailed configuration instructions.

Unlocking a Token

To unlock a token:

1. In NetWare Administrator, select the authentication device object.

2. Select Object > Details > Unlock Code.

3. Enter the challenge code displayed by the token > click Unlock Now.

4. Enter the response code into the token.

Refer to the NetWare Administrator online help for more detailed configuration instructions.

Testing Passwords

To test an asynchronous password:

1. In NetWare Administrator, select the authentication device object.

2. Select Object > Details > Password Tests > Asynchronous > Test Now and enter your PIN.

3. Enter the challenge code into the token.

4. Enter the password and click OK.

To test a synchronous password:

1. In NetWare Administrator, select the authentication device object.

2. Select Object > Details > Password Tests > Synchronous > Test Now > enter your PIN.

3. Enter the password and click OK.

Refer to the NetWare Administrator online help for more detailed configuration instructions.