RSA Security 6.1 Manual de usuario descargar pdf (Pagina 17)

100

101

RSA SecurID Software Token 4.1 Administrator’s Guide

2: Installing the Application 17

If your users log on to the VPN client before logging on to Windows (referred to as

“prelogon” or “start before logon”) or you run your VPN client as a service, you

cannot use the default per-user database. You must instead configure your installation

to create a single database that contains all of the tokens stored on the hard drive.

This is required for the following reasons:

• When a user logs on to the VPN client before logging on to Windows, the user

context is not known (the user cannot be identified), because the user has not yet

logged on to Windows. Therefore, the SecurID desktop application cannot locate

the user’s token.

• When a VPN client is running as a service, a specific user cannot be identified and

that user’s token cannot be located because the VPN client is running as System

instead of as a user.

Important: Due to the user context issues, the RSA SecurID Software Token for

Windows supports prelogon VPN authentication and running the VPN client as a

service for only one user who has been issued only one software token. However, the

application supports a single user with multiple tokens if the VPN client application

provides the option of selecting a token from a list.

To create a single database, you must install the desktop application from the msiexec

command line, using the SETSINGLEDATABASE property. This property creates a

single database in the All Users directory. When the user starts prelogon to the VPN

client, for example, the VPN client retrieves a token from All Users.

If necessary, you can create the single database in a location other than the default

location. For more information, see “Command Line Properties

” on page 23.

Important: Use the SETSINGLEDATABASE property only on single-user machines.

Do not use this property if multiple users share a computer, because doing so gives all

users access to all tokens stored in the single database.

The following table lists the VPN clients that have been qualified with RSA SecurID

Software Token for Windows and identifies the scenarios that require installing a

single token database or installing either a per-user database or a single database.

VPN Client Prelogon

VPN Client

Running as a

Service

VPN Client Used

After Windows

Logon (not running

as a service)

Comments

Check Point Single database Single database Single database

Cisco Single database Single database Either per-user or single

database

VpnMode policy

must be set. See

“Customization

Policies” on

page 15.

Juniper Odyssey Single database Single database Single database

1 2 ... 12 13 14 15 16 17 18 19 20 21 22 ... 100 101

Comentarios a estos manuales

Sin comentarios

RSA Security 6.1 Manual de usuario Pagina 17

Comentarios a estos manuales

Relacionado con productos y manuales para Servidores RSA Security 6.1