F5 FirePass, Administrator'S Manual

Page: 74 / 182

Chapter 3
3 - 28
Setting Up VASCO DigiPass authentication
If the VASCO DigiPass authentication feature is licensed, the FirePass
server can authenticate using a VASCO server.
Each user is issued a security token that generates a unique and dynamically
time-limited password. The server has a similar algorithm associated with
the token’s serial number. When logging in, the user enters a static password
and a dynamic password generated by the token.
Typically, the FirePass server comes preconfigured with the VASCO token
keys. If necessary, you can import new tokens into the server from a
VASCO file.
To set up VASCO DigiPass authentication
1. Under the Server tab, click the Authentication link.
The Authentication Scheme screen opens.
2. From the Group drop-down list, choose the group that you want to
set up authentication for.
3. Click the VASCO DigiPass Authentication link at the bottom of
the panel.
The VASCO DigiPass Authentication Scheme screen opens. The
tokens are listed in the Tokens section.
4. (Optional) To import additional tokens from a VASCO file, click
the Browse button and select the file. Then, in the Encryption box,
enter the encryption key and click the Import button.
Note: To assign a token to a user, enter the token ID in the User
Details panel when you add or edit a user’s properties. (See
Manually adding user accounts, on page 3-11, or Changing user
accounts, on page 3-19.)
5. (Optional) To delete a token, select it in the Tokens section and
click the Delete Selected button.