Raritan CCA-0N-V5.1-E, Руководство администратора

Страница: 397 / 420

379
CC-SG can be configured to point to an RSA RADIUS Server that
supports two-factor authentication via an associated RSA Authentication
Manager. CC-SG acts as a RADIUS client and sends user authentication
requests to RSA RADIUS Server. The authentication request includes
user id, a fixed password, and a dynamic token code.
In This Chapter
Supported Environments for Two-Factor Authentication ...................... 379
Two-Factor Authentication Setup Requirements .................................. 379
Two-Factor Authentication Known Issues ............................................. 379
Supported Environments for Two-Factor Authentication
The following two-factor authentication components are known to work
with CC-SG.

RSA RADIUS Server 6.1 on Windows Server 2003

RSA Authentication Manager 6.1 on Windows Server 2003

RSA Secure ID SID700 hardware token
Earlier RSA product versions should also work with CC-SG, but they
have not been verified.
Two-Factor Authentication Setup Requirements
The following tasks must be completed for two-factor authentication
setup. Consult the RSA documentation.
1. Import tokens.
2. Create a CC-SG user and assign a token to the user.
3. Generate a user password.
4. Create an agent host for the RADIUS server.
5. Create an agent host (type: Communication Server) for CC-SG.
6. Create a RADIUS CC-SG client.
Two-Factor Authentication Known Issues
The RSA RADIUS “New PIN” mode that requires a challenge
password/PIN will not work. Instead, all users in this scheme must be
assigned fixed passwords.
Appendix H
Two-Factor Authentication