AUTHENTICATION / Confidential / 1 (2)
Prepared / Document responsible/Approved
Remote Access-Support / Jörgen Ohlsson
Date / Version / Relation
2005-05-20 / B
No.
Authentication
To be able to connect to the Intranet of Telia through remote access or VPN you need to use an authenticator- Safeword Platinum or Safeword Gold.
This is the strongest authenticator for SafeWord, providing two authentication factors, which is the combination of:
What a user knows (a PIN)
What a user has (an authenticator for generating one-time passwords)
A user first activates the authenticator with a personal identification number (PIN), which prompts the authenticator to provide a one-time, dynamic password.
The user then enters the password into the network to perform authentication.
The PIN is not vulnerable to theft or discovery through "sniffing" software.
If the token were to be stolen, the thief could not retrieve valid passwords from the token without the PIN.
Upon being reported stolen, the administrator can disable the token immediately.
The authenticators look something like this.
How to generate a password:
- By pressing “ON” you start the authenticator.
- On the display “EP/ENTR PIN” will appear. (EP = Enter PIN)
- The PIN is a 4 number code. If your PIN is 3423 then you enter 3423 and wait for the authenticator to generate a password.
(You should have received your PIN with your authenticator or by a separate envelope or mail.)
If the display shows 5AH-204never use the – sign.
The – sign is only usedto separate the digits. The password is5AH204.
Remember!
The password can only be used once.
If you do not succeed the first time, then press “ON” again followed by the PIN to generate a new password.
- 0 is always zero(Not the character O)
- 1 is always one,(Not the character L)
- 5 is always 5(Not the character S)
- 8 is always 8(Not the character B)
- H is always H(Not the character X)
- A is always A(Not the character R)
Here are the digits and characters that the authenticator generates.
0 1 2 3 4 5 6 7 8 9 A H C P E F
To logon to the VPN enter your User Name and the password then press OK.
If the display shows “_ signs that jumps around/bAd PIN” you have entered an incorrect PIN to many times and the authenticator will be locked for a while.
By pressing the correct PIN when the “EP/ENTR PIN” appears - the authenticator unlocks again.
If the display only displays “1 or 8 zeros/ERASEd” the authenticator has been erased.