RSA SecurID Ready Implementation Guide

Transcription

1 RSA SecurID Ready Implementation Guide Last Modified: November 8, Partner Information Partner Name Vircom Inc. Web Site Product Name VOP Radius Version & Platform & Windows 2000, 2003 Product Description VOP Radius is a RADIUS based Authentication, Authorization and Accounting server. It allows Network Managers, ISPs, and Remote Access Services Providers to monitor and centralize "authentication", "authorization" and "accounting" of local and roaming users. VOP Radius is a robust, high-performance RADIUS server application optimized to run in a multiple-cpu Windows 2000 environment for cost-effective scalability. VOP Radius also keeps database maintenance to a minimum, with flexible ODBC schema support that allows VOP to authenticate by reading directly from 3rd party accounting/billing packages, NT SAM files, LDAP, UNIX password, any ODBC database and the RSA SecurID based servers. Product Category RADIUS Server 2. Contact Information Sales Contact Support Contact charles.akkerman@vircom.com support@vircom.com Phone ext Web 1

2 3. Solution Summary One of the great challenges for network managers, Internet Service Providers (ISPs) and remote access service providers is to secure their traditional and wireless networks. A key requirement for anyone deploying them is in authentication ensuring that access is open to anyone entitled to use the network and blocked to those who aren't. A VOP Radius and RSA SecurID authentication solution offers: Extra-strong network security through RSA SecurID two-factor authentication Multi-threaded design & multi-cpu support Background monitoring with VOP Watch for continuous uptime Authentication caching and fallback Seamless integration with many of the top billing and accounting systems The advantage of VOP Radius is in its flexible integration with many different technologies, from e- solution products such as RSA SecurID authentication, to Voice-over IP and ISP Appliances; this ease of integration combined with the quality of Vircom product has enabled Vircom to form several important strategic alliances. Feature Details Authentication Methods Supported Native RSA SecurID RSA Authentication Agent Library Version Version # 6.0 [364] RSA Authentication 5 Locking Yes (Mandatory) Replica RSA Authentication Manager Support Full Replica Support (Mandatory) Secondary RADIUS Server Support Yes (One Secondary Server) Location of Node Secret on Client None stored RSA Authentication Agent Host Type Net OS RSA SecurID User Specification Designated users RSA SecurID Protection of Partner Product Administrators No RSA Software Token Integration No 2

3 .4. Product Requirements Hardware requirements Component Name: CPU make/speed required Memory HD space Intel Pentium 266 MHz processor or better (Windows 2000 Server) Intel Pentium 733 MHz processor or better (Windows 2003 Server) At least 256 Megabytes per processor 5 MB for RSA Authentication Agent for Windows Additional 1 MB per 1,000 users 16 MB for Vircom VOP Radius Server Software requirements Component Name: Operating System Windows 2000 Server Windows 2003 Server Version (Patch-level) 3

4 5. RSA Authentication Manager Configuration Perform the following steps to set up the computer on which Vircom VOP Radius Server is installed as an Agent Host within the RSA Authentication Manager s database. 1. On the RSA Authentication Manager computer, go to Start > Programs > RSA ACE/Server, and then Database Administration - Host Mode. 2. On the Agent Host menu, choose Add Agent Host. o o o In Name, type the hostname of the computer. In Network address, type the IP address of the computer. For Agent Type, select Net OS Agent. Note: Please reference the RSA Authentication Manager documentation for detailed information on this and other configuration parameters within this screen. Subsequently, you can also select the Help button at the bottom of the screen. 4

5 6. RSA Authentication Agent Configuration Perform the following steps to set up the computer on which Vircom VOP Radius is installed as an Agent Host. 1. On the same computer as Vircom VOP RADIUS Server is installed, launch RSA Authentication Agent installation. 2. In the RSA ACE/Agent for Windows dialog, select as a minimum the Local Authentication Client component. Note: Please reference the RSA Authentication Agent documentation for detailed information on this and other configuration parameters within this screen. Subsequently, you can also select the Help button at the bottom of the screen. 5

6 7. Vircom VOP Radius Server Authentication Configuration Perform the following steps to set up Vircom VOP Radius Server for RSA SecurID Authentication Open Vircom VOP Radius Server console, go to Start > Programs > Vircom > VOP Radius > Configuration. 2. Under Radius Server tab, select first RSA Authentication Manager (SecurID) option and then perform Setup. Note: Please reference the Vircom VOP Radius documentation for detailed information on this and other configuration parameters within this screen. Subsequently, you can also select the Help button at the bottom of the screen. 6

7 Perform the following steps to use Vircom VOP Radius Test Client to test RSA SecurID Authentication. 1. Under Clients tab, select Add in order to define VOP Radius Test Client on VOP Radius Server. 2. In the Radius Client Definition dialog, define VOP Radius Test Client as follows: 7

8 8. Vircom VOP Radius Test Client Configuration Perform the following steps to use Vircom VOP Radius Test Client to test RSA SecurID Authentication To launch Vircom VOP Radius Test Client go to the Program Files\Vircom\Radius directory. 2. Launch VOPTest utility and setup VOP Radius Test Client as follows: 8

9 1. Enter Username and Password and select Start. 2. There could be multiple challenges from the RSA authentication manager. Every challenge from the Authentication Manager will be displayed. Enter your answer in the Password field and select Continue. 9

10 8. Certification Checklist Date Tested: November 5, 2004 Tested Certification Environment Product Platform (OS) Product Version RSA Authentication Manager Windows 2003 Version 6.0 RSA Authentication Agent Windows 2003 Version 6.0 Vircom VOP Radius Server Windows 2003 Version Test ACE RADIUS 1 st time auth. (node secret creation) Pass New PIN mode: System-generated Non-PINPAD token Pass N/A PINPAD token Pass N/A User-defined (4-8 alphanumeric) Non-PINPAD token Pass N/A Password Pass N/A User-defined (5-7 numeric) Non-PINPAD token Pass N/A PINPAD token N/A Software token Pass N/A Deny 4 digit PIN Pass N/A Deny Alphanumeric Pass N/A User-selectable Non-PINPAD token Pass N/A PINPAD token Pass N/A PASSCODE 16 Digit PASSCODE Pass N/A 4 Digit Password Pass N/A "Pin-less" TokenCode Pass N/A Next Token code mode Non-PINPAD token Pass N/A PINPAD token Pass N/A Software Token API Authentication New PIN mode N/A N/A 8 Digit PIN with 8 Digit TokenCode N/A N/A Failover Pass N/A User Lock Test (RSA ACE Lock Pass Function) No RSA ACE/Server Pass N/A EF Pass, Fail or N/A (N/A=Non-available function) 10