rsa securid appliance setup administration n.
Download
Skip this Video
Loading SlideShow in 5 Seconds..
RSA SecurID Appliance Setup & Administration PowerPoint Presentation
Download Presentation
RSA SecurID Appliance Setup & Administration

Loading in 2 Seconds...

play fullscreen
1 / 14

RSA SecurID Appliance Setup & Administration - PowerPoint PPT Presentation


  • 661 Views
  • Uploaded on

RSA SecurID Appliance Setup & Administration. Michal Červinka SOFT-TRONIK, a.s. michal.cervinka @soft-tronik.cz. More about HW. Intel Pentium 4 Celeron 2.53 GHz Processor. Intel 865G + ICH5 Chipset Intel 2x 1Gigabit & 2x 10/100 Ethernet Controller

loader
I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
capcha
Download Presentation

PowerPoint Slideshow about 'RSA SecurID Appliance Setup & Administration' - arleen


An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript
rsa securid appliance setup administration
RSA SecurID ApplianceSetup & Administration

Michal Červinka

SOFT-TRONIK, a.s.

michal.cervinka@soft-tronik.cz

more about hw
More about HW
  • Intel Pentium 4 Celeron 2.53 GHz Processor.
  • Intel 865G + ICH5 Chipset
  • Intel 2x 1Gigabit & 2x 10/100 Ethernet Controller
  • 512MB DDR400 Memory Module (Support Memory up to 4GB.)
  • 1x3.5" SATAII 80GB HDD
  • 1 X Keyboard Port, 1 X VGA Port
  • 3 X USB 2.0 interface (you can use USB memory dev.)
  • 3 X Cooling FAN (2 - System / 1 - Power Supply)
  • Power Supply 350W, Cons. 160W
  • 1U Rack Mount Form Factor
more about sw
More about SW
  • Hardened Windows 2003 Server Standard Edition
  • RSA Authentication Manager 6.1
  • RSA Authentication Agent 6.1 for Windows (local auth.)
  • RSA Authentication Agent 5.6 for IIS
  • Web Administration Application
  • RSA Radius Server 6.1
  • SNMP Agent Plug-in
initial setup
Initial Setup
  • appliance address displayed on LCD, address your laptop and connect to https://192.168.100.100:8098
  • user name administrator and the temporary password [RSAAppliance] (including the brackets)
  • choose primary / replica setup
  • go through the QuickSetup wizzard
    • set date and time
    • change administrator password
    • hostname, domainname, IP settings
    • provide license
    • import token records
    • assign token to administrator and test
    • enable authentication and finish
understanding admin accounts
Understanding Admin Accounts
  • Administrator – standard admin, always requires token, consumes a license
  • AdminWebUser – internal (web server) use, don’t change
  • rsaLocalAdmin – emergency access only
  • Create more …
basic appliance administration
Basic Appliance Administration
  • simple, intuitive web-based administration interface (https://<appliance>:8098)
  • “Administrator” – instant standard admin account
  • Token authentication is a “must”
advanced appliance administration
Advanced Appliance Administration
  • Windows Server administration via RDP over SSL
  • Traditional Authentication Manager admin tools via RDP over SSL
  • Traditional AM remote console
emergency access
Emergency Access
  • turn-off
  • connect keyboard+monitor
  • turn-on
  • Login as rsaLocalAdmin
  • run db-admin
resetting to factory defaults
Resetting to Factory Defaults
  • turn off
  • turn on
  • on the first beep turn the dial clockwise
  • You will loose all the upgrades and optional installations
backup
Backup
  • Online-backup script: c:\authmgr\scripts\rotatebackup.bat
  • Creates MS .cab file
  • By default runs once a week (windows scheduler)
  • Accessible at https://<appliance>:8098/admin/ACE/backup_dwnld.asp
restore
Restore
  • Copy .cab to the appliance and unpack
  • Stop AM services
  • Create empty databases (run sdnewdb.exe)
  • Load databases (server and log)
  • Owerwrite sdconf.rec
  • Create windows admin account if needed
  • Restart the appliance
patches and upgrades
Patches and Upgrades
  • OS
  • AM components
    • Download the upgrade bundle, extract
    • Run setup
    • Reboot if needed
monitoring
Monitoring
  • E-mail Alerts (Event Log)
  • SNMP Traps
    • Authentication Manager
    • Authentication Agent
    • Radius
  • Scheduled restart