Celestix MSA 4200 Series Installation Guide

Celestix HOTPin ApplianceInstallation Guide

Celestix HOTPin Appliance Installation Guide Page | 6 Appliance Naming Conventions Your appliance name indicates the main components included in its

Celestix HOTPin Appliance Installation Guide Page | 96 Product Reclamation and Recycling Celestix Networks is committed to environmentally responsi

97 | Page Celestix HOTPin Appliance Installation Guide Network Information Worksheet Form Network Information Worksheet Form Property Network Inform

7 | Page Celestix HOTPin Appliance Installation Guide This section provides a brief overview to help system administrators become familiar with the

Celestix HOTPin Appliance Installation Guide Page | 8 Token Devices A token device, also referred to as a hard token device or hard token, generates

9 | Page Celestix HOTPin Appliance Installation Guide Illustration 2 – General Setup Overview End users can complete steps 4-5 without administrat

Celestix HOTPin Appliance Installation Guide Page | 10  Import  Token key download through client software  Single sign-on User management inc

11 | Page Celestix HOTPin Appliance Installation Guide accounts to HOTPin (if not syncing with AD or enabling the HOTPin User Website to allow self-

Celestix HOTPin Appliance Installation Guide Page | 12 Install the Appliance The guide provides a system administrator with concise instructions fo

13 | Page Celestix HOTPin Appliance Installation Guide Network Settings The following general conditions apply to the instructions contained in this

Celestix HOTPin Appliance Installation Guide Page | 14 Network Information Worksheet (example) Property Network Information (example) Explanation Co

15 | Page Celestix HOTPin Appliance Installation Guide 1. Select a secure location where only authorized personnel can access the appliance. 2. Mo

Celestix HOTPin Appliance Installation Guide Page | 16 Please Note: Your appliance hardware may look somewhat different from the example. Most dep

17 | Page Celestix HOTPin Appliance Installation Guide Front Panel Controls Overview The front panel contains an LED display and jog dial. These con

Celestix HOTPin Appliance Installation Guide Page | 18 To connect your appliance to a power source: 1. Connect the power cable from your power sour

19 | Page Celestix HOTPin Appliance Installation Guide Configure the HOTPin System This section provides instructions for the appliance setup and c

Celestix HOTPin Appliance Installation Guide Page | 20 Configure Initial Access The appliance can be deployed in a network that does not use DHCP, b

21 | Page Celestix HOTPin Appliance Installation Guide If you need to configure other adapters, you can repeat the instructions above as necessary,

Celestix HOTPin Appliance Installation Guide Page | 22 The main HOTPin screen is accessed when you click the HOTPin in the menu bar: Illustration 5

23 | Page Celestix HOTPin Appliance Installation Guide  Status – indicates Up for adapters with connected cables; indicates Down for either an unu

Celestix HOTPin Appliance Installation Guide Page | 24  Time zone: select a city that represents your time zone from the drop menu.  Automatical

25 | Page Celestix HOTPin Appliance Installation Guide To add or change server or domain settings: Important: You will need to reboot the server to

i Celestix HOTPin Installation Guide Document Number: HPN0030-946-003 Updated: June 28, 2013 Part Number: (CCD) 1005-00000015 Celestix HOTPin 2FA s

Celestix HOTPin Appliance Installation Guide Page | 26 3. Enter a User name and Password in the text fields provided. 4. Click OK. 5. You will be

27 | Page Celestix HOTPin Appliance Installation Guide 5. Enter a send address in the From field. 6. Enter your network’s SMTP gateway name or IP

Celestix HOTPin Appliance Installation Guide Page | 28  Configure AD Synchronization – if you want to streamline user management by linking the HO

29 | Page Celestix HOTPin Appliance Installation Guide To upload and configure your HOTPin license: Save the license file (license.xml) to your ap

Celestix HOTPin Appliance Installation Guide Page | 30 General Tab The general system settings provide configuration options for user-related functi

31 | Page Celestix HOTPin Appliance Installation Guide OTP messages the next time they need to authenticate. The send-ahead code will be valid for t

Celestix HOTPin Appliance Installation Guide Page | 32  Enable event log trimming – select to delete Event Log items that do not fall with the spe

33 | Page Celestix HOTPin Appliance Installation Guide Enable the User Website The HOTPin User Website is an appliance-hosted site on the local area

Celestix HOTPin Appliance Installation Guide Page | 34 User Site DisabledAdministrator Tasks for User Account SetupCreate accountProvide user site U

35 | Page Celestix HOTPin Appliance Installation Guide Website Access Once enabled, default access to the site is: https://(appliance host name|IP):

Celestix HOTPin Appliance Installation Guide Page | ii Contents Introduction ...

Celestix HOTPin Appliance Installation Guide Page | 36 to manage their HOTPin accounts. The AD Settings tab provides the configuration that allows H

37 | Page Celestix HOTPin Appliance Installation Guide  User Account – where users view/edit user account information.  Token Key – where users

Celestix HOTPin Appliance Installation Guide Page | 38  Allow users to login with HOTPin OTP – enable login with a HOTPin token code (OTP).  All

39 | Page Celestix HOTPin Appliance Installation Guide  Import key configuration over the network – required for the client software Import from N

Celestix HOTPin Appliance Installation Guide Page | 40 Note: Validation occurs when you click the OK button after configuring settings.  Primary s

41 | Page Celestix HOTPin Appliance Installation Guide the platform (for example, the iOS client must be downloaded from Apple’s App Store).  The

Celestix HOTPin Appliance Installation Guide Page | 42 Illustration 10 - AD Synchronization Screen The following topics provide an overview to expl

43 | Page Celestix HOTPin Appliance Installation Guide the exclusion list; otherwise they will be deleted after the next sync interval. Sync Process

Celestix HOTPin Appliance Installation Guide Page | 44 If an account in AD is: The sync update action in HOTPin will be: If an account in HOTPin i

45 | Page Celestix HOTPin Appliance Installation Guide Click Next. 4. On the Sync Settings screen, complete the following to add/update 5.user ac

1 | Page Celestix HOTPin Appliance Installation Guide Introduction Celestix Networks delivers an exceptional combination of perimeter security featu

Celestix HOTPin Appliance Installation Guide Page | 46 Click Next. 6. On the Exclude Users screen, you will designate AD accounts that 7.should n

47 | Page Celestix HOTPin Appliance Installation Guide HOTPin User Website Compatibility If you deploy both the AD Synchronization and HOTPin User W

Celestix HOTPin Appliance Installation Guide Page | 48 Select Manual Sync. 2. Click Next. 3. Click Finish. 4. Synchronization results are displ

49 | Page Celestix HOTPin Appliance Installation Guide Illustration 12 - Token Keys Screen The token keys list provides the following summary infor

Celestix HOTPin Appliance Installation Guide Page | 50 Please Note: The import function uses an OATH-compliant Portable Symmetric Key Container (PSK

51 | Page Celestix HOTPin Appliance Installation Guide To access token provider properties: Navigate to HOTPin|Providers. 1. Select a provider fr

Celestix HOTPin Appliance Installation Guide Page | 52 Test Provider Feature Each of the providers described in subsequent sections has a test featu

53 | Page Celestix HOTPin Appliance Installation Guide static information to adapt customizable fields as necessary. Replaceable tags are defined in

Celestix HOTPin Appliance Installation Guide Page | 54  Subject – identifies the message; HOTPin OTP is the default static text.  Message – mess

55 | Page Celestix HOTPin Appliance Installation Guide The following subsections explain the items on the Provider Properties page. Illustration 15

Celestix HOTPin Appliance Installation Guide Page | 2 NPS RADIUS client configurations can now be transferred to and from HOTPin server for backup o

Celestix HOTPin Appliance Installation Guide Page | 56 HTTP samples: http://sms.server.com/service.aspx?ph={phone}&text={code} http://sms.server

57 | Page Celestix HOTPin Appliance Installation Guide To access SMS provider properties: Navigate to HOTPin|Providers. 1. Select the SMS OTP Pro

Celestix HOTPin Appliance Installation Guide Page | 58 and 30000 (30 seconds). Depending on the modem speed, this value may need to be adjusted to p

59 | Page Celestix HOTPin Appliance Installation Guide See the previous section Test Provider Feature for information about using the tool to check

Celestix HOTPin Appliance Installation Guide Page | 60 HOTPin User Accounts The HOTPin user information database is accessed through the Users sect

61 | Page Celestix HOTPin Appliance Installation Guide Manage User Accounts From the Users screen, accounts can be added manually or imported from a

Celestix HOTPin Appliance Installation Guide Page | 62  Token Override – Yes indicates the user account can log in without a token code.  Token

63 | Page Celestix HOTPin Appliance Installation Guide  Creating a new key removes the user’s PIN; when PIN’s are required, users will need to res

Celestix HOTPin Appliance Installation Guide Page | 64 To add new users: Navigate to HOTPin|Users. 1. Click New. 2. The New User screen opens. 3

65 | Page Celestix HOTPin Appliance Installation Guide phone, PC) unless an external key is then assigned. o OTP Email Provider – uses email or ema

3 | Page Celestix HOTPin Appliance Installation Guide For example, to access appliance static routes, hover over the Network option on the main menu

Celestix HOTPin Appliance Installation Guide Page | 66 To edit user properties: Navigate to HOTPin|Users. 1. Select one or more users from the li

67 | Page Celestix HOTPin Appliance Installation Guide  Email – edit the user's standard email or email-to-SMS address. The email address fie

Celestix HOTPin Appliance Installation Guide Page | 68  Internal HOTPin key for client software or token provider.  External Key for imported ke

69 | Page Celestix HOTPin Appliance Installation Guide For each of the options below, you will need to select the edit control checkboxes for the fe

Celestix HOTPin Appliance Installation Guide Page | 70 Illustration 22 - Edit Group of User Token Tab View or edit the following properties for sel

71 | Page Celestix HOTPin Appliance Installation Guide Click Import. 2. On the Import Users screen, click Next. 3.The import wizard takes you thr

Celestix HOTPin Appliance Installation Guide Page | 72 Please Note:  You will not be able to add more users than are allowed by your user license

73 | Page Celestix HOTPin Appliance Installation Guide  Drill Down – displays a complete list of Active Directory information that can be expanded

Celestix HOTPin Appliance Installation Guide Page | 74 The following examples show the minimum and maximum information to be included in the users f

75 | Page Celestix HOTPin Appliance Installation Guide Click OK. 7. Click OK to confirm assignment. 8. Click OK save changes and return to the H

Celestix HOTPin Appliance Installation Guide Page | 4 Verify Package Contents The following identifies standard package items that may be included w

Celestix HOTPin Appliance Installation Guide Page | 76 The install file will download to the local machine. After downloading and installing the cli

77 | Page Celestix HOTPin Appliance Installation Guide Key Configuration Formats The token key configuration comes in three formats, a file, QR code

Celestix HOTPin Appliance Installation Guide Page | 78 Settings page, but administrators can override the default on the Download Key screen. QR Cod

79 | Page Celestix HOTPin Appliance Installation Guide See the Key Configuration Transfer topic below for information about providing the string to

Celestix HOTPin Appliance Installation Guide Page | 80 Create a System Image Once you have set up your appliance and configured the HOTPin applicat

81 | Page Celestix HOTPin Appliance Installation Guide Illustration 25 - System Imaging Screen To create a system image: Navigate to Maintenance|

Celestix HOTPin Appliance Installation Guide Page | 82 LGV The LGV instructions below require direct access to the Celestix appliance. To create an

83 | Page Celestix HOTPin Appliance Installation Guide Update Software The Software Update Service allows administrators to keep appliance software

Celestix HOTPin Appliance Installation Guide Page | 84 Appendices Use the links to jump to a topic:  HOTPin Glossary  Web User Interface Content

85 | Page Celestix HOTPin Appliance Installation Guide HOTPin Glossary Note: Links in bold type navigate out of the Glossary. Active Directory grou

5 | Page Celestix HOTPin Appliance Installation Guide Appliance Hardware Features Appliance Configurations Your appliance is a member of a versa

Celestix HOTPin Appliance Installation Guide Page | 86 custom token provider See token provider. default software token The client software token ap

87 | Page Celestix HOTPin Appliance Installation Guide HOTPin HOTPin is a system that provides two-factor authentication services for Celestix appli

Celestix HOTPin Appliance Installation Guide Page | 88 Next Code The name of the screen button in client software applications that users click to g

89 | Page Celestix HOTPin Appliance Installation Guide portal page The web page a user will access to enter network system/HOTPin credentials. Also

Celestix HOTPin Appliance Installation Guide Page | 90 Settings The HOTPin server application web user interface page where administrators can acces

91 | Page Celestix HOTPin Appliance Installation Guide token key The HOTPin component that contains a user’s encryption configuration information. C

Celestix HOTPin Appliance Installation Guide Page | 92 Web User Interface Content Overview The web UI menu structure is outlined below. Use it to qu

93 | Page Celestix HOTPin Appliance Installation Guide Additional Features For information about configuring the following features, see the HOTPin

Celestix HOTPin Appliance Installation Guide Page | 94 API Extensions The following features have sample code libraries in the HOTPin SDK.  Agent

95 | Page Celestix HOTPin Appliance Installation Guide Safety Precautions  Do not overload the AC supply branch circuit that provides power to th