VASCO IDENTIKEY Appliance Administrator Reference
Tangazo
Tangazo
IDENTIKEY®
Appliance
Administrator Reference
3.11.12
Appliance
Administrator Reference
3.11.12
Disclaimer of Warranties and Limitations of Liabilities
Intellectual Property
VASCO Software, documents and related materials (“Materials”) made available on the Site contain pro-
prietary and confidential information. All title, rights and interest in VASCO Software and Materials,
updates and upgrades thereof, including software rights, copyrights, patent rights, trade secret rights,
sui generis database rights, and all other intellectual and industrial property rights, vest exclusively in
VASCO or its licensors. No VASCO Software or Materials published in this Site may be downloaded,
copied, transferred, disclosed, reproduced, redistributed, or transmitted in any form or by any means,
electronic, mechanical or otherwise, for any commercial or production purpose, except as otherwise
marked or when expressly permitted by VASCO in writing.
Disclaimer
VASCO accepts no liability for the accuracy, completeness, or timeliness of Site content, or for the reli-
ability of links to and content of external or third party websites.
VASCO shall have no liability under any circumstances for any loss, damage, or expense incurred by
you, your company, or any third party arising from the use or inability to use VASCO Software or Mater-
ials, or any third party material available or downloadable from the Site. VASCO will not be liable in rela-
tion to any loss/damage caused by modification of these Legal Notices or Site content.
Reservation
VASCO reserves the right to modify these Notices and the content at any time. VASCO likewise reserves
the right to withdraw or revoke consent or otherwise prohibit use of the VASCO Software or Materials if
such use does not conform to the terms of any written agreement between VASCO and you, or other
applicable terms that VASCO publishes from time to time.
Copyright
Copyright © 2008–2016 VASCO Data Security, Inc., VASCO Data Security International GmbH. All rights
reserved.
Trademarks
VASCO®, VACMAN®, IDENTIKEY®, aXsGuard®, DIGIPASS®, CertiID®, CRONTO™, MYDIGIPASS.COM™,
the MYDIGIPASS.COM MD Lock logo, the DP+ logo, the VASCO ‘V’ logo, and the CRONTO logo are
registered or unregistered trademarks of VASCO Data Security, Inc. and/or VASCO Data Security Inter-
national GmbH in the U.S. and other countries.
VASCO reserves all rights to the trademarks, service marks and logos of VASCO and its subsidiaries.
Date last modified: 12/2/2016
Intellectual Property
VASCO Software, documents and related materials (“Materials”) made available on the Site contain pro-
prietary and confidential information. All title, rights and interest in VASCO Software and Materials,
updates and upgrades thereof, including software rights, copyrights, patent rights, trade secret rights,
sui generis database rights, and all other intellectual and industrial property rights, vest exclusively in
VASCO or its licensors. No VASCO Software or Materials published in this Site may be downloaded,
copied, transferred, disclosed, reproduced, redistributed, or transmitted in any form or by any means,
electronic, mechanical or otherwise, for any commercial or production purpose, except as otherwise
marked or when expressly permitted by VASCO in writing.
Disclaimer
VASCO accepts no liability for the accuracy, completeness, or timeliness of Site content, or for the reli-
ability of links to and content of external or third party websites.
VASCO shall have no liability under any circumstances for any loss, damage, or expense incurred by
you, your company, or any third party arising from the use or inability to use VASCO Software or Mater-
ials, or any third party material available or downloadable from the Site. VASCO will not be liable in rela-
tion to any loss/damage caused by modification of these Legal Notices or Site content.
Reservation
VASCO reserves the right to modify these Notices and the content at any time. VASCO likewise reserves
the right to withdraw or revoke consent or otherwise prohibit use of the VASCO Software or Materials if
such use does not conform to the terms of any written agreement between VASCO and you, or other
applicable terms that VASCO publishes from time to time.
Copyright
Copyright © 2008–2016 VASCO Data Security, Inc., VASCO Data Security International GmbH. All rights
reserved.
Trademarks
VASCO®, VACMAN®, IDENTIKEY®, aXsGuard®, DIGIPASS®, CertiID®, CRONTO™, MYDIGIPASS.COM™,
the MYDIGIPASS.COM MD Lock logo, the DP+ logo, the VASCO ‘V’ logo, and the CRONTO logo are
registered or unregistered trademarks of VASCO Data Security, Inc. and/or VASCO Data Security Inter-
national GmbH in the U.S. and other countries.
VASCO reserves all rights to the trademarks, service marks and logos of VASCO and its subsidiaries.
Date last modified: 12/2/2016
Table of Contents
1. Introduction 10
1.1. IDENTIKEY Appliance Documentation Set 10
2. Configuration Tool: Field Listings 11
2.1. System 11
2.2. Settings 13
2.3. IDENTIKEY Authentication Server Settings 22
3. SSL Cipher Suites 50
3.1. Default Security Levels for SSL Cipher Suites 50
4. RADIUS Dictionary Format 52
5. IDENTIKEY Authentication Server Administration Web Interface Field Listings 54
5.1. User Properties 54
5.2. User Attributes 63
5.3. User Reports 64
5.4. Administrative Privileges 65
5.5. Find/Manage DIGIPASS 76
5.6. DIGIPASS Properties 77
5.7. DIGIPASS Application Tab 82
5.8. Audit Message 84
5.9. Policy Properties 87
5.10. Pre-Loaded Policies 110
5.11. Client Properties 116
5.12. Back-End Server Properties 119
5.13. Organizational Unit Property Sheet 124
5.14. Reports Properties 125
5.15. Servers – Global Configuration 126
Table of Contents
IDENTIKEY Appliance 3.11.12 - Administrator Reference iii
1. Introduction 10
1.1. IDENTIKEY Appliance Documentation Set 10
2. Configuration Tool: Field Listings 11
2.1. System 11
2.2. Settings 13
2.3. IDENTIKEY Authentication Server Settings 22
3. SSL Cipher Suites 50
3.1. Default Security Levels for SSL Cipher Suites 50
4. RADIUS Dictionary Format 52
5. IDENTIKEY Authentication Server Administration Web Interface Field Listings 54
5.1. User Properties 54
5.2. User Attributes 63
5.3. User Reports 64
5.4. Administrative Privileges 65
5.5. Find/Manage DIGIPASS 76
5.6. DIGIPASS Properties 77
5.7. DIGIPASS Application Tab 82
5.8. Audit Message 84
5.9. Policy Properties 87
5.10. Pre-Loaded Policies 110
5.11. Client Properties 116
5.12. Back-End Server Properties 119
5.13. Organizational Unit Property Sheet 124
5.14. Reports Properties 125
5.15. Servers – Global Configuration 126
Table of Contents
IDENTIKEY Appliance 3.11.12 - Administrator Reference iii
5.16. Servers – List 132
5.17. LDAP Back-End Authentication 132
6. Reporting 134
6.1. Standard Reports 134
6.2. Query Definitions 135
6.3. Query Filters 136
7. Importing Users with Comma-Separated Value Files 141
8. Performance Monitoring 143
8.1. CSV File Format 143
8.2. Filters 144
9. System Monitoring 149
9.1. SNMP Trap Parameters 149
9.2. MIB 151
10. Login Permutations 153
10.1. Login Policy Settings 154
10.2. Login Permutations Tables 154
11. Open Port Numbers on Firewall 159
11.1. Incoming Ports 159
11.2. Outgoing Ports 160
12. Audit Message Types 161
12.1. Messages 161
13. Error and Status Codes 181
13.1. IDENTIKEY Appliance Error Codes 181
13.2. DIGIPASS Authentication for Windows Logon Error Messages 190
13.3. VACMAN Controller Error Codes 191
13.4. Console Wizard Error Codes 204
Table of Contents
IDENTIKEY Appliance 3.11.12 - Administrator Reference iv
5.17. LDAP Back-End Authentication 132
6. Reporting 134
6.1. Standard Reports 134
6.2. Query Definitions 135
6.3. Query Filters 136
7. Importing Users with Comma-Separated Value Files 141
8. Performance Monitoring 143
8.1. CSV File Format 143
8.2. Filters 144
9. System Monitoring 149
9.1. SNMP Trap Parameters 149
9.2. MIB 151
10. Login Permutations 153
10.1. Login Policy Settings 154
10.2. Login Permutations Tables 154
11. Open Port Numbers on Firewall 159
11.1. Incoming Ports 159
11.2. Outgoing Ports 160
12. Audit Message Types 161
12.1. Messages 161
13. Error and Status Codes 181
13.1. IDENTIKEY Appliance Error Codes 181
13.2. DIGIPASS Authentication for Windows Logon Error Messages 190
13.3. VACMAN Controller Error Codes 191
13.4. Console Wizard Error Codes 204
Table of Contents
IDENTIKEY Appliance 3.11.12 - Administrator Reference iv
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
Tangazo
Zinazohusiana
