Registration & Re-Registration
Registration Wizard
7
Figure 2-4
Re-Registration Mandate
Click
Re-register
to launch the Registration wizard. If you need to re-register for a password-based
account, follow the instructions under “Password Registration” on page 9. If you need to re-register for a
token-based account and you have been issued your token, follow the instructions under
“Token
Registration” on page 11.
If you can’t complete re-registration, click
Log Off Windows. This could occur if you receive the prompt before you receive your token. The next time you boot up, you can authenticate in pre-Windows with your existing Symantec Endpoint Encryption account, but when you try to log on to Windows, you will receive the same re-registration mandate.
Reboot to Register
On computers without Opal-compliant drives, the 65th, 129th, 193rd, 257th, 321st, 385th, 449th, 513th,
577th, 641st, 705th, 769th, 833rd, 897th, and 961st user cannot register right away. These users receive the following message upon logging onto Windows or attempting to launch the User Client Console.
Figure 2-5 Registration Process Cannot be Started Now
Only registered users and Client Administrators can complete Pre-Windows authentication.
To register after receiving the “Registration process cannot be started now” message
1
Find someone with valid Symantec Endpoint Encryption credentials, i.e., a registered user or a Client
Administrator.
2 Have the registered user or Client Administrator shut down and log on to Pre-Windows.
3 Log on to Windows using your own credentials.
4 Click
Register Now
to initiate the registration process.
Registration Wizard
Basics
The Registration wizard guides you through the registration process. This wizard is the same for both registration and re-registration. The steps in this process will vary according to how your computer has been configured.
If you click
Cancel
in the Registration Wizard, your Symantec Endpoint Encryption account will not be created. You will be prompted to confirm that you really want to cancel.
To display Quick Help, click the help icon . The Quick Help pane appears. To close the Quick Help pane, click the help icon again.
8 Registration & Re-Registration
Registration Wizard
Registration Password
You may need a password to begin the registration process. If you don’t see the Registration Password
panel, you don’t need to enter a registration password. Skip to the next section ( “Preferred Authentication
Method” on page 8).
Figure 2-6 Registration, Registration Password
A registration password is a way for your administrator to limit the number of users allowed to register on this computer. The registration password is not your Symantec Endpoint Encryption password; the registration password admits you to the registration process.
You should have received this password ahead of time. If you do not have the password, call your help desk or click
Cancel
.
Otherwise, type the password and click
Next
.
If the password is accepted, the next panel in the registration process appears.
If the password is not accepted, a message appears and you will need to correct it before you can proceed.
Re-enter the password then click
Next
to resubmit it, or click
Cancel
. The
Back
button is not available.
Preferred Authentication Method
If your administrator has chosen to allow you to authenticate with either a password or a token and Single
Sign-On is not enabled, the Preferred Authentication Method panel will be displayed. If the Preferred
Authentication Method panel is not displayed, refer to the section that corresponds to your authentication method:
■
If you authenticate with a password, skip to “Password Registration” on page 9.
■
■
If you authenticate with a token, skip to
“Token Registration” on page 11.
If you don’t authenticate (automatic authentication), skip to
“Completion” on page 15.
Figure 2-7
Registration, Preferred Authentication Method
Registration & Re-Registration
Registration Wizard
9
Select the method of authentication that you prefer and select
Next
. If you select
Password
, continue to the next section. If you select
Token
, skip to “Token Registration” on page 11.
Note: While the Registration Wizard will only escort you through your preferred authentication method, you can add a second method using the User Client Console at any time following registration.
Password Registration
Basics
The password registration process will vary according to whether or not you have Single Sign-On enabled.
Single Sign-On Enabled: Windows
If Single Sign-On is enabled, you will see a Single Sign-On panel. If you don’t see this panel, skip to “Single
Sign-On Not Enabled” on page 10.
Figure 2-8 Password Registration, SSO Enabled, Windows Account Information
10 Registration & Re-Registration
Registration Wizard
The credentials associated with your Windows account will be used for your Symantec Endpoint
Encryption account.
Click
Next
to continue. If you have Novell installed, continue reading. If not, skip to
“Authenti-Check” on page 13.
Single Sign-On Enabled: Novell
If your organization uses Novell and you are logged on to Novell, you should see the Novell Single Sign-On
panel. If not, skip to “Authenti-Check” on page 13.
Figure 2-9 Password Registration, SSO Enabled, Novell Account Information
Full Disk will synchronize your Windows and Novell accounts with your Symantec Endpoint Encryption account so that you only have to log on once each time you turn on your computer.
Click
Next
to continue. Skip to
“Authenti-Check” on page 13.
Single Sign-On Not Enabled
If Single Sign-On is not enabled, the Account Password panel will be displayed.
Figure 2-10
Password Registration, Account Password
Registration & Re-Registration
Registration Wizard
11
The Account Password panel will display the account information of the user currently logged on to
Windows.
Define a password that you can remember, so that you don’t have to write it down. Longer passwords are more secure than short passwords. Include a variety of characters, including upper and lowercase letters mixed with numbers and special characters, if allowed. When you create a password, think of one that is hard to guess; for example, don’t use a commonly known fact, such as your spouse’s name, or a fact that can be easily researched, such as your mother’s maiden name.
Follow the guidelines shown below the
Confirm password
field, if any. The password must be within the
Password length
specified. The
Symbols allowed
parameter identifies which of the symbols on your keyboard may be included in the password. The
Include at least
field identifies the number of required symbols, uppercase letters, lowercase letters, and/or digits that your password must contain, if any.
Note: When creating your password, only enter characters that can be typed from the keyboard. Using alternate input methods—such as typing from the ALT+numeric keypad—may create characters that you will not be able to enter in the pre-Windows environment. If you have questions about keyboard use, please ask your Client Administrator.
Tab to or click on the
Confirm password
field and type your password again. Click
Next
.
If the password does not meet the requirements, the requirement that the password does not meet will be displayed in red. If the
Password
field and
Confirm password
field do not match exactly, the password fields turn red.
Token Registration
Basics
Token registration may require up to three steps:
1
Token insertion (
“Token Insertion” on page 12),
2
PIN entry ( “Single Sign-On Not Enabled” on page 12),
12 Registration & Re-Registration
Registration Wizard
3
Certificate Selection (
“Certificate Selection” on page 13).
Token Insertion
If your token was inserted when the Registration Wizard began, you do not see a token-insertion prompt
panel. Skip to the next section ( “Single Sign-On Not Enabled” on page 12).
Otherwise, you will be prompted to insert your token. For details about token insertion and errors, refer to
Appendix B “Token Usage & Error Messages” on page 57.
Single Sign-On Not Enabled
If Single Sign-On is not enabled, you will be prompted to type your PIN. If you aren’t prompted, skip to the
next section “Token Account Credentials” on page 12.
Figure 2-11 Token Registration, Account PIN
Type your PIN in the
PIN
field, then click
Next
.
Token Account Credentials
For both SSO and non-SSO accounts, the next registration panel confirms the token information that
Symantec Endpoint Encryption will use to authenticate you.
Figure 2-12
Token Registration, Information Summary
Registration & Re-Registration
Registration Wizard
13
Verify the information and click
Next
.
Certificate Selection
If the
Select Certificate
window does not appear, skip to
“Authenti-Check” on page 13.
Figure 2-13 Select Certificate
Select your Symantec Endpoint Encryption certificate by clicking on the appropriate row, then click
OK
.
Continue to the next section.
If you don’t know which of the certificates listed are valid, contact the appropriate administrator.
If you receive an error message, refer to Appendix B “Error Messages” on page 58.
Authenti-Check
If you have Authenti-Check enabled, then you will see the Authenti-Check panel. If you don’t see this panel
skip to the next section ( “Completion” on page 15).
14 Registration & Re-Registration
Registration Wizard
Figure 2-14
Registration, Authenti-Check
Authenti-Check is a self-help recovery tool that allows you to gain access to your computer and/or the User
Client Console if you forget your password, PIN, or token. It can also be used if you get a new token and need to change tokens.
One Authenti-Check question is always required. Up to three questions may be required, depending on how your system is configured.
Questions identified as required must be entered and answered.
If a question is identified as optional, you are encouraged to enter a question and an answer. The more question-answer pairs you have, the more secure your Full Disk access is. For maximum security, enter three questions and three answers.
Sometimes your Policy Administrator predefines questions for you. These questions you cannot change and you must provide answers for.
Try to choose answers that other people cannot guess easily. Follow similar guidelines for your questions and answers as you would for your password. Create pairs that:
■
Do not contain commonly known information,
■
■
Are longer rather than shorter, and
You can remember without writing down.
See Table 2.1 for examples of secure and less secure questions.
Table 2-1 Authenti-Check Sample Questions
Secure
Who was your favorite teacher?
Who was your childhood hero?
What is the street name where your favorite relative lived?
Less Secure
What is your social security number?
Where were you born?
What is your mother’s maiden name?
Registration & Re-Registration
Registration Wizard
15
Do not let others watch you enter them. Unlike passwords, the question-answer pairs are not displayed as asterisks or dots on your screen; they display in plain text.
Note: When creating your question/answer pairs, only enter characters that can be typed from the keyboard. Using alternate input methods—such as typing from the ALT+numeric keypad—may create characters that you will not be able to enter in the pre-Windows environment. If you have questions about keyboard use, please ask your Client Administrator.
When you have entered all questions and answers, click the
Next
button to submit your information. If your questions and answers fall within established guidelines, your information will be accepted; otherwise, fields that contain errors are highlighted in red. Correct any highlighted information then click
Next
.
Completion
The final Registration panel notifies you that your Symantec Endpoint Encryption user account is active.
Figure 2-15
Registration Success
Click
Finish
to complete the wizard and dismiss the panel. This will result in the launch of the User Client
Console.
See Chapter 5
“User Client Console” on page 35 for information about using the User Client Console.
16 Registration & Re-Registration
Registration Wizard
