Software Token (SafeNet MobilePASS)User guide

Table of Contents

1. Software token (SafeNet MobilePASS) activation................................................................................2

2. Software token (SafeNet MobilePASS) usage......................................................................................6

3. Software token (SafeNet MobilePASS) reset / change PIN..................................................................7

1. Software token (SafeNet MobilePASS) activation

This paragraph describes how to switch from a hardware-based authenticator like the RSA SecurID or Safeword Platinum tokens that are in general use in ALCATEL-LUCENT, to a software application which will provide the same functions.

In addition to the Windows PC version described here, other versions can be obtained from

the supplier. Please use this link, http://www.safenet-inc.com/support-downloads/mobilepass-download-page/

This document describes the version 8.2 (available from May 2012) on PCConfiguration and usage of the MobilePass application is very similar on other devices but presentation can vary (some buttons or displays may be slightly different).

Windows version of the software token (MobilePASS) can be downloaded here. Extract the exe file from the ZIP container and copy it on your desktop or any other folder.

Warning: the MobilePASS won’t work properly if run directly from the Zip folder.

Open the MobilePASS application on your device:

(If it prompts for a PIN code, it means it has already been activated. It has to be reset. See chapter 3.)

Click “Continue” then provide a token name (‘e.g “my token”)

(min 4 characters) And click “Activate”

Select “Manual Enrollment” then “Continue” (leave the “policy” field empty)

and note/copy the displayed Activation Code. You will need that code for the next action.

While connected to the ALCATEL-LUCENT intranet, use your browser to go to https://aaa.app.alcatel-lucent.com/sts/, where you will be asked to authenticate

with your CSL and CIP.

Note: DO NOT USE YOUR DOMAIN HEADER in the User Name field, only your CSL - e.g., johnsm NOT na02\johnsm

The web page shows a field where you have to enter the 20 (4 x 5) characters of the Activation Code. Please check the data you enter carefully to ensure it is accurate.

Press the “Start the activation” button on the web page.

A new page will appear, that describes the next steps:

The success of the enrolment is confirmed in an email that you should receive a few seconds after.

If the mail says “...Enrollment Successful. Token Serial number is XXXXXXX”, you can finalize the activation:

Return to the MobilePASS application. Click on the “Continue” button.

Next, you are prompted to enter a PIN of your choice.

Provide a 4 digit PIN code, click on “Continue”

Re-enter the PIN to confirm and click on “Continue”

The App now shows your first one-time password (OTP), which is ready for you to use.

Please note: if you are used to working with an RSA SecurID device, enter only the displayed Passcode. Do not type your PIN in front of the OTP, as was required by SecurID.

You will be prompted for the PIN each time you need to generate a new Passcode.

If the mail says there is an error. For example “AGXXXXXX RXXCX-Z2F6I-ZSMN7-T6R26 Enrollment Unsuccessful. Activation Failed, error code: 11” then you have to retry the enrolment.

It can be due to an error when typing the code on the web page. Try again with the same code if you still have it or reset the token to get a new one. See chapter 3.

2.Software token (SafeNet MobilePASS) usageWhen a passcode (One Time Password) is required (e.g. for remote access client), just launch the MobilePASS application.You are prompted for the PIN.

Enter the right PIN code, click “Continue” and then the passcode is displayed. It just has to be entered into the application (e.g. remote access) that requires it.

NB:

Differences with RSA SecureID hardware tokens: the PIN code (4 digit) has to be entered on the Mobile PASS to get the

authentication code only the authentication code (6 digits) provided by MobilePASS has to be typed in

the application (VPN client…), not the PIN. The code provided is not based on time. It’s “event” based; it means based on

the number of codes that has already been generated. differences with SafeWord hardware tokens:

The passcode is now 6 digits, not 8.

3. Software token (SafeNet MobilePASS) reset / change PIN

- If you know the PIN code, launch the application, type the PIN code and click “continue”.

A passcode is displayed and icons on the right provide additional options.

to change the PIN code

to deactivate (reset) the token. It has to be activated again.

to delete the token. Then, it has to be created and activated again.

Then click on the appropriate button and follow the instructions.

Note that performing a “deactivate” or “delete” of the token means you will need to perform the ACTIVATION process again on https://aaa.app.alcatel-lucent.com/sts/. See chapter 1.

If you don’t know the PIN code, the only option is to reset the token by entering successively ten (10) wrong PIN codes (e.g. 0000).

Then perform the activation again as described in chapter 1.

NB: on the iPhone, the buttons for PIN change and token reset are different:

=>

Other questions? FAQ are at http://all.alcatel-lucent.com/wps/portal/it/softtokenfaq