APC BIOM34-EC - Manual (Page 14)

WARNING: This setting is more convenient in that
whenever you go to a site remembered with this setting,
you will bypass any authentication procedure and gain
instant access to the site. But should you leave your
system unattended, unlocked, with your OmniPass user
logged in, anyone using your system can browse to your
password protected sites and gain automatic access.
If you uncheck both boxes in Settings for this Password
Site, OmniPass will prompt you for your "master
password" (or authentication device). Once you have
authenticated with OmniPass your credentials will be
filled in to the site login prompt, but you will have to
click the website OK, Submit, or Login button to gain
access to the site. Click Finish to complete the remember
password procedure. The site location, the credentials
to access the site, and the OmniPass authentication
settings for the site are now stored in OmniPass' secure
database. The OmniPass authentication settings ( Settings
for this Password Site) can always be changed in Vault
Management (see Chapter 3.5 Password Management).
3.3 Logging in to a Remembered Site …
Whether or not OmniPass prompts you to authenticate when
you return to a remembered site is determined by Settings for
this Password Site (see 3.2.2) and can be changed in Vault
Management (see 3.5). The authentication methods required
for access to password protected resources are determined
by Authentication Rules (see Chapter 6.2 User Settings).
The following cases are applicable to using OmniPass to login
to: Windows, remembered websites, and all other password
protected resources.
3.3.1 With Master Password -- Once you return to a site you
have remembered with OmniPass, you may be presented
with a "master password" prompt. Enter your "master
password" and you will be allowed into the site.
3.3.2 With Multiple Authentication Methods -- Or you may be
presented with an OmniPass authentication prompt that
has several different authentication methods. If multiple
authentication methods are shown at the authentication
prompt, you may have to authenticate multiple times
(fingerprint reader AND SmartCard reader) to gain access.
NOTE: It may take a few tries for a fingerprint reader to
capture your fingerprint. Try to place your fingertip on
the sensor as you did during fingerprint enrollment.
3.3.3 Logging into Windows with a Biometric Device -- When logging
into Windows with a biometric device, the fingerprint
capture window will now appear next to the Windows
Login screen. Place your enrolled fingertip on the sensor
to authenticate. You will be simultaneously logged into
Windows and OmniPass. The capture window will also
appear if you have used Ctrl-Alt-Del to lock a system with
Windows 2000, or Windows XP, and the biometric
device can be used to log back in as stated above.
NOTE: If a machine is locked and OmniPass detects a
different user logging back in with a fingerprint, the first
user will be logged out and the second user logged in.
In Windows XP, your login options must be set either
for classic login, or for fast user switching and logon
screen to be enabled to use your fingerprint to log on to
Windows. To change this go to Control Panel, select User
Accounts and then click Change the way users log on or off. If
your Windows screensaver is password protected, the
fingerprint capture window will now appear next to
screensaver password dialog during resume. You can
authenticate to your screensaver password prompt with
your enrolled finger.
3.4 OmniPass Can Also Remember …
Examples have been limited to websites so far, but OmniPass
can remember any authentication event that prompts you to
login. So long as you choose to keep some form of Taskbar Tips,
OmniPass will always notify you when you have an opportunity
to "remember a password".
3.5 Password Management
OmniPass provides an interface that allows you to manage
your passwords. To access this GUI, double-click the OmniPass
key in the system tray. Click Vault Management; OmniPass will
prompt you to authenticate. Once you gain access to Vault
Management, click Manage Passwords under Vault Settings. You
will see the Manage Passwords interface, with a list of your friendly
names.
You can view the credentials stored for any remembered
website by highlighting the desired resource under Password
Protected Dialog and clicking Unmask Values. Should a password
be reset, or an account expire, you can remove stored
credentials from OmniPass. Highlight the desired resource
under Password Protected Dialog and click Delete Page. You will
be prompted to confirm the password deletion.
The two check boxes in Manage Passwords govern whether
OmniPass prompts you to authenticate or directly logs you
into the remembered site (see 3.2.2).
OmniPass may have difficulty properly recognizing some
authentication prompts. This is because software developers
are free to deviate from commonly accepted Windows
application programming standards. Under these
circumstances, users can take advantage of the Password
Wizard feature to remember passwords. The Password Wizard
can only be used in conjunction with password protected
applications, and it will not work with websites. If OmniPass
fails to remember a set of credentials, you will be given the
option to run the Password Wizard. You can use the Password
Wizard to manually assign your user credentials into the fields
of the authentication prompt.
Finally, you can manage passwords for all your OmniPass user
identities using the Identities drop-down box (see Chapter 3.6
OmniPass User Identities for more information).
3.6 OmniPass User Identities
To create and manage identities, double-click the OmniPass key
in the system tray. Click Vault Management; OmniPass will prompt
you to authenticate. Once you gain access to Vault Management,
click Manage Identities under Vault Settings (see Figure 27). You
can only manage the identities of the currently logged in
OmniPass user.
To add a new identity, click New Identity or double-click <Click
here to add a new identity>. Name the new identity and click OK.
Click
Apply to ensure the settings are saved. You can now
switch to the new identity and start remembering passwords.
To delete an identity, highlight the identity you want to delete
and click Delete Identity; click Apply to ensure the settings are
saved. When you delete an identity, all the remembered sites
and password protected dialogs associated with the identity
are lost.
To set the default identity, highlight the identity you want as
default and click Set as Default; click Apply to ensure the settings
are saved. If you log in to OmniPass with a biometric device,
you will automatically be logged in to the default identity for
that OmniPass user. You can choose the identity with which
you are logging in if you login using "master password".
3.6.1 Choosing User Identity during Login -- To choose your identity
during login, type your
username in the User Name: field.
Press <TAB> and see that the Domain: field self-
populates. Click the Password: field to bring the cursor
to it, and you will see the pull-down menu in the Identity:
field become available. Select the identity you wish to
login as and then click OK to login.
M.16
Biometric Password Managers