Lenovo ThinkVantage Client Security Solution 8.3 - Manual (Page 38)

<DOMAIN_NAME_PARAMETER>IBM-2AA92582C79<DOMAIN_NAME_PARAMETER>
<USER_PW_REC_ANSWER_DATA_PARAMETER>Test1</USER_PW_REC_ANSWER_DATA_PARA
METER>
<USER_PW_REC_ANSWER_DATA_PARAMETER>Test2</USER_PW_REC_ANSWER_DATA_PARA
METER>
<USER_PW_REC_ANSWER_DATA_PARAMETER>Test3</USER_PW_REC_ANSWER_DATA_PARA
METER>
<USER_PW_REC_QUESTION_COUNT>3</USER_PW_REC_QUESTION_COUNT>
<USER_PW_REC_QUESTION_LIST>20000,20001,20002</USER_PW_REC_QUESTION_LIST>
</USER_PW_REC_STORED_PASSWORD_PARAMETER>Pass1word</USER_PW_REC_STORED_PASS
WORD_PARAMETER>
<VERSION>1.0</VERSION>
</FUNCTION>
</CSSFile>
GENERATE_MULTI_FACTOR_DEVICE_FUNCTION
This command generates the Client Security Solution multi-factor devices used for authentication. The
parameters are:
• USER_NAME_PARAMETER - The user name of the administrator.
• DOMAIN_NAME_PARAMETER - The domain name of the administrator.
• MULTI_FACTOR_DEVICE_USER_AUTH - The Client Security passphrase or Windows password to create
the user’s security keys.
<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<CSSFile=xmlns="www.ibm.com/security/CSS">
<FUNCTION>
<ORDER>0001</ORDER>
<COMMAND>GENERATE_MULTI_FACTOR_DEVICE_FUNCTION</COMMAND>
<USER_NAME_PARAMETER>myUserName</USER_NAME_PARAMETER>
<DOMAIN_NAME_PARAMETER>domainName</DOMAIN_NAME_PARAMETER>
<MULTI_FACTOR_DEVICE_USER_AUTH>myCssUserPassPhrase</MULTI_FACTOR_DEVICE_USER_AUTH>
<VERSION>1.0</VERSION>
</FUNCTION>
</CSSFile>
SET_USER_AUTH_FUNCTION
This command sets the Client Security Solution user authentication:
<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<CSSFile=xmlns="www.ibm.com/security/CSS">
<FUNCTION>
<ORDER>0001</ORDER>
<COMMAND>SET_USER_AUTH_FUNCTION</COMMAND>
<VERSION>1.0</VERSION>
</FUNCTION>
</CSSFile>
Using RSA SecurID tokens
Levering the encryption algorithm method of encrypting data, using RSA SecurID tokens in addition to Client
Security Solution will provide your enterprise with multi-factor security. Using RSA SecurID tokens, users
authenticate into networks and software using their user ID or PIN and a token device. The token device
displays a string of numbers that change every sixty seconds. This method of authentication provides a
much more reliable level of user authentication than reusable passwords.
Installing the RSA SecurID Software Token
Complete the following steps to install the RSA SecurID software:
32 Client Security Solution 8.3Deployment Guide