DKey User

There are two types of USB Keys. One is an Open Authentication Key to generate authentication-free users. A user can insert an Open Authentication Key into a PC and enter the USB Key password to pass authentication on the IAG

The other is a Permission Key to generate privileged users. A user generated by a Permission Key has audit-free and control-free privileges. The online behaviors of this user will not be audited, and no control policy is effective for the user. A Permission Key is authentication-free, and the usage method is the same as the green USB Key. You can identify USB Keys by color.

Example: Add a privileged USB Key user and demonstrate the login process.

1. On the DKey User page, click Add. It will display the Add DKey User window shown in the following figure.

Click Download[A37], install the program, and insert a USB Key into the PC. Next, set the username and description.

In Type, select Permission Key.

Set the password needed when the user gets authenticated with a USB Key. In Permissions, select the privileges of the user. For example, you can select No Audit and No Control.[A38]

2. Click OK[A39]. The user information starts to be written into the USB Key.
3. Install the USB Key authentication client. The program is available at http://Gateway IPaddress/Dkeyauth.exe.

You can also download the USB Key client on the authentication page.

4. After installing the USB Key client, turn on the PC. In the displayed dialog box, enter the password and select Save Password. Then you can insert a USB Key without entering the password for future login.

5. Click Login. An authentication success message will pop out in the lower right corner if the entered password is correct.

You logged into the IAG successfully.

1. USB Key authentication involves saving authentication information in a USB Key, and then a user can use the USB Key for authentication. USB Key authentication has the highest priority. When a USB Key is inserted into a PC on the intranet authenticated on the IAG in another mode, the PC will access the Internet with the USB Key user’s permission. The Auth Method must be set on the page displayed after choosing Authentication Policy for common users. However, USB Key authentication users can be directly set on the page displayed after selecting Advanced > USB Key Users.

Custom Attributes

When embedded user attributes on the IAG cannot meet the requirements, you can set extended user attributes, namely, custom attributes. For example, an ID card number management attribute is required if you want to manage users by ID card number.

Click Add and add an attribute.

Name: Name of the attribute to be added.

Type: It can be set to Text or SN.

If Text is selected, you can manually set the attribute value when editing the user, as shown in the following figure.

If SN is selected, set several sequence values. For example, set the Name to Gender, and set sequence values to Male and Female.

You can select an attribute value when editing the user.

The sequence values can be left blank. Other modules will automatically collect attribute values.