Alcatel-Lucent OmniAccess 3500 User manual

OmniAccess 3500
Nonstop Laptop Guardian
Release 1.6
End User Reference Guide (HSPA)
Document Version: 022.01
Part No.060246-00 Rev. A
Published: 09.21.2008

Alcatel-Lucent Proprietary
Copyright © 2008 Alcatel-Lucent. All rights reserved. This document may not be
reproduced in whole or in part without the express written permission of Alcatel-
Lucent. This document is subjected to any change without notice. Alcatel-Lucent ®
and the Alcatel-Lucent logo are registered trademarks of Alcatel-Lucent. All other
trademarks are the property of their respective owners.

Table of Contents
Welcome...........................................................................................1
Overview of OmniAccess 3500 NLG Card Features..........................................1
System Configuration.......................................................................2
Common Operations .............................................................................2
How do I use my laptop? .....................................................................2
How do I log into my laptop? ................................................................2
How do I interpret the state of the card LEDs?...........................................3
How do I interpret the state of OmniAccess 3500 NLG tray icon......................4
OmniAccess 3500 NLG Tray Icon..........................................................4
How do I switch Off (On) the 3G modem on my card?...................................5
How do I control the power state of the OmniAccess 3500 NLG Card? ...............5
How do I access the OmniAccess 3500 NLG client GUI? .................................6
OmniAccess 3500 NLG Client window menu options...................................7
OmniAccess 3500 NLG Client window....................................................8
How do I connect to the company network?............................................ 11
How do I manually change my serving network interface? ........................... 12
What if my 3G plan is not unlimited? .................................................... 12
How do I select my roaming and network preferences?............................... 13
How do I connect from a public hotspot?................................................ 14
Authentication and Security.................................................................. 14
RADIUS only: How can I access the network using RSA SecureID? ................... 14
First RSA SecureID login.................................................................. 14
Subsequent RSA SecureID logins ........................................................ 17
How do I manage my personal firewall? ................................................. 18
Allowing an application through the firewall......................................... 18
Viewing personal firewall settings...................................................... 19
Removing an application from the firewall list ...................................... 20
How do I secure my sensitive data? ...................................................... 20
Using a laptop that is configured for Smart Card login ............................. 21
Driver installation for Preboot Loading................................................ 22
Card, Laptop and SIM .......................................................................... 24
How do I remove the card from my laptop?............................................. 24
How to upgrade modem firmware?....................................................... 24

How do I insert SIM in OmniAccess 3500 Nonstop Laptop Guardian Card? ......... 25
How to take out the SIM (Subscribers Identity Module) from OmniAccess 3500
Nonstop Laptop Guardian Card?........................................................... 25
What if my laptop is lost or stolen? ...................................................... 25
What if my laptop is locked? .............................................................. 25
One Time Password (OTP) .................................................................... 27
Unlocking laptop using One Time Password (OTP)................................... 27
Secure connectivity under OTP ......................................................... 28
Uninstalling the OmniAccess 3500 NLG client software............................. 29
How to terminate the OTP mode of operation? ........................................ 30
How do I get help?........................................................................... 30
Technical Specifications ...................................................................... 31
LED Specifications........................................................................... 31
Radio Frequency and Electrical Specifications ......................................... 31
Environmental and Mechanical Specifications.......................................... 32
Software and Additional Features ........................................................ 32
Regulatory Information........................................................................ 33
Regulatory Notices .......................................................................... 33
Safety and Notices ............................................................................. 35
Important Notice ............................................................................ 35
Safety and Hazards.......................................................................... 35
Battery Information......................................................................... 35
Appendix: How to check if card is a defunct? ............................................. 37
Appendix: Error Messages..................................................................... 38

End-User Reference Guide
1
Welcome
Welcome to the OmniAccess 3500 Nonstop Laptop Guardian Release 1.6 End-User
Reference Guide. This guide will introduce you to the many functions of the
OmniAccess 3500 Nonstop Laptop Guardian (NLG) card and its operation.
For instructions on how to install or upgrade your card and the client software, see the
OmniAccess 3500 Nonstop Laptop Guardian Release 1.6 Card Quick Start Guide. It is
recommended to have the Windows XP Service Pack 3 (SP3) patch installed for
Windows XP on your laptop.
Overview of OmniAccess 3500 NLG Card Features
The OmniAccess 3500 NLG card keeps your laptop within the security perimeter of
your company’s network and provides the same user experience at all times,
irrespective of where you are.
The card supports the following functions:
•Secure connectivity to your company’s network irrespective of your laptop’s
location and without requiring user intervention.
•Single sign-on – Just use your domain authentication credentials for secure
remote access to the enterprise network.
•Automatic switchovers to the next best network interface if the company’s
network can no longer be reached using the existing interface.
•Easy manual switching of network interface serving the connection to your
company’s network when the laptop senses a surrounding access network with
better performance.
•Option to use the OmniAccess 3500 NLG card as a smart card. You just need to
enter a PIN (instead of domain credentials) to securely access your company’s
network.
•Integrated Personal Firewall to protect your laptop from attackers and to restrict
the set of applications that are allowed to access the network.
•Encrypted volume for storage of sensitive data in your laptop’s hard disk.
Configuration and management of the encrypted volume are fully transparent to
you (no passwords to enter and maintain). The OmniAccess 3500 NLG Release 1.6
supports volume encryption for Truecrypt versions 4.3a, 5.1a, and 6.0a.
•Protection of the data stored in your laptop in case it is lost or stolen. Your IT
administrator can remotely lock the laptop or destroy the keys that are required
for decryption of the encrypted volume contents.
•Integration of common patch management applications (Microsoft SMS, PatchLink
Update).
•The same laptop can be shared by multiple users if so configured by the IT
administrator.
•Interoperation with full hard disk encryption solutions.

OmniAccess 3500 Nonstop Laptop Guardian Release 1.6
2
SYSTEM CONFIGURATION
The OmniAccess 3500 NLG card works with Windows-based laptops with the following
minimum configuration:
•CPU: X86 1GHz
•Memory: 512 MB
•Free hard disk space: 1 GB
•Operating system: Windows XP Professional (Service Pack 3 patch is
recommended), or Tablet edition
•One PC Cardbus slot
Note:- Windows XP Home edition can also be used, but only if the laptop is
configured for RADIUS authentication.
The OmniAccess 3500 NLG card and client software present the following interfaces
for interaction with the end user:
•OmniAccess 3500 NLG client GUI
•OmniAccess 3500 NLG tray icon
•LEDs on the OmniAccess 3500 NLG card
•Radio On/Off button on the OmniAccess 3500 NLG card.
Common Operations
The following sections shows you how to perform basic operations with your
OmniAccess 3500 NLG card and with the graphical user interface of the client software
that comes with the card. (For installation procedure refer to OmniAccess Nonstop
Laptop Guardian Release 1.6 Card Quick Start Guide)
How do I use my laptop?
You can keep using your laptop as always, with no extra steps required. Your
OmniAccess 3500 NLG card automatically keeps your laptop connected to your
company’s network whenever network connectivity is available. The OmniAccess 3500
NLG tray icon displays the status of your connection.If your administrator has
configured an encrypted volume for your laptop, the OmniAccess 3500 NLG
automatically mounts it to your file system.
Only a few specialized operations require you to access the OmniAccess 3500 NLG
client GUI on your laptop. Many of the client GUI commands can also be accessed by
right-clicking on the tray icon.
How do I log into my laptop?
Important: - The laptop login procedure varies depending on the authentication
method that your administrator has configured for your user account. The following
options are available:

End-User Reference Guide
3
•Domain (Default) - You log into your laptop by entering your Windows Domain
username and password on the Windows logon prompt. The procedure also gives
you access to your company’s network, whether you are connected from within
the premises of your company or from a remote location.
Note: If you are logging into your Windows domain for the first time after
installing the OmniAccess 3500 NLG client software (your laptop has no cached
credentials), please wait for the light of the card LED to turn amber before
entering your Windows Domain username and password.
•Smart Card: At the Windows logon prompt, press the Ctrl-Alt-Backspace key
combination to display the PIN prompt. Enter your PIN to start using the laptop
and access your corporate network. Note that the smart Authentication works
only if you are using the keyboard of your laptop, any external keyboard may not
work. Please contact your administrator if you don't know the PIN.
Note: If your user account is configured for smart-card login, the Windows logon
prompt shows the message “Please insert the card”. Hitting the Ctrl-Alt-
Backspace key combination is equivalent to physically inserting/extracting a
smart card in/from your laptop.
If the card is coming up from sleep mode then wait until the card's NLG LED
stops blinking and gives a steady light before entering authentication
credentials.
•Domain and Smart Card: Your user account may be configured for both
authentication methods. In this case you choose your preferred authentication
procedure every time you login.
How do I interpret the state of the card LEDs?
There are two LEDs on the OmniAccess 3500 NLG card as described below:
Figure 1: OmniAccess 3500 NLG Card (HSPA)

OmniAccess 3500 Nonstop Laptop Guardian Release 1.6
4
•3G Modem LED can be in one of the following states:
oNo light: 3G modem is off.
oSlow-blinking amber light: 3G modem is on.
oFast-blinking yellow light: 3G modem is transmitting data.
•NLG LED can be in one of the following states:
oNo light: Card is in sleep mode or off.
oSolid red light: Card is up, VPN tunnel is down.
oSolid amber light: Tunnel is up but not authenticated. Only management traffic
can flow across the Card and the Gateway but no user traffic.
oSolid green light: Card is up, VPN tunnel is up and the user has been
authenticated. Both user and management traffic can flow.
Note: To receive the 3G signal the external antenna of the card must be raised."
How do I interpret the state of OmniAccess 3500 NLG tray icon
OMNIACCESS 3500 NLG TRAY ICON
You find an icon with the Alcatel-Lucent infinity logo added to your laptop’s icon tray.
The color of the icon provides visual indication of the current status of your
connection to the enterprise network (roll over the icon with your mouse to have a
more detailed status description displayed):
Figure 2: OmniAccess 3500 NLG tray icon colors
•Purple icon — You have full access to your company’s network. The mouse-
rollover pop-up message shows the type of access network in use and the
strength of the 3G signal.
•Yellow icon — The card is connected to the OmniAccess 3500 NLG gateway in
your company’s network, but you don’t have access to the network. Only
management transactions can take place between the card and the gateway. The
mouse-rollover pop-up message shows the type of access network in use and the
strength of the 3G signal. This happens only when a valid user is not logged into
the laptop.
•Red icon — there is no connectivity between the card and your company’s
network or an error has occurred in the operation of the card. The mouse-
rollover pop-up message will show further information about the error condition,
such as:
oNot Connected

End-User Reference Guide
5
oRadio timeout along with the time left over if the 3G modem has been turned
off.
oLaptop is working unguarded under the effect of the One-Time-Password. It
will also show the duration left till you can continue using the laptop. (See
section One Time Password (OTP.
How do I switch Off (On) the 3G modem on my card?
In some environments (e.g. on board of airplanes that are landing or taking off)
regulatory restrictions require that all radio equipments shall be turned off. The
OmniAccess 3500 NLG card allows you to selectively turn off the integrated 3G Radio
Modem allowing you to continue using the laptop and the functionality provided by the
OmniAccess 3500 NLG card except for 3G connectivity.
Figure 3: OmniAccess 3500 NLG card (HSPA)
To toggle the power state (turn Off or On) of the 3G Radio modem, push the Radio On-
Off button located on the front of the card with the tip of a ballpoint pen.
Note: The power state of the 3G modem is always remembered throughout a reboot
event. After the laptop or the card reboots the 3G modem is in the same power state
as before the reboot started.
How do I control the power state of the OmniAccess 3500 NLG Card?
As your laptop goes into Standby/Hibernate/Shutdown state with the card plugged
in, or as the card is removed from the laptop, the card automatically switches to
sleep mode (shutdown) in 10 minutes if the 3G modem is on and in 1-2 minutes if the
3G modem is off to preserve the integrate battery charge. Your card automatically
powers on when it is plugged into a laptop that has power.

OmniAccess 3500 Nonstop Laptop Guardian Release 1.6
6
However if you need to manually shut down the power to the card for the reasons
like shipping then it can be done by any of the method listed below:
•Take the card out of the laptop (see also How do I remove the card from my
laptop??) Press and hold the Radio On/Off button for 5 seconds. It will turn off
the card. The power will restore automatically when inserted into a powered
laptop.
•Press the Reset switch (accessible only when the card is removed from the
laptop) to turn OFF the power to card completely.
Figure 4: OmniAccess 3500 NLG card
How do I access the OmniAccess 3500 NLG client GUI?
You can open the OmniAccess 3500 NLG client GUI in one of the following ways:
•Double-click on the OmniAccess 3500 NLG desktop icon.
•Double-click on the OmniAccess 3500 NLG Tray icon at the Notification area.
•Click Start > Programs > OmniAccess 3500 NLG Client Programs > Alcatel-
Lucent > OmniAccess 3500 NLG > OmniAccess 3500 NLG Client.
The OmniAccess 3500 NLG Client Window appears (shown on the next page)

End-User Reference Guide
7
Figure 5: OmniAccess 3500 Nonstop Laptop Guardian (NLG) client window
OMNIACCESS 3500 NLG CLIENT WINDOW MENU OPTIONS
The menu bar at the top of the OmniAccess 3500 NLG Client window contains the
following menus:
•NLG — Management of the OmniAccess 3500 NLG card. Available options:
oConfigure: Configuration of basic parameters for operation of the OmniAccess
3500 NLG card (name of the gateway designated for remote connectivity and
certificates needed for establishment of the IPsec tunnel).
oPersonal Firewall Settings: Configuration of the personal firewall that resides
in the OmniAccess 3500 NLG card.
oRetrieve Logs: Retrieves both card and the laptop logs and deposits in a folder
named as NLGLogs on the desktop. If the Winzip is installed on the laptop then
it automatically creates the zip file named as NLGLogs.zip
oReset Card: Reboot the card without having to remove it from the laptop. This
command works only if the connection between the laptop and the card is fully
functional.
oCard Upgrade: Upgrades OmniAccess 3500 Nonstop Laptop Guardian Card.
oCard Information: View the card configuration.
oClose: Hide the client GUI window.
•3G — Management of the 3G wireless modem. Normal operation of the
OmniAccess 3500 NLG card does not require the functions that are accessible
from this menu. Available options:

OmniAccess 3500 Nonstop Laptop Guardian Release 1.6
8
oPreferences: Management of preferences for Roaming, Bearer, and Network
oUnblock SIM: The end user can unlock the SIM.
oReset SIM PIN: The end user can reset the SIM PIN.
oNew Profile: The end user can create a profile to connect to the network with
compression selection for IP Header, data and Authentication type.
oOpen Profile: The end user can open an existing profile.
oDelete Profile: The end user can delete an existing profile.
•Advanced — This menu is not active (grayed out) during normal operation. It can
only be accessed by your wireless provider for servicing purposes.
•Help — Support Information. Available options:
oUser Manual: Access help documentation (Adobe Acrobat Reader must be
installed in the laptop to view the documentation).
oAbout OmniAccess 3500 NLG Client – Displays the software version running on
the laptop.
OMNIACCESS 3500 NLG CLIENT WINDOW
The OmniAccess 3500 NLG Client window contains the following sections:
•The Interfaces section lists all network interfaces that are available for
connectivity to your company’s netwrok. A green lightning bolt symbol is added
to the icon of the network interface that currently serves the access connection.
A red diagonal cross symbol is added to the icons of the available network
interfaces that are currently not serving the access connection. You can view
configuration and status information for an interface by clicking on the
corresponding icon.
Figure 6: Interfaces section of the OmniAccess 3500 NLG Client window
•The Interface Information section displays information about the interface that
is currently highlighted in the Interfaces section.

End-User Reference Guide
9
Figure 7: Interface Information section of the OmniAccess 3500 NLG Client window
•The VPN Connection Information section displays parameters for the VPN tunnel
(if established); the authentication status of the end user and the name of the
gateway to which the end user is currently connected. This tab also displays your
IP Address, Login Status , card Status.
Enterprise Connectivity: displays OUTSIDE_ENTERPRISE i.e the laptop has a
tunnel established to the WAN interface of the gateway and if it shows as
INSIDE_ENTERPRISE than the laptop has a tunnel established to the LAN interface
of the gateway.
Figure 8: VPN Connection Information section of the OmniAccess 3500 NLG Client window
•The Enterprise Connection Mode section provides access to the controls that are
required to connect to your company’s network, including the manual selection
of the serving interface. Available Options:
Figure 9: Enterprise Connection Mode section of the OmniAccess 3500 NLG Client window
oNormal: To manually connect to the company network, please select any of
the available network interfaces listed under Interfaces section and press the
“Connect” button.
oHotspot: If you want to connect over a paid network (e.g. Wi-Fi hotspots)
where additional authentication needs to be performed then please select the
desired interface (Wi-Fi or Ethernet), check the HotSpot radio button and then

OmniAccess 3500 Nonstop Laptop Guardian Release 1.6
10
press ‘Authenticate and Connect’ button next to it. While establishing
connection via hotspot if you get either "Action Cancelled" or "The page cannot
be displayed" window then try refreshing the browser page. For more on
connecting to public. (See also How do I connect from a public hotspot?)
oSSL VPN Access: Situations where the OmniAccess 3500 NLG card cannot reach
the company’s gateway because IPSec traffic is blocked by the visited network,
end user can establish connection to the company’s SSL VPN server by selecting
available loop back or wireless interfaces from the Interfaces section and
pressing the “Enable” button to get an access to the company’s SSL VPN portal.
•The 3G section provides control for and information about the 3G modem that is
integrated in the OmniAccess 3500 NLG card. Available Options:
Figure 10: 3G Section of the OmniAccess 3500 NLG Client window
oRadio ON/OFF: The 3G modem integrated in the OmniAccess 3500 NLG card
can be switched On or Off from the toggle switch located at the center of the
OmniAccess 3500 NLG card. A small window in this section will show the
current status of the 3G modem. “Radio ON” status means the modem is On
and connection over 3G are available. “Radio OFF” status means the modem is
Off and connection over 3G cannot be established. To change the status,
please toggle the switch on the Card.
oAuto 3G Connect: If the check box is checked then the connection over 3G
interface will be made automatically if required. Otherwise you will be
prompted before connecting over 3G.
o3G Status: Pressing of this button will open up a new screen displaying more
detailed information about 3G modem and its status. The content of this screen
will be different based on the type of OmniAccess 3500 NLG card used as shown
in Figure 11. You would not require this information for normal operation. It is
only useful if you are facing any problem related to connecting over 3G.

End-User Reference Guide
11
Figure 11: 3G Properties window
oSignal Strength: Number of bars displays the percentage of signal strength.
oStatus: Displays Roaming and current band information.
oNetwork Information: Displays Network type, network name etc.
oHardware Details: displays version related information about the hardware,
firmware, model type and manufacturer.
oDevice information: Displays cards information.
oSession Information: displays the status of the current session.
How do I connect to the company network?
If the OmniAccess 3500 NLG card has been properly activated and configured and at
least one of the network interfaces has connectivity to the Internet, the OmniAccess
3500 NLG will automatically connect you to your company’s network over a secure
tunnel. The Interfaces section of the client GUI window will show the green lightening
bolt symbol next to the interface that is currently serving the network connection.
Be sure that you are logged into your laptop with the user ID and password (NT Domain
credentials) provided by your IT administrator for access to your company’s network.
If you use a different set of credentials to log into your laptop, you will see the
lightening bolt color as yellow and you will have no access to your company’s network.

OmniAccess 3500 Nonstop Laptop Guardian Release 1.6
12
Depending on network conditions, access to your company’s network may not be
immediately available after you log into your laptop. The appearance of the lightening
bolt symbol will indicate when the secure tunnel to your company’s network is
established.
After your laptop boots up, one of the following three network interfaces, in the order
of priority given below, is used for establishing a connection:
1. Ethernet on your laptop
2. Wi-Fi on your laptop
3. 3G wireless on your OmniAccess 3500 NLG card
A lower-priority interface is used if no connectivity is available for the higher-priority
one(s).
Once a connection has been established, the serving interface does not change unless
the corresponding access network becomes unavailable (in which case the OmniAccess
3500 NLG automatically establishes a new connection over the available access
network with the highest priority) or you switch it manually.
How do I manually change my serving network interface?
If you are connected to your company’s network through the 3G modem on your
OmniAccess 3500 NLG card and a Wi-Fi access point or an Ethernet outlet become
available near you, you may want to switch your serving interface to experience faster
network access. To manually switch from one interface to another, simply select the
desired interface in the Interfaces section of the OmniAccess 3500 NLG Client window
and click Connect in the Enterprise Connection Mode section (or simply double-click
on the desired interface). The Status bar will show the progress in the establishment
of the new connection.
What if my 3G plan is not unlimited?
If you do not want the OmniAccess 3500 NLG to automatically use the 3G connection
(for example, because your 3G service provider charges you based on traffic), uncheck
the Auto 3G Connect checkbox in the 3G section of the OmniAccess 3500 NLG Client
window. If the system subsequently needs to connect via 3G, the following pop-up
window appears:
Figure 12: Auto 3G prompt window
Click Yes or No, depending on whether you want to use the 3G interface to connect to
your company’s network.

End-User Reference Guide
13
If you are connected to your company’s network through the 3G modem on your
OmniAccess 3500 NLG card and you want to drop the 3G connection without replacing
it with another connection, select the OmniAccess 3500 NLG card in the Interfaces
section of the OmniAccess 3500 NLG Client window and click the Disconnect button
(the Disconnect button is available only if the Auto 3G Connect option is not set).
Note: The setting of the Auto 3G Connect checkbox is overridden when the 3G
connection is initiated by the OmniAccess 3500 NLG gateway (at times when the
laptop may be powered off or not already connected to the gateway).
How do I select my roaming and network preferences?
To avoid paying the extra connectivity fees that wireless service providers different
than yours may charge when you roam through their networks (being attached to a
visited network instead of your home network), you can prevent your 3G modem from
connecting to a visited network by disabling its roaming capability. You can also
prevent your modem from attaching to low-bandwidth wireless networks.
To select your preferred roaming and networking modes, do the following:
1. On the OmniAccess 3500 NLG Client window, from the Wireless menu, click
Preferences. The Preferences window appears.
Figure 13: 3G Preferences Window
2. In the Bearer selection section of window you can select the type of carrier 2G,
3G or Automatic.
3. In the Roaming section of the window, you can set the 3G preference to
Automatic, Manual or Never. Selecting Never will disable roaming for the
OmniAccess 3500 NLG. Select Automatic (to keep both in-network and out-of-

OmniAccess 3500 Nonstop Laptop Guardian Release 1.6
14
network attachment available). If you select manual then the network available
will be displayed in the Select Network drop down drop down list.
Note: The Roaming Guard, Roaming Mode, and Network Mode settings are overridden
when the 3G connection is initiated by the OmniAccess 3500 NLG gateway (at times
when the laptop may be powered off or not already connected to the gateway).
How do I connect from a public hotspot?
Wi-Fi access points and Ethernet outlets in hotels and other public places often
require you to enter additional credentials (for example, a local user ID and password
or your credit card information) before granting network access. Since the OmniAccess
3500 NLG cannot know in advance the type of access negotiation implemented at
every such place, you will be required to interactively submit your local access
credentials.
To establish connectivity from a location that requires the submission of local-access
credentials, you must complete the following procedure within the time allowed by
your IT administrator (Default configured is five minutes):
1. Select the desired interface (Wi-Fi or Ethernet) to make the connection.
2. Select the Hotspot radio button and Click Authenticate and Connect button.
3. A window will appear asking for the proxy information. Please leave this blank and
simply hit the OK button.
4. Now an Internet Explorer window opens, displaying information about the visited
hotspot and asking you to enter the information required to access the public
network.
5. After you enter the required information, the OmniAccess 3500 NLG can establish
a secure tunnel to your company’s network through the public network.
Note: While establishing connection via hotspot if you get either "Action Cancelled" or
"The page cannot be displayed" window then try refreshing the browser page
Authentication and Security
RADIUS only: How can I access the network using RSA SecureID?
If your user account is configured for RADIUS authentication, you may have to use RSA
SecureID to access your network. The following two sections describe the access
procedures for the first login after configuration of the RSA SecureID access method
and for all subsequent logins.
FIRST RSA SECUREID LOGIN
Follow the steps below the first time you access your network as an RSA SecureID user:
1. On the RADIUS Login prompt window (Error! Reference source not found.), fill
the User Name field with your login name and the Password field with the
tokencode displayed on the RSA Secure ID device. Click OK.

End-User Reference Guide
15
Figure 14: RADIUS Login prompt window for first login
2. A second RADIUS Login prompt window appears (Error! Reference source not
found.). Fill the Response field with your PIN (the PIN can be a 4-8 character
numeric or alphanumeric string, depending on the configuration of your user
account). Click OK.
Figure 15: Second RADIUS Login prompt window for first login
3. A third RADIUS Login prompt window appears (Error! Reference source not
found.). Enter again your PIN in the Response field. Click OK.
Figure 16: Third RADIUS Login prompt window for first login

OmniAccess 3500 Nonstop Laptop Guardian Release 1.6
16
4. A fourth RADIUS Login prompt window appears (Error! Reference source not
found.). Fill the Response field with your passcode (PIN + tokencode) after the
tokencode has changed value on the RSA SecureID display. Click OK.
Figure 17: Fourth RADIUS Login prompt window for first login
5. A login confirmation window appears (Error! Reference source not found.) if you
have entered all credentials successfully.
Figure 18: RADIUS Login confirmation window for first login
Note: If you enter wrong values for your credentials (whether the PIN or the token
code) for three consecutive times, you will be placed in next token-code mode. In this
mode, you will have to enter the correct passcode twice.
System Generated PIN
RSA Authentication Manager can be configured by the administrator such that the user
can either get a System generated PIN or user can enter a new PIN. You can receive a
system - generated PIN by entering ‘Y’ in the Response field as shown below if RSA
manager is configured for the cards.