Vasco aXsGUARD Gatekeeper AG-3000 Series User manual

aXsGUARD Gatekeeper
Authentication Quick Install Guide

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Legal Notice
VASCO Products
VASCO Data Security, Inc. and/or VASCO Data Security International GmbH are referred to in this document as
'VASCO'. VASCO roducts comprise Hardware, Software, Services and Documentation. This document
addresses potential and existing VASCO customers and has been provided to you and your organization for the
sole purpose of helping you to use and evaluate VASCO roducts. As such, it does not constitute a license to
use VASCO Software or a contractual agreement to use VASCO roducts.
Disclaimer of Warranties and Limitations of Liabilities
VASCO roducts are provided ‘as is’ without warranty or conditions of any kind, whether implied, statutory, or
related to trade use or dealership, including but not limited to implied warranties of satisfactory quality,
merchantability, title, non-infringement or fitness for a particular purpose.
VASCO, VASCO DISTRIBUTORS, RESELLERS AND SU LIERS HAVE NO LIABILITY UNDER ANY
CIRCUMSTANCES FOR ANY LOSS, DAMAGE OR EX ENSE INCURRED BY YOU, YOUR ORGANIZATION OR ANY
THIRD ARTY (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF ROFITS, BUSINESS
INTERRU TION OR LOSS OF DATA) ARISING DIRECTLY OR INDIRECTLY FROM THE USE, OR INABILITY TO USE
VASCO SOFTWARE, HARDWARE, SERVICES OR DOCUMENTATION, REGARDLESS OF THE CAUSE OF THE
LOSS, INCLUDING NEGLIGENCE, EVEN IF VASCO HAS BEEN ADVISED OF THE OSSIBILITY OF SUCH
DAMAGES, OR IF THEY WERE FORESEEABLE. OUR MAXIMUM AGGREGATE LIABILITY TO YOU, AND THAT OF
OUR DISTRIBUTORS, RESELLERS AND SU LIERS SHALL NOT EXCEED THE AMOUNT AID BY YOU FOR THE
RODUCT. THE LIMITATIONS IN THIS SECTION SHALL A LY WHETHER OR NOT THE ALLEGED BREACH OR
DEFAULT IS A BREACH OF A FUNDAMENTAL CONDITION OR TERM, OR A FUNDAMENTAL BREACH. THIS
SECTION WILL NOT A LY ONLY WHEN AND TO THE EXTENT THAT A LICABLE LAW S ECIFICALLY
REQUIRES LIABILITY DES ITE THE FOREGOING EXCLUSIONS AND LIMITATIONS.
Intellectual Property and Copyright
VASCO roducts contain proprietary and confidential information. VASCO Data Security, Inc. and/or VASCO
Data Security International GmbH own or are licensed under all title, rights and interest in VASCO roducts,
updates and upgrades thereof, including copyrights, patent rights, trade secret rights, mask work rights,
database rights and all other intellectual and industrial property rights. No part of these roducts may be
transferred, disclosed, reproduced or transmitted in any form or by any means, electronic, mechanical or
otherwise, for any purpose, except as expressly permitted by VASCO or its authorized licensee in writing.
This document is protected under US and international copyright law as an unpublished work of authorship. No
part of it may be transferred, disclosed, reproduced or transmitted in any form or by any means, electronic,
mechanical or otherwise, for any purpose, except as expressly permitted in writing by VASCO or its authorized
licensee.
Trademarks
VASCO®, VACMAN®, IDENTIKEY®, aXsGUARD™, DIGI ASS®, and ® are registered or unregistered
trademarks of VASCO Data Security, Inc. and/or VASCO Data Security International GmbH in the U.S. and other
countries. Other company brand or product names or other designations, denominations, labels and/or other
tags, titles, as well as all URLs (Internet addresses) linked to such designations or communications (irrespective
of whether protected by intellectual property law or not), mentioned in VASCO roducts may be the trademarks
or registered trademarks or be part of any other entitlement of their respective owners.
Radius Disclaimer
Information on the RADIUS server provided in this document relates to its operation in the aXsGUARD
Gatekeeper environment. We recommend that you contact your NAS/RAS vendor for further information.
Copyright © 2009 VASCO Data Security, Inc, VASCO Data Security International GmbH. All rights reserved.
© 2009 - VASCO Data Security 2

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Table of Contents
Table of Contents
1 Introduction............................................................................................................................................... 7
1.1 Audience and urpose of this Document............................................................................................. 7
1.2 What is the aXsGUARD Gatekeeper?................................................................................................... 9
1.3 VASCO............................................................................................................................................. 9
2 Safety and Environmental Information...................................................................................................... 10
2.1 Overview........................................................................................................................................ 10
2.2 Electrical Safety............................................................................................................................... 10
2.3 ersonal, Environmental and aXsGUARD Gatekeeper Safety............................................................... 10
2.4 Temperature, ower and Humidity.................................................................................................... 11
2.5 Dimensions..................................................................................................................................... 11
2.6 Chassis Rails.................................................................................................................................. 11
Before you Begin..................................................................................................................................... 12
4 Connecting the aXsGUARD Gatekeeper to a Network................................................................................ 1
4.1 Overview........................................................................................................................................ 13
4.2 owering on the aXsGUARD Gatekeeper........................................................................................... 13
4.3 Connecting to your Network............................................................................................................. 15
4.4 Workstation TC /I Settings............................................................................................................. 15
5 Accessing the Administrator Tool............................................................................................................. 17
5.1 Overview........................................................................................................................................ 17
5.2 Instructions for Logging into the Administrator Tool............................................................................ 17
6 aXsGUARD Gatekeeper Configuration....................................................................................................... 20
6.1 Overview........................................................................................................................................ 20
6.2 Setting the Administrator's User Name / assword............................................................................ 20
6.3 Entering Customer Information......................................................................................................... 22
6.4 Menu Structure and Navigation........................................................................................................ 23
6.5 Entering the System Information....................................................................................................... 24
6.6 Network Settings: Ethernet Secure LAN Device.................................................................................. 26
6.7 General Settings.............................................................................................................................. 29
6.7.1 Domain Name Server.................................................................................................................. 29
6.7.2 Email Relay................................................................................................................................ 29
7 Users and Groups.................................................................................................................................... 0
7.1 Overview........................................................................................................................................ 30
7.2 aXsGUARD Gatekeeper Users........................................................................................................... 30
© 2009 - VASCO Data Security 3

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Table of Contents
7.3 aXsGUARD Gatekeeper Groups......................................................................................................... 30
7.4 Creating and Modifying Groups........................................................................................................ 31
7.4.1 Manually.................................................................................................................................... 31
7.4.2 Automatically via Active Directory................................................................................................ 32
7.5 Creating and Modifying Users........................................................................................................... 32
7.5.1 Manually.................................................................................................................................... 33
7.5.2 Automatically via Active Directory................................................................................................ 34
8 DIGIPASS Management............................................................................................................................ 8
8.1 Overview........................................................................................................................................ 38
8.2 Importing DIGI ASS Records............................................................................................................ 38
8.2.1 Automatic import........................................................................................................................ 38
8.2.2 Manual import............................................................................................................................ 39
8.3 DIGI ASS Device Testing................................................................................................................. 39
8.4 Assigning DIGI ASS Devices............................................................................................................ 40
8.5 Unassigning a DIGI ASS Device........................................................................................................ 41
8.6 Deleting DIGI ASS Records.............................................................................................................. 41
9 RADIUS Server Configuration.................................................................................................................... 4
9.1 Overview........................................................................................................................................ 43
9.2 RADIUS Server Setup and Configuration............................................................................................ 43
9.2.1 Adding the RADIUS Client to the Computer list.............................................................................. 44
9.2.2 Configuring the RADIUS Server.................................................................................................... 46
9.2.3 RADIUS Server Authentication olicy............................................................................................ 47
10 What's Next............................................................................................................................................. 48
11 Support.................................................................................................................................................... 49
11.1 Overview........................................................................................................................................ 49
11.2 If you encounter a problem............................................................................................................... 49
11.3 Return procedure if you have a hardware failure................................................................................ 49
© 2009 - VASCO Data Security 4

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Table of Contents
Illustration Index
Image 1: aXs GUARD Gatekeeper AG-3XXX................................................................................................................................................................. 7
Image 2: aXs GUARD Gatekeeper AG-5XXX................................................................................................................................................................. 7
Image 3: Back of a Typical ...................................................................................................................................................................................... 13
Image 4: Example Stickers Labeling Interfaces on the AG-3XX3................................................................................................................................. 14
Image 5: Example Stickers Labeling Interfaces on the AG-3XX4................................................................................................................................. 14
Image 6: Example Stickers Labeling Interfaces on the AG-5XX6................................................................................................................................. 14
Image 7: Power Button and Power LED..................................................................................................................................................................... 15
Image 8: Command Prompt and Testing TCP/IP Settings............................................................................................................................................ 16
Image 9: Certificate Screen...................................................................................................................................................................................... 18
Image 10: Login Screen.......................................................................................................................................................................................... 18
Image 11: Changing the System Administrator Password............................................................................................................................................ 19
Image 12: Creating a System Administrator User....................................................................................................................................................... 21
Image 13: Customer Information.............................................................................................................................................................................. 22
Image 14: System > General Screen........................................................................................................................................................................ 23
Image 15: System > General Screen........................................................................................................................................................................ 24
Image 16: Network > Devices > Eth......................................................................................................................................................................... 26
Image 17: Network > Devices > Eth > eth0.............................................................................................................................................................. 26
Image 18: Fixed IP Configuration IP Settings.............................................................................................................................................................. 27
Image 19: Network > General.................................................................................................................................................................................. 29
Image 20: E-mail>General: SMTP and E-mail Disabled.............................................................................................................................................. 29
Image 21: Creating a new group............................................................................................................................................................................... 31
Image 22: Active Directory User and Group Authentication / Synchronization................................................................................................................ 32
Image 23: Creating a New User................................................................................................................................................................................ 33
Image 24: Directory Services Configuration............................................................................................................................................................... 35
Image 25: Active Directory Tree................................................................................................................................................................................ 35
Image 26: Synchronized AD Users and Groups.......................................................................................................................................................... 37
Image 27: Automatic Status Message...................................................................................................................................................................... 38
Image 28: Manually Importing a DPX File................................................................................................................................................................. 39
Image 29: Assigning a record to a User.................................................................................................................................................................... 40
Image 30: Deleting a Record................................................................................................................................................................................... 41
Image 31: RADIUS Server Setup............................................................................................................................................................................... 44
Image 32: Adding a Host to the Computer List........................................................................................................................................................... 45
Image 33: Adding a RADIUS Client ........................................................................................................................................................................... 46
Image 34: Setting the Authentication Policy for the RADIUS Server.............................................................................................................................. 47
© 2009 - VASCO Data Security 5

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Table of Contents
Index of Tables
Table 1: System General Fields.............................................................................................................................................................25
Table 2: Network > Devices > Eth > eth0 Fields....................................................................................................................................27
Table 3: Users & Groups > Users > Add User: Fields............................................................................................................................. 33
Table 4: Directory Services > General................................................................................................................................................... 36
Table 5: Computer Settings.................................................................................................................................................................. 45
Table 6: Authentication > Radius > Clients: Field Descriptions............................................................................................................... 46
© 2009 - VASCO Data Security 6

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Introduction
1Introduction
1.1 Audience and Purpose of this Document
This Authentication Quick Install Guide explains how to set up the aXsGUARDTM Gatekeeper AG-3XXX or AG-
5XXX models (see images below) serving exclusively as an authentication server in your Local Area Network.
The document is intended for technical personnel and / or system administrators.
In sections 1.2 and 1.3, we introduce the aXsGUARD Gatekeeper and VASCO®.
In section 2, we provide safety and environmental information. This section must be read before installing your
aXsGUARD Gatekeeper.
In section 3 , we list the information you need to collect in preparation for installation.
© 2009 - VASCO Data Security 7
Image 2: aXsGUARD Gatekeeper AG-5XXX
Image 1: aXsGUARD Gatekeeper AG- XXX

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Introduction
In section 4 we explain how to physically connect the aXsGUARD Gatekeeper to your network. Following
successful connection, the aXsGUARD Gatekeeper's settings can be adjusted by accessing the Administrator
Tool.
In section 5, we explain how to access the aXsGUARD Gatekeeper Administrator Tool.
In section 6 , we provide instructions for the minimal configurations required to get started.
In section 7, we explain the concepts of users and groups and how to create and modify users and groups on
the aXsGUARD Gatekeeper.
In section 8 , we explain how to import DIGI ASS® records into the aXsGUARD Gatekeeper, how to test
DIGI ASS devices, and how to assign/unassign and delete DIGI ASS records.
In section 9, we explain how to configure and use the aXsGUARD Gatekeeper RADIUS Authentication Server in
your network.
In section 10, we list the next configurations required, and where you can read more about them.
In section 11 , we explain how to request support, and return hardware for replacement.
An index at the end of the document will help you to find specific information you are searching for.
Other documents in the set of aXsGUARD Gatekeeper documentation include:
The aXsGUARD Gatekeeper Installation Guide, which provides instructions on how to configure the
aXsGUARD Gatekeeper both as an authentication server on your LAN and also as a gateway to the Internet.
Minimal settings for modules purchased after first installation of your aXsGUARD Gatekeeper are also
explained.
The aXsGUARD Gatekeeper System Administration How To Guide, which provides detailed information
about configuration using the Administrator Tool.
Access to aXsGUARD Gatekeeper guides is provided through the Documentation button in the aXsGUARD
Gatekeeper Administrator Tool. A paper copy of the aXsGUARD Gatekeeper Authentication Quick Install Guide is
also provided with delivery of the aXsGUARD Gatekeeper.
Further resources available include:
Context-sensitive help, which is accessible in the aXsGUARD Gatekeeper Administrator Tool through the
Help button. This button is permanently available and displays information related to the current screen.
Training courses covering features in detail can be organized on demand. These courses address all levels
of expertise. lease see www.vasco.com for further information.
Welcome to aXsGUARD Gatekeeper security.
© 2009 - VASCO Data Security 8

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Introduction
1.2 What is the aXsGUA D Gatekeeper?
The aXsGUARD Gatekeeper is an authentication appliance, intended for small and medium sized enterprises. In
addition to strong authentication, the aXsGUARD Gatekeeper has the potential to manage all of your Internet
security needs. Its modular design means that optional features can be purchased at any time to support, for
example, e-mail, Web access and V N management. The aXsGUARD Gatekeeper can easily be integrated into
existing IT infrastructures as a stand-alone authentication appliance or as a gateway providing both
authentication services and Internet Security.
Authentication and other features such as firewall, e-mail and Web access are managed by security policies,
which implement a combination of rules, for example, whether a user must use a DIGI ASS One-Time
assword in combination with a static password for authentication. Rules can be further adjusted with
restrictions. Security olicies are applied to specific users or groups of users and can also be applied to specific
computers and the entire system.
1.3 VASCO
VASCO is a leading supplier of strong authentication and electronic signature solutions and services specializing
in Internet Security applications and transactions. VASCO has positioned itself as a global software company for
Internet Security serving customers in more than 100 countries, including several international financial
institutions. VASCO’s prime markets are the financial sector, enterprise security, e-commerce and e-
government.
For further information, please see www.vasco.com.
© 2009 - VASCO Data Security 9

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Safety and Environmental Information
2Safety and Environmental Information
2.1 Overview
In this section we provide details important both for the safe use of the aXsGUARD Gatekeeper and also to help
maintain the device in a safe environment to keep it fully operational.
Caution
Please read all of this section before starting to install your aXsGUARD Gatekeeper.
2.2 Electrical Safety
Caution
Never disconnect the power supply (power cord) while the appliance is booting up or active,
as this may cause system or hardware damage.
Use the exact type of power cord recommended:
only use a power cord which is certified in compliance with safety regulations
only use a power cord which is compliant with the AC voltage requirements in your region
Before turning on the power, plug the power cord(s) into a socket which is properly grounded
Before disconnecting the power supply, turn the system off.
Use the exact type of network cable recommended:
to conform to certification restrictions, only use a network cable with maximum length of 3.0 meters.
2.3 Personal, Environmental and aXsGUA D Gatekeeper Safety
To avoid back injuries: when lifting the aXsGUARD Gatekeeper, avoid injuries to your back by using your
leg muscles. Keep your back straight and bend your knees when lifting the device.
Protecting the environment: producing the aXsGUARD Gatekeeper involves the extraction and use of
natural resources. The product may contain substances which are hazardous for human health and the
environment. To reduce the risk of any hazardous substances being released into the environment and to
reduce the depletion of natural resources, we encourage you to use appropriate recycling systems. Such
systems reuse or recycle most end-of-life materials in a safe way. The 'crossed-bin symbol' invites you to
use such systems.
© 2009 - VASCO Data Security 10

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Safety and Environmental Information
Further information on collection, reuse and recycling is available from your local or regional refuse
administration center.
For further information on the aXsGUARD Gatekeeper and the environment, please contact your supplier
(see section 11).
To avoid dropping the aXsGUA D Gatekeeper: do not lift the device by the chassis handles. These
handles are for sliding the aXsGUARD Gatekeeper in and out of the chassis rails only (see section 2.6). Do
not carry the aXsGUARD Gatekeeper by these handles.
2.4 Temperature, Power and Humidity
VASCO recommends installing the aXsGUARD Gatekeeper in a 'server room' with air conditioning and U S
(Uninterrupted ower Supply). If the equipment is built into a server cupboard, make sure there is sufficient
ventilation. Environmental requirements are:
Operating Temperature Range: 10 to 35 degrees Celsius (50 to 95 degrees Fahrenheit)
Non-Operating Temperature Range: -40 to +70 degrees Celsius (-40 to 158 degrees Fahrenheit)
Operating Humidity Range: 8% to 90% non-condensing
Humidity Range: 5% to 95% non-condensing
ower Supply: Thermal control 260 W AC power supply with FC [24-pin, 4-pin=12V, (2) 4-pin]
2.5 Dimensions
AG-3XXX AG-5XXX
Height 1.7'' (43mm) 1.7'' (43mm)
Width 16.8'' (426mm) 16.8'' (426mm)
Depth 10'' (253mm) 14'' (356mm)
2.6 Chassis ails
Chassis rails for storing the aXsGUARD Gatekeeper on a sliding shelf are available for the AG-5XXX model only.
These are not included in the VASCO price list. Please consult www.supermicro.com for compatible chassis
rails (part number CSE-PT08).
© 2009 - VASCO Data Security 11

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Before you Begin
3Before you Begin
Collecting the following information before you start will help to speed up your installation:
an unused I address in your network
the Default Gateway setting in your network
DNS Server I address(es) for your network
DNS Suffix(es) (optional)
an appropriate network cable, with maximum length of 3.0 meters (see section 2.2)
© 2009 - VASCO Data Security 12

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Connecting the aXsGUARD Gatekeeper to a Network
4Connecting the aXsGUARD Gatekeeper to a Network
4.1 Overview
In this section we provide step by step instructions to connect the aXsGUARD Gatekeeper to your network.
Important:
Please first read the safety information in section 2, check that all the package contents you
need (listed on a separate sheet supplied with the aXsGUARD Gatekeeper) have been
supplied, and that you have all the information you need for installation (listed in section ).
4.2 Powering on the aXsGUA D Gatekeeper
owering the aXsGUARD Gatekeeper on requires the following four steps:
1. Connect the eth0 interface to the network's hub or switch with an appropriate network cable. The
aXsGUARD Gatekeeper has two or more LAN Ethernet interface(s), depending on the chosen configuration
and type (AG-3 and AG-5 series). For the AG-3XXX and AG-5XXX models, the default LAN interface is
labeled as eth0 (example stickers are shown in the images below: please check the sticker labeling the
interfaces on your aXsGUARD Gatekeeper to identify the correct socket).
© 2009 - VASCO Data Security 13
Image : Back of a Typical aXsGUARD Gatekeeper

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Connecting the aXsGUARD Gatekeeper to a Network
© 2009 - VASCO Data Security 14
Image 5: Example Stickers Labeling Interfaces on the aXsGUARD Gatekeeper AG- XX4
Image 6: Example Stickers Labeling Interfaces on the aXsGUARD Gatekeeper AG-5XX6
Image 4: Example Stickers Labeling Interfaces on the aXsGUARD Gatekeeper AG- XX

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Connecting the aXsGUARD Gatekeeper to a Network
2. Connect the aXsGUARD Gatekeeper via the power cable to a supply.
3. ower up the aXsGUARD Gatekeeper by pressing the power switch once (see image below). A green LED
lights up.
4. To check the network is correctly connected, you can verify whether a green light shows at the socket
where the network cable is plugged in. If a green light is not visible, check that the network cable is in
good working order and correctly plugged into the device labeled as 'eth0' on the aXsGUARD Gatekeeper
and your network hub or switch.
4.3 Connecting to your Network
Installation of the aXsGUARD Gatekeeper requires temporarily isolating a client workstation from the network
and linking it to the aXsGUARD Gatekeeper. This involves changing a client workstation I address to within the
specified I address range for the aXsGUARD Gatekeeper. During the first-time configuration, the aXsGUARD
Gatekeeper I address is modified to within the range of your network (we explain how to do this in section
6.6). The client workstation network settings can then be restored.
The aXsGUARD Gatekeeper is delivered with a default LAN configuration as follows:
I address / Netmask 192.168.250.254/24
Network Host Name axsguard
Domain Name domain.be
DHC Server Disabled
4.4 Workstation TCP/IP Settings
To access the aXsGUARD Gatekeeper, a workstation needs to be temporarily configured with the same TC /I
settings as the aXsGUARD Gatekeeper.
1. Configure a workstation with the following settings:
I address 192.168.250.1
Subnet Mask 255.255.255.0
Gateway 192.168.250.254
DNS Server 192.168.250.254
2. Once the TC /I settings (listed above) are active on a workstation, open a command prompt (Microsoft
© 2009 - VASCO Data Security 15
Image 7: Power Button and Power LED

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Connecting the aXsGUARD Gatekeeper to a Network
Windows) or Terminal (Linux) and run the following command:
ping 1 2.168.250.254
If a reply is received as shown in the image above, everything is OK.
If a Request Timed Out or Destination Host Unreachable response is received, please check the following:
check that the workstation's TC /I settings have been entered correctly (see above)
check that the network cable is in good working order and correctly plugged into the device labeled 'eth0'
on the aXsGUARD Gatekeeper and your network hub or switch (see section 4.2).
Once the workstation is correctly configured, the aXsGUARD Gatekeeper Administrator Tool can be accessed
through a browser on the workstation, as explained in the following section.
Note
Once the network settings on the aXsGUARD Gatekeeper have been configured appropriately,
(explained in section 6.6), the workstation I address can be reconfigured onto the network,
and the aXsGUARD Gatekeeper can be accessed from any browser on the network.
© 2009 - VASCO Data Security 16
Image 8: Command Prompt and Testing TCP/IP Settings

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Accessing the Administrator Tool
5Accessing the Administrator Tool
5.1 Overview
Accessing the aXsGUARD Gatekeeper Administrator Tool is possible from any workstation in the same network
using a standard Web browser, providing the browser does not have a proxy setup in its browser settings.
Access is secured by SSL (Secure Socket Layer) encryption over the HTT S protocol.
Logging into the Administrator Tool requires the steps described below.
5.2 Instructions for Logging into the Administrator Tool
1. Enter the URL for the Administrator Tool into the browser:
https://192.168.250.254:82
Note
1) Remember to include the port number (:82) after the I address or the connection will fail.
2. As you are accessing a website secured with a self-signed certificate, the browser presents a warning
asking you to accept the certificate (see image below) to continue. After the certificate has been
accepted, the aXsGUARD Gatekeeper login screen appears (see image 10).
Note
The procedure for accepting a certificate varies between browsers.
© 2009 - VASCO Data Security 17

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Accessing the Administrator Tool
3. Enter the default system administrator's Username and assword (use lower case only):
Username: sysadmin
assword: sysadmin
Press Enter or click on the Log in button to proceed (see image 10).
© 2009 - VASCO Data Security 18
Image 10: aXsGUARD Gatekeeper Login Screen
Image 9: Certificate Screen

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 Accessing the Administrator Tool
Caution
The default System Administrator (sysadmin) password must be changed as soon as you log
on; otherwise the appliance can be accessed by non-authorized users.
4. After a successful login, the status screen is shown, with a warning including a link to the screen where
you can modify the default system administrator's (sysadmin) password (see image below).
© 2009 - VASCO Data Security 19
Image 11: Changing the System Administrator Password

aXsGUARD Gatekeeper Authentication Quick Install Guide v1.6 aXsGUARD Gatekeeper Configuration
6aXsGUARD Gatekeeper Configuration
6.1 Overview
This section covers the practical step by step configuration of the aXsGUARD Gatekeeper to implement the
required network security.
6.2 Setting the Administrator's User Name / Password
Caution
The default System Administrator (sysadmin) password must be changed as soon as you log on;
otherwise the appliance can be accessed by non-authorized users (see section 5).
The sysadmin user (see section 5) has limited access. This default user can only modify some general system
parameters and add/remove or modify users. The first step is to add a new user with full administration
privileges to further configure the aXsGUARD Gatekeeper. This also facilitates troubleshooting, since all actions
performed by administrators in the Administrator Tool are logged by user name, a useful feature when multiple
system administrators exist.
To create a System Administrator user with full administration rights:
1. Log on to the aXsGUARD Gatekeeper as explained in section 5.
2. Navigate to Users & Groups > Users and click on Add new. The screen below is displayed. Fields with a
description in bold are mandatory (cannot be left blank).
© 2009 - VASCO Data Security 20