Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 7:23 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 2 posts ] 
Author Message
 Post subject: Windows Terminal Servers
PostPosted: Thu Apr 15, 2010 12:49 pm 
Offline

Joined: Thu Apr 15, 2010 12:46 pm
Posts: 1
Hello,

I was wondering if someone might be able to help me with this.

I would like a piece of software to run on my terminal servers that only allows log in if the Yubikey (which is assosciated to an individiual user) is plugged in and the user enters their Windows domain password correctly.

I do not want an extra PIN for users to remember. I want each Yubikey to be assosciated with an individual user. I do not want the user's password stored on the Yubikey, just an identifier to say 'this is user1'.

I would also like some software to centrally manage the Yubikeys to assign user IDs to the keys and to disable them if needed.

Is this possible? What software do I need?

Regards


James


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Thu Apr 15, 2010 3:04 pm 
Offline
Yubico Team
Yubico Team

Joined: Mon Feb 22, 2010 9:49 am
Posts: 183
The YubiKey is a primarily a onetime password generator device and has very little memory, only enough for its base functionality. A YubiKey cannot be used as a general password storage device. Whenever, the YubiKey button is pressed, it generates a one time password which is valid only once.

The YubiKey is a write only device i.e. information can only be written to YubiKey and can not be read from it. Hence it is not possible to determine automatically (by reading the information stored in the YubiKey) if the YubiKey belongs to a particular user or not. Users need to provide YubiKey OTP at the time of authentication so that the username to YubiKey mapping can be verified.

AuthLite software provides YubiKey based two factor authentication for Windows Logon based on YubiKey OTP and user's Windows domain credentials. AuthLite also provides centralized management of the YubiKeys. However, we are not sure if it provides YubiKey based authentication for remote terminal access. Please contact AuthLite support for more information about their product.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 4 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group