Previous Topic: Configuring ArcotID PKI Credential ProfileNext Topic: Configuring QnA Settings

CA AuthMinder Administration Guide › Managing Global AuthMinder Configurations › Configuring Profiles and Policies › Configuring ArcotID PKI Settings › Configuring ArcotID PKI Authentication Policy

Configuring ArcotID PKI Authentication Policy

An ArcotID PKI policy can be used to specify the following attributes related to ArcotID PKI-based authentication:

Note: Exercise caution while using these options.

To configure a global ArcotID PKI authentication policy:

  1. Ensure that you are logged in as a Global Administrator (GA).
  2. Activate the Services and Server Configurations tab on the main menu.
  3. Ensure that the WebFort tab in the submenu is active.
  4. Under the ArcotID section, click the Authentication link to display the ArcotID Authentication Policy page.
  5. Edit the fields in the Policy Configuration section, as required. The following table describes the fields of this section:

Field

Description

Policy Configurations

Create

If you choose to create a new policy, then:

  • Select the Create option.
  • Specify the Configuration Name of the new policy in the field that appears.

Update

If you choose to update an existing policy, then select the policy that you want to update from the Select Configuration list that appears.

Copy Configuration

Enable this option if you want to create the policy by copying the configurations from an existing policy.

Note: You can also copy from configurations that belong to other organizations that you have scope on.

Available Configurations

Select the policy from which the configurations will be copied.

Lockout Credential After

Specify the number of failed attempts after which the user credential will be locked.

Check User Status Before Authentication

Select this option if you want to verify whether the user status is active, before authenticating them.
  1. Expand the Advanced Configurations section by clicking the [+] sign.
  2. Edit the fields in the section, as required. The following table describes the fields of this section:

Field

Description

Advanced Configurations

Issue Warning

Specify the number of days before the warning is sent to the calling application about the user’s impending ArcotID PKI credential expiration.

Allow Successful Authentication

Specify the number of days for which the users can use an expired ArcotID PKI credential to successfully log in.

Enable Automatic Credential Unlock

Select this option if you want a locked credential to be automatically unlocked after the time you specify in the Unlock After field.

This field is valid only if you specify the corresponding value in the Lockout Credential After field.

Unlock After

Specify the number of hours after which a locked credential can be used again for authentication.

Challenge Validity (in Seconds)

Specify the duration for which the ArcotID PKI challenge has to be valid.

Multiple Credential Options

Usage Type for Verification

If you want users to authenticate with the particular ArcotID PKI, then enter the name of its usage type in this field.

If you do not specify the usage type, then the usage type mentioned in the default ArcotID PKI authentication policy is used.
  1. Click Save to create or update the ArcotID PKI policy.
  2. Refresh all deployed AuthMinder Server instances. See "Refreshing a Server Instance" for instructions about the procedure.