RSA two factor authentication

[javedk]

Our auditors have recommended to enable RSA two factor authentication on our hpux servers (11i). Could someone tell me how we can do this. We currently have secure shell installed but the auditors insists on 2 factor authentication (other than entering user name and password at login prompt they need one more authentication). I would like to know if this is a general practise. Appreacite your help in this.

[Victor Fridyev]

Hi,
We use such a thing for our connections to internal network from out of the company (e-token or teleID). Depending on requesteded security level this approach can be implemented for internal connections as well. In this case you will have to build a connection to some server, protected by first level autentication (teleid or something similar) and to provide possibility of login to HPUX from this server only by a firewall. I don't know (but this does not mean that such a thing does not exist) about a possibility to implement a first level autentication in HPUX.
Regards

[Victor Fridyev]

Hi,
We use such a thing for our connections to internal network from out of the company (e-token or teleID). Depending on requesteded security level this approach can be implemented for internal connections as well. In this case you will have to build a connection to some server, protected by first level autentication (teleid or something similar) and to provide possibility of login to HPUX from this server only by a firewall. I don't know (but this does not mean that such a thing does not exist) about a possibility to implement a first level authentication in HPUX.
Regards

[Denver Osborn]

RSA Security, Inc puts out a product that will add the two factor authentication you're looking for. I'm sure there are other other products that will do it too, but RSA's SecurID is one I've used.


http://www.rsasecurity.com/node.asp?id=1157

-denver

[Victor Fridyev]

Hi,

Look at the link, may be this can help
http://docs.hp.com/en/B2355-60127/passwd.1.html