User guide

Menu Options  17
Chapter 3: Using Odyssey Access Client Manager
Options
Individual tabs in this dialog enable you to configure the settings for security,
wireless suppression, preemptive networks, and EAP-FAST.
Security
Use these settings to enable or disable the following features:
 Enable session resumption—During a session, any subsequent
authentications to the same network server can be accelerated by reusing
information derived during the first authentication. If enabled, you can restrict
session resumption for any session older than the length of time that you set.
The default is 12 hours. See “Enabling Session Resumption” on page 18.
The practical application for this feature is that enabling this option turns on
wireless roaming so that you can take your wireless computer anywhere in the
building and stay connected without having to reconnect or reauthenticate.
 Enable automatic reauthentication—If enabled, this option enables automatic
reauthentication and sets the reauthentication frequency setting. The default is
1 hour. See “Reauthentication” on page 104 and “Enabling Automatic
Reauthentication” on page 19.
 Enable server temporary trust—If enabled, this option enables temporary
trust of a server and sets the maximum length of time for trusting that server.
The default is 12 hours.
Most of the time, you can use the Trusted Servers dialog to configure the servers
you trust for authentication. However, there might be times when you
authenticate to a network whose authentication server is not yet configured as
trusted in the Trusted Servers dialog. In this case, you might want the ability to
enable temporary trust for that untrusted server. See “Forget Temporary Trust”
on page 13 and “Enabling Temporary Trust” on page 19.
 Prompt for smart card PIN (EE and FE Only)—With this option enabled, OAC
prompts for a smart card Personal Identification Number (PIN). The PIN
unlocks the certificate stored on the smart card so it can be used for
authentication credentials. The option is enabled by default.
With the option disabled, the smart card middleware manages PIN prompts
and PIN caching.
To use this option, your authentication profile must be configured with Permit
login using my certificate and Use the login certificate from my smart card
reader enabled. See “Using Certificates for Authentication” on page 42 for
more information about using smart card certificates for authentication.