User guide

Odyssey Access Client User Guide
42  Specifying User Info
Using Certificates for Authentication
To use certificate credentials for authentication:
1. Select the Certificate subtab of the User Info
tab.
2. Select Permit login using my certificate to enable authentication methods that
use your certificate for authentication.
a. You can select Use automatic certificate selection and let OAC select your
certificate automatically (from a smart card reader or from your personal
certificate store) at authentication time. Note the following:
 With this option, you are not required to fill in a login name for this
profile if you do not use any password-based authentication methods.
 When you select this option, OAC does not check that your certificate
is installed.
 If your certificate is not installed at authentication time, your
authentication request fails. If you have more than one certificate
installed at authentication time, you are prompted to select the
certificate.
b. Select Use the following certificate then click Browse
to select a personal
certificate from your computer. A list of your personal certificates appears.
Select a certificate and click OK. Once you configure a certificate, you can
click View to view the certificate.
c. If you have a smart card installed on your client machine, you can use the
certificate from your smart card. For this option, select Use the logon
certificate from my smart card reader. With this option, you can keep the
default smart card reader selection (any reader) or select a specific smart
card reader from the list of readers installed on your machine. (See
“Security” on page 17 and read the section about Prompt for smart card
PIN for the FIPS constraints.)
Using Soft Tokens
With certain token-based authentication options, you can use a software-based
token rather than a token from a physical token card. To use software-based token
information, enable this soft token feature and select the token from the Soft Token
subtab of the User Info tab.
NOTE: Before you can create a profile that uses a personal certificate from your
computer, you must install the certificate in the
current_user store of your
computer. See your network administrator for information about installing and
selecting a user certificate for authentication if you require one.