Administrator Guide

8 Security Tools for Android Administrator Guide
Enable One-Time Password (OTP) recovery
This feature allows a user who forgets their password to receive a One-time Password to unlock the Dell tablet and reset
the password. To enable this feature, the tablet must first be paired with a smartphone or mobile device running the Dell
Security Tools app.
The
OTP Recovery Enabled policy is the master policy for all other One-time Password policies. The login screen checks the
policy before allowing OTP recovery, even if the
tablet is paired.
To enable One-time Password recovery:
1
In the Remote Management Console, set the OTP Recovery Enabled policy to Tr ue .
•
True – The One-time Password Recovery feature is enabled and allows the user to use a paired mobile device to
generate passwords for one-time use to unlock their account if the account password is lost.
•
False (default) – Users will not be able to use OTP Recovery to unlock the account, regardless of other OTP policy
values.
NOTE: When a user opens the DDP|ST Mobile Pairing app to pair devices, the app first checks whether OTP Recovery has been
enabled. If the OTP Recovery Enabled policy is set to False or changed to False after users have paired their tablets with other
devices, the DDP|ST Mobile Pairing icon is not visible on users' tablets.
2 Set the value for Max OTP Recovery attempts . Options are 5-10 with a default of 5 .
3 Set the value for Max Recover Attempts Failure Action .
4 The default option is Unpair , meaning the tablet and mobile device are unpaired and One-time Password Recovery is
disabled.
5 Commit the policies.
Configure DDP|ST Password Manager
The DDP|ST Password Manager app allows users to securely manage passwords. Users can store all of their passwords
within the app, which protects the passwords with a master key. The master key can be unlocked only with the master
password. Users must remember only their master password to access all other passwords stored in DDP|ST Password
Manager.
Enable DDP|ST Password Manager
To enable Password Manager in the Remote Management Console, set the Enable Password Manager policy to True. This
is the master policy for Password Manager.
• True - Password Manager is available and accepts and stores the user’s new logon credentials.
•
False (default) - Password Manager is not available, regardless of other policy values.