Deployment Guide

3. To select the length of the One-time Password (OTP), for One-time Password Length, select number of password characters to
require.
4. To select the number of chances the user has to enter the One-time Password correctly, for User Sign-in Attempts Allowed, select
a number from 5 to 30.
When the maximum attempts is reached, the OTP feature will be disabled until the user re-enrolls the mobile device.
NOTE: Dell recommends setting up at least one other authentication method in addition to One-time Password.
Configure Smart Card Enrollment
DDP|Security Tools supports two kinds of smart cards: contacted and contactless.
Contacted cards require a smart card reader into which the card is inserted. Contacted cards are only compatible with domain computers.
CAC and SIPRNet cards are both contacted cards. Due to the advanced nature of these cards, the user will be required to choose a cert
after using inserting his card to log on.
• Contactless cards are supported by non-domain computers and by computers configured with domain specifications.
• Users can enroll one contacted smart card per user account, or multiple contactless cards per account.
• Smart cards are not supported with Preboot Authentication.
NOTE:
When removing a smart card enrollment from an account with multiple cards enrolled, all cards are unenrolled at
the same time.
To configure smart card enrollment:
On the Administrator Settings tool's Authentication tab, select Smartcard.
Configuration Tasks for Administrators
29