First-Time Setup

First you must set the IP address. You can do this by:

• Using the OneSpan Authentication Server Appliance Rescue Tool. This is the simplest way to set the IP address. For more information, refer to the OneSpan Authentication Server Appliance Installation and Maintenance Guide, Section "Rescue Tool".
• Temporarily isolating a client workstation from the network and linking it to OneSpan Authentication Server Appliance to set the OneSpan Authentication Server Appliance IP address within the range of the network.

To set the OneSpan Authentication Server Appliance IP address within the range of a network

1. Change a client workstation IP address to one within the specified IP address range for OneSpan Authentication Server Appliance.
2. Connect the client workstation to OneSpan Authentication Server Appliance with a network cable.

3. Use a web browser on the client workstation to access the OneSpan Authentication Server Appliance Configuration Tool.

   OneSpan Authentication Server Appliance automatically detects that this is an initial installation and launches the Configuration Wizard.

4. Configure a new IP address within your network range on OneSpan Authentication Server Appliance via the Configuration Wizard.

   When the Configuration Wizard has finished, you will be redirected to the new IP address. Now you can use OneSpan Authentication Server Appliance via the new IP address. If your workstation is still in the wrong range for the network, you should change it now.

   OneSpan Authentication Server Appliance is now integrated within your setup.

Configuration Wizard

The Configuration Wizard is launched when a new Configuration Tool instance is accessed and must be completed to allow full access for manual configurations.

It guides you through a number of settings:

• Password change
• IP address within your network, including the net mask and the default gateway to access the Internet
• Host name, DNS suffix, DNS server
• NTP (time) server
• OneSpan Authentication Server Appliance certification authority (CA) information

For more information, refer to the OneSpan Authentication Server Appliance Administrator Reference.

The main settings are completed during the Configuration Wizard, but additional features may also require to be configured, including:

1. Message Delivery Component to support Virtual Mobile Authenticator authentication (see Message Delivery Component (MDC) ).
2. Replication for synchronization of data between multiple OneSpan Authentication Server Appliance instances.
3. LDAP synchronization to synchronize user account records from an LDAP Active Directory (see LDAP user synchronization).
4. Back-end authentication to verify user credentials with a RADIUS or LDAP server (see  Back-end authentication).

For more information, refer to OneSpan Authentication Server Appliance Administrator Guide.

License Configuration Wizard

A license must be installed at this point to enable OneSpan Authentication Server Appliance to be set up and operate correctly. For more information, refer to the OneSpan Authentication Server Appliance Installation and Maintenance Guide, Section "Upload License".

OneSpan Authentication Server Setup wizard

The OneSpan Authentication Server Setup wizard will walk you through the configuration of a master domain, along with an administrator logon (user name and password) for that domain. It also allows you to easily enable and configure hardware security module (HSM) and secure auditing settings.

If you enable HSM, the OneSpan Authentication Server Setup wizard will prompt you to configure the settings necessary to enable HSM linking (see Licensing and configuration).

If you enable secure auditing, the OneSpan Authentication Server Setup wizard will prompt you to configure secure auditing settings. The OneSpan Authentication Server Appliance settings available for secure auditing are identical to those available in OneSpan Authentication Server (see Secure auditing).

For more information, refer to the OneSpan Authentication Server Appliance Installation and Maintenance Guide.

Case-sensitive user IDs and domain names

The OneSpan Authentication Server Setup wizard also allows you to configure case-sensitive user IDs and domain names. This setting is useful when authenticating against case-sensitive data stores. For example, if OneSpan Authentication Server is configured to be case-insensitive, then user ID Jsmith can be authenticated against user jsmith in a case-sensitive data store.

Case-sensitivity is particularly important when Dynamic User Registration is enabled, as it can prevent the creation of multiple authenticator users from multiple logons (see Dynamic User Registration (DUR)).

Manual configurations

Completing the OneSpan Authentication Server Appliance Configuration Wizard is mandatory before manual changes are possible in the Configuration Tool.

Manual configuration is necessary in the following cases:

• To change default settings, which are not available during the Configuration Wizard.
• To change settings after the initial setup (the Configuration Wizard is only offered on a factory default system).

For more information, refer to the OneSpan Authentication Server Appliance Administrator Reference.