Rescuing default administrative users

Administrative users for the OneSpan Authentication Server Appliance Configuration Tool and OneSpan Authentication Server can be reset in the OneSpan Authentication Server Appliance Configuration Tool.

To rescue the OneSpan Authentication Server Appliance Configuration Tool sysadmin user account

1. Log on to the OneSpan Authentication Server Appliance Configuration Tool, and select System > Actions.
2. Click Rescue sysadmin User. This automatically enables the sysadmin user account and prompts you to enter a new password for it. A new logon to the OneSpan Authentication Server Appliance Configuration Tool is not required to change the password. For more information, see Resetting OneSpan Authentication Server Appliance.

It is also possible to rescue the administrative user of the master domain created with the OneSpan Authentication Server Setup Wizard.

To rescue the OneSpan Authentication Server Appliance administrative user

1. Start the OneSpan Authentication Server Appliance Configuration Tool, and select System > Actions.

2. Click Rescue IDENTIKEY Admin User. The OneSpan Authentication Server Appliance Configuration Tool will prompt you for a user name and password to be used for the reset.

   There are three possible results of this operation:

   1. If the user name provided is identical to the one provided when running the OneSpan Authentication Server Setup Wizard, the administrative user will be reset, and you will be prompted to enter a new password.
   2. If the user name does not exist on the master domain, then a new user account will be created with the provided credentials. This user account will have the same access privileges as the one created via the OneSpan Authentication Server Setup Wizard.
   3. If the user name already exists in the master domain, then the user account that corresponds to that user name will be upgraded to an administrator account. Its password will also be changed to the one that you provided.

In addition, the OneSpan Authentication Server Appliance Configuration Tool will also perform the following tasks on the rescued user account:

1. Unlock the user account if locked.
2. Enable the user account if disabled.
3. Unassign any authenticator records assigned to the user account.
4. Reset the Local Authentication policy setting to DIGIPASS/Password during Grace Period or DIGIPASS or Password. This allows authentication with a static password or via OTP.
5. Reset the Back-End Authentication policy setting to None to prevent the use of back-end authentication.