Support  
Apply for time »
User guides
Parallel computing
E-mail lists
 
 
 
 
 
 
 
 
 
 
 

SecurID (Certifier)

Please note that the information below regarding the SecurID procedures is not valid any more since we now use ssh and scp. The manufacturers Web site for SecurID is http://www.rsasecurity.com/products/securid/.

The SecurID card must be used each time you log in to the SGI at NSC. This is a security solution based on the concept of one-time passwords which is considered to be among the safest in use today, and thus preventing unauthorized access to NSC computers. The password consists of two parts entered together. The first part is referred to as the PIN code and is chosen by the user at the first login. It should be a string of 4 - 7 lower case alphanumeric characters. The second part is the SecurID code, a six digit code from the SecurID card. The SecurID code is changed every 60 seconds, and the password (PIN+SecurID code) is only valid for a short time period.

Do distinguish between the SecurID code generated on the front of the card and the manufacturing number engraved on its back! You are never supposed to use the manufacturing number in the dialogue below!

Instruction

When you login for the first time on the SGI the system will first prompt you for your login name and then for the code from the "SecurID" (give only the six digits from your SecurID card) and then prompt for your own personal PIN-code. At that point you may chose any 4 to 7 lower case alphanumeric characters. PLEASE REMEMBER THE CHOSEN PIN-CODE.

The SGI system sends a message when asking for the new PIN-code

NEW PIN required; do you wish to continue? (y/n) [n]:
You have to reply to this message with a y and will then be prompted for the PIN-code.

The next time you login you give the two codes together when you are prompted
Enter PASSCODE:

You now give first the PIN-code and then the "SecurID" code, without any space or blank or "ENTER" in between.

The "SecurID" card is personal and should be returned to NSC when you no longer have a need for it.

Since some users have problems with the procedure here follows a longer description:

Please follow this procedure:

telnet sgi3k.nsc.liu.se

1) When you log in you will get the following:

Connected to sgi3k.nsc.liu.se.
Escape character is '^]'.

IRIX (sgi3k)

login: x_nscnn                     % Give your username
Enter PASSCODE:

You should now enter only the number displayed on the SecurID card,
do not include any PIN code at this first login!

2) The system sends a message when asking for the new PIN-code
   
NEW PIN required; do you wish to continue? (y/n) [n]:

   You have to reply to this message with a "y"

3) After this you will be prompted for a PIN which you enter twice and then
   you will be automatically logged out.

4) Wait until the number displayed on the SecurID has changed and then
   log in again.

   This time, at the "Enter PASSCODE:" prompt, you must enter your
   PIN-code + the number displayed, in one sequence, without anything in
   between!
Another problem may appear, namely that the clocks on the SGI and the SecurID card are not synchronized. The system then tries to synchronize with the command 
next Tokencode: Enter PASSCODE:
in which case you wait for the SecurID card to give a new set of digits. You input these (without the PIN code) and everything should work.

A new card may have very bad synchronization, in that case you have to contact NSC for assistance.

Printable version





Page last modified: 2005-12-19 14:13
For more information contact us at info@nsc.liu.se.