How Tos

PAM Radius HOW TO

How to use WiKID Strong Authentication for SSH logins on Linux using PAM

HOW-TO configure all your WiKID users for Strong Authentication

This document discusses how to use you existing LAN credentials to validate your employees for two-factor authentication using ASP scripts provided by WiKID.

Using WiKID Strong Authentication with OpenVPN

How to configure OpenVPN to use WiKID Strong Authentication

Using WiKID Strong Authentcation with TACACS+

How to configure a linux box with PAM and TACACS+ for WiKID Strong Authentication

How to configure Webmail for WiKID Strong authentication

In this document we show you how to configure an IMAP-based Webmail system to use WiKID Strong Authentication.

Using FreeNX to secure Terminal Services and VNC with two-factor authentication

 

How to use WiKID in a JSP application

It is very easy to add WiKID to any application. This document shows how simple it is to add two-factor authentication to jsp-based web application.

How to add WiKID Two-Factor Authentication to a SonicWall VPN

SonicWall, Inc. offers a number of excellent VPN choices. This document shows how to add WiKID Two-factor Authentication to a SonicWall(tm) VPN.

How to Add Two-Factor Authentication to Apache

Do you want to protect certain web-sites or virtual directories with two-factor authentication? This level of security is pretty simple with Apache, mod_auth_radius and WiKID Strong Authentication.

How to add WiKID Two-Factor Authentication to a F5 Firepass SSL VPN

F5, Inc. offers a number of excellent VPN choices. This document shows how to add two-factor authentication from WiKID to an F5 Firepass (TM) SSL-VPN Appliance

How to add WiKID Two-Factor Authentication to an Aventail SSL VPN

Aventail offers a number of excellent VPN appliances. This document explains how to configure support for two-factor authentication by connecting WiKID and Aventail(tm) via the Radius protocol.

How to configure a Cisco VPN concentrator for two-factor authentication from WiKID.

This document describes how to configure a Cisco VPN Concentrator to support two-factor authentication from WiKID Systems. We will configure both boxes to communicate using Radius.

How to configure the Microsoft ISA server to support Two-Factor Authentication from WiKID

This document describes how to configure the Microsoft ISA server to support two-factor authentication from WiKID Systems. We will configure both boxes to communicate using Radius.

How to add WiKID two-factor authentication to a Ruby application

Ruby is an increasingly popular programming language. This document demonstrates how to use WiKID Strong Authentication in a Ruby application.

How to Add WiKID Two-factor Authentication to a PHP application

This document describes and provides detailed example code on how to add WIKID strong authentication to a PHP application.

How to configure your CheckPoint VPN for Two-factor authentication

How to add two-factor authentication from WiKID to your CheckPoint VPN

How to Add WiKID two-factor authentication to a Fortinet VPN

The Fortinet Gateway servers offer an excellent range of perimeter security tools. This document outlines how to combine two-factor authentication from WiKID with Fortinet's VPN servers.

How to add two-factor authentication to a Citrix Access Gateway

Citrix Access Gateway is Citrix's SSL-based VPN solution. This document describes how to leverage Radius to enable support for two-factor authentication from WiKID for the Access Gateway.

How to configure WiKID for Replication

The last thing you want is a hardware failure to knock your remote access services offline. Setting up your WiKID two-factor authentication servers for replication will allow quick recovery in the event of a failure.

How to add WiKID two-factor authentication to a Fortinet VPN

This document describes how-to combine two-factor authentication from WiKID with Fortinet's award-winning remote access VPNs.

How to add WiKID Two-factor authentication to a Watchguard Firebox

This document describes how to configure the Watchguard Firebox VPN solution to use two-factor authentication from WiKID.

How to Configure Go-To-MyPC Corporate for two-factor authentication from WiKID

GoToMyPC has not traditionally supported two-factor authentication or Radius. To enable two-factor authentication, an administrator needs to go to each host PC and configure it for Radius authentication, entering the Radius server IP, the shared secret and the username. While this can probably be automated in some way, GoToMyPC does not offer one. Additionally, administrators need to be careful to turn off controls that would allow users to get around two-factor authentication.

How to add two-factor authentication from WiKID to a Nortel Contivity VPN concentrator

This document describes how-to configure the Nortel Contivity VPN Concentrator for two-factor authentication from WiKID. We assume that there will be a direct connection between the Contivity and the WiKID server using Radius, but there could easily be a Radius server in the middle, such as a Cisco ACS or Microsoft IAS server.

How to configure WiKID with Putty and SSH for VNC

Recently, a customer needed to implement a remote access solution with two-factor authentication, but could not install any third party software. The solution: Putty, two SSH instances, VNC and WiKID. Using two SSH instances allows requiring both radius for WiKID and public keys and using the "permitopen=" directive limits the user to only VNC.

How to secure an SSL VPN with one-time passcodes and mutual authentication.

SSL-based VPNs were designed to eliminate the need for complex configurations on the user's PC. Unfortunately, that was before the dangers of public WiFi networks and tougher regulatory requirements came into being. Thanks to WiFi, many attacks that were difficult are now quite simple. In particular, a man-in-the-middle attack can intercept SSL-encrypted traffic, rendering SSL-based VPNs useless - even if it's protected by a typical one-time password system. The man-in-the-middle can easily feed the one-time password into the SSL-based VPN within the alloted time. In this how-to, we combine WiKID with SSL-Explorer.

How to secure SSH with two-factor authentication from WiKID

SSH is the work-horse of remote access protocols. Unfortunately, it is also a frequent target for brute-force attacks. Moreover, using the built-in public keys for authentication may not pass muster with auditors.

Two-factor authentication for Apache 2.2 or higher

The Apache project modified their authentication APIs. This document describes how to add two-factor authentication to Apache using mod_auth_xradius, which works the more recent versions of Apache.

Secure your VShell Server with two-factor authentication from WiKID Systems.

How to add two-factor authentication to VanDyke Software's VShell Server.

How to allow internal tokens to authenticate against an external domain

This customer submitted how-to documents the iptables rules needed to allow internal token clients to be able to authenticate against the same domain as your external token clients.

How to configure your software token clients to route internal users to an external domain.

Often, internal users on the LAN cannot access the external IP addresses used as domain identifiers. This document demonstrates how to use an internal DNS entry and a WiKID configuration file so new two-factor authentication users can be validated on the LAN.

How to configure Squid for two-factor authentication from WiKID

Add two-factor authentication to your web-applications at the proxy layer.

How to Secure VSFTP with SSL and Two-factor Authentication

Many companies still rely on FTP to transfer information. This document describes how to secure FTP with both SSL and two-factor authentication.