Thank
you for choosing WiKID Systems for your two-factor authentication
needs! While we recommend reading the complete Quickstart Guide to get
a full understanding of how the WiKID Authentication System works,
we realize that not everyone will read the fine manual. Use this at
your own risk!
Before you start, you will need an externally routable IP address, an internally routable IP
address, ethernet connections and the associated information (gateway, DNS, etc.)
.
- Turn on the box. At the terminal, you will get a prompt. Enter the username root and the
password wikid. Set your timezone and change the root password, as prompted.
- Type wikidctl setup and enter the appropriate information. N.B.: when configuring the SSL
certificate you will be asked for your first and last name – enter the fully qualified domain
name instead! If you have only one WiKID server, enter N when prompted about
replication.
- Type 'wikidctl start'
- From a web browser, go to http://(ipaddress or fully qualified domain name)/
WiKIDAdmin/. Enter WiKIDAdmin as the username and 2Factor as the password.
- Click on the Configuration tab and click on Create an Intermediate
CA. Fill in the appropriate information and hit submit. You will see a
link to submit the CA for processing. Submit you signing request and
you will receive the signed certificate back. Do not lose or forget this passphrase, you will use it to start the WiKID server.
- Copy the certificate to the clipboard and go to the Configuration page and select Install
the Intermediate CA. Paste the CA here, enter the password you used in the previous step
and submit.
- Return to the Configuration page and select Create a LocalHost Certificate.
- Return to the WiKID server terminal or SSH to the server and type wikidctl restart. Once the server
has stopped, type start. When prompted, type the passphrase you created for the
Intermediate CA. (N.B.: There is a known issue with the WiKID built-in Radius service -
you will also have perform this restart when enabling Radius and when adding a Radius
network client.
- Log back into the WiKIDAdmin web interface. Select the Domains tab and click Create
New Domain. Enter a domain name, a device domain name and for the domain identifier
enter the zero-padded IP address of the server. Thus, 206.189.30.1 becomes
206189030001.
- Start your WiKID client/token and select New Domain. Enter the domain identifier you
created on the server. Enter your desired PIN. You will get a registration code.
- Go back to the WiKIDAdmin web interface. Select the Users tab and select Manually
Validate a User. You will see your registration code. Click on it and enter your username.
- Now enable protocol modules (such as LDAP and Radius) from the Configuration page
and add network clients from the Network Client page.
Congratulations! You've got two-factor authentication!