Adaptive Authentication

Business need for Adaptive Authentication? Existing Single factor authentication has various risks associated- Single and hence weak control Key logger Trojans Malware attacks Brute force Replay, Dictionary attacks Shoulder surfing Repeated use of same password Usage of same password for multiple applications Password can be shared with others Easy guessing Session hijacking Liability issues due to password breaches

Features 2FA(factor) Authentication i.e. PIN+PASSCODE (The passcode changes every 60 second) Multi factor Authentication (Risk Based Authentication) in form of Security question which is an additional layer of security Transparent real-time fraud detection and authentication Monitoring and authenticate both login and post login activities Risk based self-learning engine which rapidly adjusts policies and controls to predict and protect against future attacks Identifying fraud intelligence

Process Workflow Token Import Fail Token Import successful NEW Token creation request Token Import Fail Token received via Mail Login to Self service console Set up 6 digit PIN and security questions RSA setup installed on machine Token Import successful

Step 1- Token Provisioning A mail will be received by the user from ID-rsaauth@hcl.com which would include below information: Activation Code URL for importing token Activation code expiry date Serial Number Subject of the mail is “Your CTKIP Credentials are available” Mail would be received either in Inbox or Junk E-mail as well .So kindly check both the inbox.

Step 2-Setting the Security Questions Access URL - https://ss-rba.hcl.com on your browser Provide your user ID without any alias HCLTECH or HCLISD and click on GO Login with your password which will be same used for MyHCL and click on LOG ON. User must set up 5 security questions and click on “SUBMIT YOUR REQUEST” Note- Please remember answers to your set security questions.

Step 3 - Setting the 6 digit PIN Click on create PIN(as showed in above screenshot) Set your 6 numeric digit PIN and confirm No special character and alphabets to be used. Note-Remember the PIN as this would be required every time you access the application

Step 4- RSA Setup User to check if RSA setup is available on his/her laptop. Below are the steps to be followed: Click on START(Bottom most left icon on your desktop) Search RSA SecurID Token Red icon would be available (as shown in screenshot) If setup is Available on your system - Please skip next slide and proceed Not available on your system - Kindly perform steps provided in next slide “Installation of RSA securID 4.1.1”

Installation of RSA SecurID 4.1.1 Once your “New token request” is approved an email with Token No., Activation Code and Activation URL is shared. These details are now to be used to install the RSA MSI Package to use a soft token. Login to http://downloads.hcl.com with your AD credentials (ID, Password and domain) In Security column, click on option VPN Click on RSA SecurID 4.1.1. Save and run the setup, in case it is asking for administrator password to run the setup please raise the remedy using URL - https://remedy.hcl.com under software installation category

Importing a Software Token Open the RSA package installed on the system, click Import from Web & the screen is displayed In the Enter URL field, please copy the URL received in mail from rsaauth@hcl.com. In the Enter Activation Code enter the activation code provided by administrator. Note- Do not click the URL received in mail .Kindly copy and paste in the RSA setup as showed in above screenshot.

Authenticate with a Passcode In the SecurID desktop application, provide the 6 digit PIN set while requesting new token. Click on the ARROW button and PASSCODE will be displayed Access the application on MYHCL page Copy the token code by clicking on COPY button and paste it on the authentication page. Always Remember the PIN entered as this PIN would be used for your authentication while logging to the application.

Queries/Concerns- In case of token not received from rsaauth@hcl.com, installation and configuration issue , kindly raise a remedy via BMC Remedy Below is the path for raising the request- Remedy ->Requestor console->New incident ->IT Services(HCLTech\HCLISD) ->Security->RSA Adaptive Authentication Related issues

Thanks!