Setting the Two-Factor Authentication

Two-factor authentication

The two-factor authentication is the authentication method to enhance safety by combining two different types of information items among three types of information items: "something the user knows", "something the user provides", and "personal attributes".

When the connection to multiple networks is enabled, the following two-factor authentication methods are available on this machine.

  • IC card authentication + PIN code authentication

  • Biometric authentication + PIN code authentication

Setting the two-factor authentication using the IC card authentication

Configure the settings to perform the two-factor authentication using the IC card authentication.

Select [Utility] - [IC Card Auth.], and configure the following settings.

Setting

Description

[Operation Settings]

To enable the two-factor authentication, select [IC Card Authentication + PIN Code Authentication].

[Number of PIN code digits]

Specify the number of PIN code digits between 2 and 8.

Setting the two-factor authentication using the LDAP-IC card authentication

Follow the steps below to set the two-factor authentication using the LDAP-IC card authentication.

preconditionIn advance, configure the setting to perform the two-factor authentication using the IC card. For details, refer to "Setting the two-factor authentication using the IC card authentication".

  1. Select [User Auth/Account Track] - [LDAP-IC Card Authentication Setting] - [Server Registration] - [Edit] in administrator mode of Web Connection (or in [Utility] - [Administrator] of this machine), and configure the following settings.

  2. Select [Edit] of [1st Server], and configure the following settings.

    Setting

    Description

    [PIN Search Attribute]

    Specify the attribute to store the PIN code with the LDAP directory (using up to 63 characters).

    The attribute must start with an alphabet character.

  3. To use the secondary server of the LDAP server, select [Edit] in [2nd Server], and configure the same settings as for step 2.

Setting the two-factor authentication using the biometric authentication

Configure the settings to perform the two-factor authentication using the biometric authentication.

Select [User Auth/Account Track] - [Authentication Device Settings] - [Bio Authentication] in administrator mode of Web Connection (or in [Utility] - [Administrator] of this machine), and configure the following settings.

Setting

Description

[Operation Settings]

To enable the two-factor authentication, select [1 to many authentication PIN code authentication].

[Number of PIN code digits]

Specify the number of PIN code digits between 2 and 8.

Setting the user's PIN code

Set the user's PIN code required to perform the two-factor authentication.

Select [User Auth/Account Track] - [User Authentication Setting] - [User Registration] in administrator mode of Web Connection (or in [Utility] - [Administrator] of this machine), and configure the following settings.

Setting

Description

[PIN Code] / [Retype PIN code]

Enter the PIN code required to perform the two-factor authentication (using up to eight digits).

Tips

  • For the number of PIN code digits, follow the value specified in [Number of PIN code digits].