Manage authentication policies
Manage authentication policies throughout their lifecycle by viewing, modifying, enabling/disabling, and deleting existing policies. Use this section to maintain authentication policies as your security and operational requirements evolve.
To perform this action, you must have a user role that contains the Solution administrator permission.
In the Device Trust Manager menu, go to Authentication management > Authentication policies.
The authentication policies are listed in a table format.
Select the Name of the authentication policy.
View details under Passcodes, Authentication certificates, Authentication CAs, and ACME credentials.
What's next?
To perform this action, you must have a user role that contains the Solution administrator permission.
After creating an authentication policy, update the details as needed to meet your needs.
In the Device Trust Manager menu, go to Authentication management > Authentication policies.
Find the Authentication policy you want to update from the authentication policies table.
Select and open the policy.
Select Edit.
You can only update the name and description of the authentication policy.
Update the following as per your requirement:
Name: The name you have provided for the authentication policy
Description: A brief description of the authentication policy
Require valid authentication certificate: When selected, requests using an expired or revoked certificate will be automatically blocked
When you're ready, select Update.
The modified authentication policy is listed under Authentication management > Authentication policies table.
To perform this action, you must have a user role that contains the Solution administrator permission.
After creating a passcode, update the details as needed to meet your needs.
In the Device Trust Manager menu, go to Authentication management > Passcodes.
Find the Passcode record you want to update from the Passcodes table.
Select and open the Passcode record.
Select Edit.
Update the following as per your requirement:
Name: The name you have provided for the passcode
Description: Description of the passcode
Assign passcode to a different authentication policy: Lists the authentication policy associated with this passcode. You can assign this passcode to a diffrent authentication policy
When you're ready, select Update.
The modified Passcode details is listed under Authentication management > Passcodes table.
To perform this action, you must have a user role that contains the Solution administrator permission.
After adding ACME credentials to an authentication policy, update the details as needed to meet your needs.
In the Device Trust Manager menu, go to Authentication management > ACME credentials.
Find the ACME credential record you want to update from the table.
Select and open the ACME credential record.
Select Edit.
Update the following as per your requirement:
Name: The name you have provided while adding the ACME credentials
Description: A brief description of the ACME credentials
Authentication policy: Lists the authentication policy associated with this ACME credential. You can assign this ACME credentials to a diffrent authentication policy
Usage limits: Update the Usage limit, or leave it blank for unlimited use
Dates: Update the operational start and end dates
Registered values: Add or update the registered values. For information on registered values and how registered values work, see Registered values.
When you're ready, select Update ACME credential.
The modified ACME credential details is listed under Authentication management > ACME credentials table.
To perform this action, you must have a user role that contains the Solution administrator permission.
Nota
When you disable an authentication policy, you disable only the policy; authentication passcodes and authentication certificates remain unchanged.
In the Device Trust Manager menu, go to Authentication management > Authentication policies.
Select the authentication policy you want to disable.
Under More actions, select Disable to disable the policy.
In the Device Trust Manager menu, go to Authentication management > Authentication policies.
On the Authentication policies page, select the Status column filter, then select Disabled.
Select the authentication policy you want to enable.
Under More actions, select Enable to enable the policy.
To perform this action, you must have a user role that contains the Solution administrator permission.
Aviso
This is a destructive action and cannot be undone. When you delete an authentication policy, you also delete the associated authentication passcodes and authentication certificates.
If you restore the policy, it does not restore the associated authentication passcodes and authentication certificates.
To delete an authentication policy:
In the Device Trust Manager menu, go to Authentication management > Authentication policies.
Select the authentication policy you want to delete.
Under More actions, select Delete.
In the Delete confirmation dialog box, select Delete.