One Time Password Overview - Dell SonicWall SRA 4200 Administrator's Manual

This is followed by the PIN challenge.
Last, the Passcode challenge is displayed.

One Time Password Overview

This section provides an introduction to the One Time Password feature. This section
contains the following topics:
•
•
•
•
•
What is One Time Password?
The SRA One Time Password feature adds a second layer of login security to the standard
username and password. A one-time password is a randomly generated, single-use password.
The SRA One Time Password feature is a two-factor authentication scheme that utilizes one-
time passwords in addition to standard user name and password credentials, providing
additional security for Dell SonicWALL SRA users.
The SRA One Time Password feature requires users to first submit the correct SRA login
credentials. After following the standard login procedure, the SRA generates a one-time
password, which is sent to the user at a pre-defined email address. The user must login to that
email account to retrieve the one-time password and type it into the SRA login screen when
prompted, before the one-time password expires.
Benefits of One Time Passwords
The SRA One Time Password feature provides more security than single, static passwords
alone. Using a one-time password in addition to regular login credentials effectively adds a
second layer of authentication. Users must be able to access the email address defined by the
SRA administrator before completing the SRA One Time Password login process. Each one-
time password is single-use and expires after a set time period, requiring that a new one-time
password be generated after each successful login, cancelled or failed login attempt, or login
attempt that has timed out, thus reducing the likelihood of a one-time password being
compromised.
46 | SRA 6.0 Administrator's Guide
"What is One Time Password?" section on page 46
"Benefits of One Time Passwords" section on page 46
"How Does the SRA One Time Password Feature Work?" section on page 47
"Configuring One Time Passwords for SMS-Capable Phones" section on page 47
"Verifying Administrator One Time Password Configuration" section on page 48