Astro 25 Advanced Messaging Solution; System Setup For Astro Advanced Messaging Solution; Two-Factor Authentication - Motorola APX 1000 User Manual

2.10

ASTRO 25 Advanced Messaging Solution

The ASTRO 25 Advanced Messaging Solution allows you to quickly send and receive messages and
run database queries directly from your data-enabled Motorola Solutions two-way radios. Federal
mandate requires Two-Factor Authentication when querying Federal and State databases. With this
advance messaging solution you have the ability enable Two-Factor Authentication.
With Query and Two-Factor Authentication, you can use a secure system log on to initiate and receive
key information on people, vehicles, and properties when doing the regular security patrol. You can
access to local or external databases such as the National Crime Information Center (NCIC), for "Hot
Hits" on priors and warrants. Query and Two-Factor Authentication has Criminal Justice Information
Services (CJIS) security compliance for queries.
With this Advanced Messaging Solution, ARS functionality splits between two protocols:
• ARS for Device Registration
• New User Authentication for User Login
TMS functionality splits between two protocols:
• TMS for messaging
• New Service Advertisement for service availabilities
The radio with Two-Factor capabilities are backward compatible with the existing device registration
system and TMS servers.
2.10.1

System Setup for ASTRO Advanced Messaging Solution

Your user name, unit ID and password all need to be provisioned in PremierOne
in PremierOne needs to be linked to an RSA account specifying a token to be used with the Two-
Factor passcode.
The radio caches the user name, unit ID and or Single Factor password in the codeplug, this allows the
radio to automatically log in to use Single Factor authentication upon power up or mode change. The
Two-Factor passcode is not stored in the codeplug. You can upgrade the Single Factor session to a
Two- Factor session by entering the Two-Factor passcode only. After an interruption (for example
mode change, DSR switch over, power loss) , the radio is capable of restoring the active session in its
current state as long as the session is active in the server.
NOTICE: Power down occurs when the user intentionally powers off the radio, power loss is
when the battery dies or is removed from the unit.
2.10.2

Two-Factor Authentication

Two-Factor Authentication is an extension of existing ARS and TMS operation. This feature allows you
to authenticate yourself with a username, unit ID, password, and passcode.
This feature allows the sender of a text message to address a specific user of the radio, so the
message is delivered to the user, and not anyone else who may have been using the radio at the time.
This feature supports query authentication requirements so the query service knows which user
originated a query.
You can still send text messages without logging in as a user. The user log in feature only enables the
recipient of your message to identify you as the sender by assigning a username to your message.
NOTICE: A predefined username that is set more than the maximum allowed characters is an
invalid name.
MN000255A01-BL
Chapter 2: Advanced Features
™ . Your user account
89