Computer Security Products Inc. CSP Authenticator 4.00 - RSA MFA API REST - RSA Ready Implementation Guide
2 years ago
Originally Published: 2023-04-05

This section describes how to integrate RSA  Authentication Manager with Computer Security Products Inc. CSP Authenticator+ using REST-based authentication agent.

Agent Host Configuration

To facilitate communication between CSP Authenticator+® and the RSA Authentication Manager / RSA SecurID Appliance, an Agent Host record must be added to the RSA Authentication Manager database. The Agent Host record identifies the HPE NonStop Server and contains information about communication and encryption.

Include the following information when configuring a REST-based authentication agent record:

  • Hostname
  • IP addresses for network interfaces

Note: The REST-based authentication agent’s hostname must resolve to the IP address specified.

Set the Agent Type to “Standard Agent” when adding the Authentication Agent record. This setting is used by the RSA Authentication Manager to determine how communication with CSP Authenticator+ will occur.
Please refer to the appropriate RSA documentation for additional information about creating, modifying and managing Authentication Agents.

Computer Security Products Inc. CSP Authenticator+ Configuration

The CSP Authenticator+® product has two components: the NonStop component and CSP Authenticator+ High Availability CNA(Cloud Native Application).

NonStop Component Configuration

Software required for configuration

  • FTP: While doing the initial installation on a PC, FTP is required to transfer files to the HPE NonStop Server.
  • SETUP: The CSP Authenticator+ SETUP macro will prompt for configuration parameters and create the configuration file on the HPE NonStop Server.

Configuration Steps 

  1. Download the CSP Authenticator+® setup executable from the CSP website.
  2. On a PC, run the downloaded executable to load the installation files onto the PC.
  3. Transfer the installation files from the PC to the HPE NonStop Server using the supplied CSPXFR program. Copy the ossgw and deploy files to an OSS install directory for the installation of CSP OSS gateway. Install the gateway >./deploy-ossgw.
  4. On the HPE NonStop Server, run the SETUP macro to install and configure CSP Authenticator+®.
    The SETUP macro prompts for configuration parameters and creates the configuration file. The configuration can be changed later by editing the file.
  1. Execute the provided macros to build and startup the SEEP or Pathway Server.
  2. Add all inclusive users to the RSA Authentication Manager and assign each token a password.
  3. Activate the users on the Agent Host just added. 

Configuration Parameters

ParameterDescription
EXCLUDEUSER
User name exclusive from the RSA SecurID
authentication (repeatable)
EXCLUDEALIAS
Alias exclusive from the RSA SecurID authentication
(repeatable)
Installation of CSP Authenticator+® High Availability CNA

Prerequisites

  • Kubernetes v1.19+ with working Ingress Controller
  • Helm v3+
  • If needed, CertManager installation, to handle LetsEncrypt SSL certificates
Example for the installation command:
helm install [NAME] [CHART] [flags]
 
Configuration is complete.
 
Return to main page.