Perform a Verified Write

If you attempt to modify the value for an Application Server Galaxy attribute that has been configured with the Verified Write security classification, you must authenticate yourself using either a valid security account (domain name, username, and password) or a smart card. The write must also be verified by another person.

• The operator must have the "Can Modify Operate Attributes" operational permission to perform the Verified Write.

• The verifier must also have the "Can Verify Writes" operational permission to confirm the Verified Write.

Your authentication for a verified write does not affect the session of the currently logged-on user.

The smart card option is only available if a smart card reader is attached to the WindowViewer computer. You can use smart cards for logging in as either an operator, a verifier, or both, but the operator and the verifier must be two different people. If you previously logged on with your smart card, you must re-authenticate yourself.

You have the following options:

• You can use two smart card readers and two smart cards.

• If you have only one smart card reader available, you can use one smart card reader with one smart card for the Operator or for the Verifier. When the Operator logs on using certificate number and PIN, the Verifier needs to log on using the username and password or vice versa.

• You can use username and password authentication for both the operator and the verifier.

Perform a Verified Write

1. Attempt to Modify the value of an attribute configured with the Verified Write security classification.

   The Verified Write dialog box appears. The Mode buttons are disabled if no smart card is available.

   

2. Add a comment for the write action by selecting from the predefined Comment list or by entering your own comment in the Comment box. The comment is limited to 200 characters.

   The predefined comments list is only accessible when using the SignedWrite() script function.

3. If you are authenticating using a network user account, the user account options are shown.

   Do the following.

   1. In the Username box, type your user name. The name of the currently logged-on user is shown by default. If no user is currently logged on, the box is blank.

   2. In the Password box, type the password associated with the user name.

   3. In the Domain box, type the domain name.

   4. Select OK.

   5. To Authenticate using a smart card instead, select the Certificate button. Go to Step 4.

4. If you are authenticating using a smart card, the smart card options are shown.

   

   Do the following to authenticate using a smart card.

   1. In the Certificate list, select your smart card certificate. The certificate list appears as domain_name/user_name. For a certificate to appear in the list, smart card must be currently inserted into a reader attached to the computer. The certificate of the currently logged-on user is shown by default, if the user logged on using a smart card. If you insert or remove a card while the Secured Write dialog box is open, the certificate list automatically updates.

   2. In the PIN box, type the PIN for the smart card being used.

   3. Select OK.

   4. When a smart card is present, if you want to authenticate using your name, password, and domain instead, select the Mode button. Go to step 3.