5.5 Passphrase Security System Scenarios
There are several possible scenarios for the user experience in environments where the passphrase security has been enabled or disabled.
Scenario 1: Passphrase Security System Disabled after Being Enabled
When the passphrase security system is disabled in an environment where it was previously enabled, the following message appears to users the first time they log in after the change.
The user is presented with two choices:
-
OK: Approves the removal of passphrase security system. The user is prompted for the current passphrase answer; when provided, it completes the approval and the passphrase is disabled.
-
Cancel: Delays the approval. The user is prompted at each subsequent login until he or she clicks to approve the change.
Scenario 2: Passphrase Security System Re-enabled after Being Disabled
If the passphrase security system is re-enabled, the Passphrase Setup dialog box is displayed.
The user is presented with two choices:
-
OK: After entering a passphrase question and answer, this enables user’s workstation.
-
Cancel: Delays enabling passphrases for user’s workstation. The user is prompted at each subsequent login until he or she enters a passphrase question and answer and clicks .
Scenario 3: Moving User Objects When a Password Is Reset and the Passphrase Security System Is Disabled
If you have disabled the passphrase security system and reset the user’s password:
- In the LDAP-compatible and eDirectory (with SecretStore) modes, you cannot move a user object to another Organizational Unit until the user has logged on to SecureLogin on his or her workstation. If the User object is moved, the user cannot run SecureLogin. You must move the user object back to its previous location to enable the user to run SecureLogin.
- In the Active Directory mode, you can move the User object within the directory, but copying is limited. If the User object is moved outside the directory, the result is the same as noted above.