|
Preparing for Banner's New Login Process
by Nicole Collins
On March 9 and 10, more than 300 campus members attended two presentations by several members of the Banner Upgrade project team. Jeanne Moje, from the Registrar's Office, discussed the campus's responsibility to protect the confidentiality of student records stored in the Banner Student Information System, as stipulated in the Family Educational Rights and Privacy Act (FERPA) of 1974. Dan Dorough, systems administrator with IT-DCAS, described the technical security issues and efforts underway to implement a single logon for all campus computing systems. Michael Buck, Banner project manager, ended the presentation with a live demo of the current and new login processes.
The New Login Process
If you are a Banner user, you should have received email notifications indicating that the new login process requires a Kerberos password and an Enigma Logic hard token. (For a complete checklist and instructions on how to prepare for the upgrade, refer to last month's issue of the IT Times, available on the Web at http://ittimes.ucdavis.edu/v7n4/banner.html, or contact the Banner Help Desk at (530) 757-8996 or bannerhelpdesk@ucdavis.edu.)
Starting April 19, the only change you will notice when you access Banner is the new login process. Currently, you access Banner by entering your Citrix login (username) and Citrix password at the Banner screen. At the next screen, you click on the Banner icon, and then you enter your UCD LoginID and password. Finally, you click OK to run Banner at the Banner Logo Screen.
With the security upgrade, you will need to:
- Initiate the Banner login process by entering your Citrix login (username) and Citrix password at the Banner screen, as in the current login process.
- Next, instead of entering a database password, type your UCD LoginID and Kerberos password.
- A third window will request a password from your hard token. Take your token in hand, turn it on by pressing the ON button, wait until the window displays "EP" (for "Enter PIN"), and enter your assigned PIN (Personal Identification Number) on the keypad. A one-time password consisting of three characters, a dash, and three more characters will display on the hard token screen. You will have three chances to enter the correct PIN. After three failed attempts, "dancing lines" will appear on the token screen. They should disappear after one minute. If they do not, call the Banner Help Desk.
- Enter the hard token password at the Hardware Authentication Screen on your computer. (You may enter the characters as either upper- or lower-case, but you must omit the dash.)
- After you have successfully entered your password, Banner will start automatically. (See the tables below for a representation of the current and new login processes.)
Following a recent Banner upgrade presentation, Helen Rogers,
right, from the Geology department, tries out a hard token under
the watchful eye of veteran Banner user Claudia Turner,
from the Veterinary Genetics Lab.
Hard tokens, which look like small calculators, will generate a unique password every time you log on. This will prevent unauthorized access to Banner and will further protect the confidentiality of student records. They do not require any new software. In fact, they will enable you to log on to Banner from any workstation. Each token is assigned a serial number tied to an individual account, so it is important that you, and only you, use your hard token. You are responsible for any actions that take place in the Banner system under your account, so do not share your hard token with anyone and do not initiate multiple Banner sessions from several computers at the same time. Leaving one station unattended would create security risks.
Sign Up for a Workshop on the Web
If you have never used a hard token to access Banner or would like a quick refresher class, consider enrolling in one of the 45-minute workshops tentatively scheduled April 14-16 and April 19-21 in TB 134 (Macintosh Lab) and TB 135 (PC Lab).
The workshops are designed to help you
- Check your UCD LoginID, Kerberos password, and Citrix password.
- Obtain a PIN if you do not already have one.
- Practice using your security hard token.
- Try out the new login process.
Staff members will walk you through the login process and assist you with any remaining questions. If you decide to attend a workshop, bring your security hard token and a photo ID.
To sign up, go to the Banner training Web site at http://registrar.ucdavis.edu/training after March 30. The site will provide a schedule, including the times, days, and number of seats available.
Due to SCT (the Banner software company) copyright concerns, access to the Banner training Web site has been restricted to the UC Davis domain. If you experience difficulty accessing the Banner training Web site from off campus (e.g., from the UC Davis Medical Center, Tulare, Bodega Bay, or Lawrence Livermore Lab), notify Jeanne Moje, from the Registrar's Office, by emailing her at jmmoje@ucdavis.edu. (Your computer's IP address must be registered with the Registrar's Office.)
Nicole Collins is Communications Analyst with IT-Information Resources.
| CURRENT LOGIN PROCESS |
|
NEW LOGIN PROCESS
(Starting 4/19/99) |
| Step | Action |
|
Step | Action |
|---|
| 1 |
Banner Screen
Enter Citrix Login (username)
Enter Citrix Password
|
|
1 |
Banner Screen
Enter Citrix Login (username)
Enter Citrix Password
|
|---|
| 2 |
Developer 2000 (Banner database) Screen
Enter LoginID
Enter Password
|
|
2 |
Trust Broker Ticket Screen
Enter UCD LoginID
Enter Password (Kerberos)
|
|---|
| 3 |
Banner Logo Screen
Click OK to run Banner
|
|
3 |
Hardware Authentication Screen
Enter Hard Token PIN
Enter Hard Token Password
Banner Starts
|
|---|
|
|
