11 Replication Wizard
15.1 Other Reporting Tasks
You can use the Administration Web Interface to view, edit, define, delete or run existing reports. A Report Definition Wizard simplifies the task of creating new custom reports.
15.1.1 Viewing Reports
To view a list of existing reports, mouse-over the REPORTS tab in the Administration Web Interface and select LIST from the A full list of available reports is displayed.
To view details of a single report, click on the Report Name. The Report Definition page is displayed, with details including:
From this page you can Edit, Run or Delete the report by clicking the appropriate button. See below for more detail on these operations.
Additional report details can be viewed by clicking the tabs for Fields, Queries, Permissions and Templates. For more information on these features, see below, 15.1.4 Creating Reports with the Report Definition Wizard.
Viewing Finished Reports
If you choose to run a report immediately, you can view the finished PDF or HTML report by clicking the link in the Summary tab window.
If you have scheduled a report to run at a later time, you can view the finished report by clicking on the Servers tab and selecting Retrieve Reports.
Note
There is a known issue with downloading PDF reports via https in Microsoft Internet Explorer 7 and 8. For troubleshooting details see PDF Download.
15.1.2 Running Reports
To run an existing report:
Reporting
Open a report for viewing (as above) and click the Run button.
Mouse over the REPORTS tab and click Run report, select the desired report from the displayed list, and click Next.
2. The Report Settings tab is displayed. Choose the Template to use (HTML, PDF or XML) and specify the Time Period for the report. Click Next.
3. The Runtime Queries tab is displayed. Define the query required (if any) and click Next.
4. The Schedule Task tab is displayed. You can run the report immediately, or enter details to run a scheduled report in the background. Only PDF reports can be run from the background. Click Next.
5. The Finish tab displays any confirmation or error messages. If you chose to run the report immediately, you can click Open to view the report. Otherwise click Finish to close.
15.1.3 Changing Report Owners
By default, the report owner is the user who created that report. To assign a report to another owner:
1. Locate the desired report from the list of available reports in the Administration Web Interface, and click on the Report Name.
2. Click on the Permissions tab, then click the Change Owner button.
3. The Change Report Owner window is displayed, with three tabs:
In the Search tab, enter available information (e.g. Organizational Unit, Account Status, etc) and click Search.
The Select User tab shows a list of users whose data matched your search criteria. Select the desired user and click Change Owner.
The Finish tab verifies the change you wish to make. Click Finish to apply the change.
15.1.4 Creating Reports with the Report Definition Wizard
If standard IDENTIKEY Appliance reports do not meet your requirements, you can either edit an existing report or create a new custom report using the Report Definition Wizard in the Administration Web Interface.
The Report Definition Wizard guides you through the following series of information tabs:
Describe Report
At any time, you can click Cancel to cancel all settings and leave the wizard, or click Help for context-sensitive
To run the Report Definition Wizard:
1. Mouse over the Reports tab, then click Define Report on the drop down menu.
2. The Describe Report tab is displayed.
Enter a Report Name. The name must be unique. You can use up to 60 characters.
Select the Type of report from the list provided.
Enter a Report description. This should explain what the report contains, and what it is to be used for.
Click Next to continue.
3. The Options tab is displayed.
Select the Grouping Level from the drop down list. This will define the way in which data is grouped on the report.
Select the Data Source from the Click Next to continue.
4. If you are creating a Detailed Analysis or List Analysis report, and you selected audit data for the Data Source, then the Define Fields tab is displayed. (If not, the Define Query tab is shown, in which case you can ignore this step).
If you do not want to create a field-level filter, simply click Next. All field data will be included by default.
To create a field-level filter, enter a Display Name and select a Field Name from the available Then select the Operation you wish to perform on the chosen field and click the Create button..
Repeat the above step to create further field data filters if required. When you are done, click Next.
5. The Define Query tab is displayed.
To define a query, enter a Query name, select the required Field, and choose a Condition from the drop down list.
Some conditions (e.g. isblank) do not require an entry in the Value field. Any entry in the value field for these conditions will be ignored. Time values can be expressed in text (e.g. “last six months”).
When you are done, click the Add New button.
Repeat this step to create additional query filters if required. You can only specify one data field per query, so if you want to specify more than one field you must define more than one query.
When you are finished, click Next.
6. The Define New Query tab displays a list of queries that were entered on the previous tab. To view details of a query, click on the query name. When you have finished reviewing query details, click Next.
7. The Permissions tab is displayed. Specify who can alter and run the report by selecting the appropriate Usage Permissions and Update Permissions. Note that the owner is the person who created the report (unless re-assigned). Click Next to continue.
8. The Templates tab is displayed. If you do not want to use the default XML or PDF templates (this option is selected by default) then provide a new Template Name and browse to the location of the Template Definition file. Click Save to continue.
9. The Finish tab displays a summary of report information. Any confirmation or error messages are shown on this page. Click Finish to close the Report Definition Wizard.
Reporting
15.1.5 Editing Reports
To edit a report:
1. Mouse-over the REPORTS tab in the Administration Web Interface and select LIST from the 2. A full list of available reports is displayed. Click on the desired Report Name.
3. The Report Definition tab is displayed. If you wish to edit the information on this tab, click the Edit button.
Fields in the Report Definition tab will become available for editing.
4. Alternatively, if you wish to edit field, query, permissions or template data, click on the appropriate tab and then click Edit.
5. When you have finished editing data in each tab, click Save.
For further information on editable fields, see 15.1.4 Creating Reports with the Report Definition Wizard.
15.1.6 Deleting Reports
To delete an existing report:
1. Mouse-over the REPORTS tab in the Administration Web Interface and select LIST from the 2. A full list of available reports is displayed. Either:
Select the check box beside the report and click the Delete button at the bottom of the page, or Click on the desired Report Name and then click the Delete button.
3. A confirmation window pops up. Click OK to delete the report.
15.1.7 Customizing PDF and HTML Reports
You can produce customized IDENTIKEY Appliance reports with your own logo, header, and footer design. To do this, you must:
1. Follow the instructions below to create a template in either:
XML (for PDF reports) or XSLT (for HTML reports).
2. Use the the Administration Web Interface to upload the custom report template and link it to an IDENTIKEY Appliance report.
The custom template will be linked with that report thereafter. It can also be linked with other reports. If you delete a custom template, the associated report(s) will revert to the default IDENTIKEY Appliance template.
The following diagram shows how IDENTIKEY Appliance report data is transformed into a finished report.
Im age 67: Customized report dataflow
Custom PDF Report Templates
Custom PDF report templates are defined in XML. To create a custom PDF report template, open a text editor (or code editor) and create a new file, formatted like the example shown below.
<VASCO>
<PDFTemplate>
<content>
<image src="C:\pictures\blah.jpg"/>
<header align="left">My left-aligned header</header>
<footer align="right">My right-aligned footer</footer>
</content>
<layout>
<orientation>Portrait</orientation>
<paper-size>A4</paper-size>
</layout>
</PDFTemplate>
</VASCO>
Reporting
The src attribute of the image tag specifies the location of a header image, and should be an absolute file path.
The align attribute defines the alignment of the headers and footers. Possible values for this attribute are:
left center right
The orientation tag defines the PDF report's orientation, and has two possible values:
Portrait Landscape
The paper-size tag defines the size of the PDF report when printed. The following table lists the different paper sizes per value:
The structure of an XSLT template is considerably more complex than XML. To view the formatting structure, see the default XSLT files that are installed with IDENTIKEY Appliance.
Each default report provided by IDENTIKEY Appliance has a corresponding XSLT script for producing HTML output.
To view the corresponding XSLT script of a report:
1. Click on the REPORTS tab in the Administration Web Interface and select LIST from the 2. Click on the desired report to open it.
3. Click on the Template tab.
4. Click the HTML link. Doing so will open the XSLT template for that report.
Linking a custom template to a report:
Once you have created a custom template, you can link it to a report as follows:
1. Click on the REPORTS tab in the Administration Web Interface and select LIST from the 2. Click on the desired report to open it.
3. Click on the Template tab.
4. Click Edit. Doing so will provide new options.
5. Click Choose File and locate the new XML or XSLT template file (as created above).
6. Enter a Template Name and click the Upload button.
7. The new template will be uploaded and associated with that report.
15.1.8 Report Retrieval
Only reports created in PDF format can be retrieved via the Administration Web Interface. To retrieve a PDF report:
1. Click on the System tab and select Report Retrieval from the 2. This page may be used in two ways:
a. To Delete, Change Ownership or Take Ownership of one or more reports from this page, select the desired report or reports and click on the appropriate button.
b. Click on the report name to go to the Manage Reportfile page from where you can Delete, Change Ownership, Take Ownership or Download a report.
i If the Download option is selected, you may either Open the report immediately, or save the report to a specified location.
3. See the help in the Administration Web Interface for information on how to Change Ownership or Take Ownership of a report.
Create Custom Report Definition
16 Create Custom Report Definition
In this section, we explain the steps required to create a custom report definition.
Before attempting to create a custom report definition, we recommend that you read the Reporting section of the IDENTIKEY Appliance Product Guide.
1. Open the Administration Web Interface.
2. Click on the Reports tab and select Define report from the drop-down list.
3. Type a name for the report definition.
4. Select the type of report definition required:
List Analysis Report – a list of all items that match the criteria specified in the report definition Detailed Analysis Report - detail of selected events
Distribution Analysis Report - counts of events and/or objects
Trend Analysis Report – trends in event or object numbers over a specified period of time
5. Enter a description for the report definition – something which will help you and/or other administrators know what data will be found in the report.
6. Select a grouping level:
Client – connections requested and/or approved by machines with Client Component records Data from Audit sources only
Domain – DIGIPASS and DIGIPASS User information
Data from data store (e.g. list of DIGIPASS Users by Domain) or Audit sources (e.g. rejected authentication requests)
Organizational Unit – DIGIPASS and DIGIPASS User information
Data from data store (e.g. list of DIGIPASS Users by Organizational Unit) or Audit sources (e.g. rejected authentication requests)
User – DIGIPASS and DIGIPASS User information
Data from data store (e.g. list of DIGIPASS Users with DIGIPASS assigned) or Audit sources (e.g.
rejected authentication requests) DIGIPASS – DIGIPASS information
Data from data store (e.g. list of unassigned DIGIPASS) or Audit sources 7. Click on Next
8. Enter a name for the new query.
9. Click on Add New.
10. Select the name of a field, the condition, and the value on which to filter.
Example – To report on rejected authentication requests, select Audit:Code from the Field drop down list, select Equals from the Condition drop down list, and enter I007003 in the Value field.
11. Click on Next.
12. If desired, add more queries.
13. Click on Next.
14. Select Usage and Update permissions. Usage permissions control which administrators may view a report – Update permissions control which administrators may modify a report definition.
15. Click on Next.
16. To use the standard XML template, Select the Use the default XML template only option button. Or to use a custom template, select the Add new template in addition to default XML template option button and enter the location of the template and a name to use in referring to it.
17. Click on Save.
18. Click on Finish.
Configuring RADIUS setups
17 Configuring RADIUS setups
17.1 Overview
In this section we describe how to configure three example RADIUS setups:
a stand-alone IDENTIKEY Appliance in a RADIUS environment an IDENTIKEY Appliance as a RADIUS Proxy Target
an IDENTIKEY Appliance as an intermediate Server
For more information on RADIUS setups, please refer to the IDENTIKEY Appliance Product Guide, 'RADIUS Environments' section.