Device Code
To grant the user temporary access to a requested device you should generate an Unlock Code upon receiving the Device Code from that user. For more information, refer to the
Temporary White List section.
There are four simple steps to generating an Unlock Code for the user:
1. Load the DeviceLock Certificate private key as described
earlier.
2. Enter the Device Code, the user provides to you.
As soon as the correct Device Code is entered, you can see the class of the device the user wants access to in the Device Class field. The device class information helps you to control what kind of device the user is going to use. If, for example, a user declares the use of a USB scanner while actually trying to access a USB flash drive, the administrator would recognize the discrepancy.
There is also a field (in round brackets) showing whether the requested device can be authorized as a unique device (
Unique) or can be authorized only as a model (
Model), i.e. whether or not it has a serial number. If you authorize the device as a model, then the user is granted access to all devices of this model. For more information on this, refer to the
USB Devices White List (Regular Profile) section of this manual.
3. Select the period when the requested device will be allowed. In Allowed Period, you can select several predefined periods: 5, 15, 30, 60 minutes, 5 hours, 1 or 2 days, 1 or 2 weeks, 1 month, until the device is unplugged or until the user is logged off.
When you select a fixed time period (e.g. 10 minutes), the user is granted access to the requested device for only this period. As soon as the allowed time expires, access to the device is denied again. It doesn’t matter what the user is doing with this device - even if copying files onto the USB disk or printing a document on the USB printer is in progress, all operations will be aborted.
To allow the user to use a requested device without any time limitations, select until unplug in Allowed Period. The user is then granted access to the device while it is plugged into the port. As soon as the user unplugs this device, access to it is denied again.
4. Click the Generate button to create an Unlock Code. Provide this code to the user over the phone or in any other suitable way.
The process of generating an Unlock Code depends upon your computer’s processing speed and could take up to several seconds.
