Android 2.0
Contents
Swivel Android 2.x App Overview
Swivel Secure now offers a Android mobile client for use with the Swivel platform. This article explains how to download, configure and use this client. For other phones see Mobile Phone Client for earlier versions.
Requirements
Swivel 3.10 or later
Android OS
The Swivel virtual or hardware appliance must be reachable from the mobile phone to receive security strings
The index is required to be entered as nn on the end eaxample: 292401, Swivel versions earlier than 3.10 require ,nn example: 2924,01 otherwise it will see it as a dual channel authentication.
Valid certificate on the Swivel server or non SSL, but not a self signed certificate
Versions
Swivel Mobile Version 2.1.2 released: 05/02/2014
Version 2.1.1 released: 05/01/2014
- QR Code Provision
- Push Authentication Support
- Fix for Android 4.4.4
Version 2.0 released (Swivel 3.10 or later)
- Simple User Inteface
- Extra Mobile Policies
- Help Section
- Citrix Receiver VPN Client support (iPhone Only)
- Removal of comma from OTC
Which version do I need?
Swivel version 3.10 or later,
Android Mobile Client 2.1
Swivel Server Configuration
Configuring Mobile Client user access on the Swivel virtual or hardware appliance
To allow a user to authenticate using a One Time Code from a mobile app, the user must have Mobile app authentication enabled. To do this on the Swivel Administration console ensure that the group they are part of has access to the Mobile Client under Repository Groups.
Configuring the Swivel Authentication
Swivel can authenticate users using the mobile client to authenticate by RADIUS or Agent-XML authentication
- For RADIUS authentication see RADIUS Configuration Note: The access device must be configured to use PAP for authentication.
- For Agent-XML authentication see XML Authentication Configuration
Allow user to browse strings: Options Yes/No, Default No. Version 3.9.6 onwards. This option allows the Mobile Phone App user to browse through the security strings. Availability to this feature is server controlled.
Mobile Client Policies
For the Server based policies see Mobile Client Policies 2.0 for previous versions see Mobile Client Policies
Swivel Mobile Application Installation
The Swivel Mobile Phone Client 2 is available from the App store (see versions above). You can click the link to the and install from a web browser, or follow the instructions in this article to navigate to the App within the App Store.
Swivel Mobile Application Configuration
A user may use one of the following methods to provision a mobile device:
URL Provisioning
Provision URL Swivel 3.10 onwards
QR Code Provisioning
QR Code Provision Swivel 3.10.4 onwards
Get Server Settings
If an SSD server is being used, select Get Server Settings and enter the Server ID.
Manual Configuration
Manual entry may not be possible depending upon Swivel server policy
The settings are:
- Username: Your username that you use when you authenticate via Swivel
- Server: The URL from where the client can download security strings (or keys)
- Context: The context used by the web service. For a virtual or hardware appliance this is proxy, for a software install this is usually pinsafe
- Port: The port number used by the web service. For an virtual or hardware appliance this is 8443, for a software install this is 8080
- SSL: SSL settings
Once you have entered the settings you can select Submit in the header location of that page.
Downloading Security Strings or OTC
From the bottom menu there is a update keys button, pressing this will get you a new set of 99 security strings. This will attempt to retrieve Security Strings or OTC from the Swivel server.
If there are any problems and error message will be displayed
You can confirm that keys have been downloaded by checking the Swivel server logs
The Swivel server will display the following log message Security strings fetched for user: username
Swivel Client Policies
Policies may be hidden from view by the Swivel server settings.
The following options are available:
PIN Entry Whether the PIN can be entered or not to auto extract the OTC
Select String Allow String Browsing, This is a Swivel server controlled option, which if enabled will allow the user to browse through security strings on the mobile app.
Number Pad A number pad is displayed for the PIN entry
Notifications Support Used for the OneTouch Mobile.
Authenticating with Swivel Mobile Phone Clients
To use the Swivel Mobile Phone Clients to authenticate is very simple.
- Open the Swivel Mobile Phone Client.
- Select the key icon on the bottom menu.
- Depending on your policy settings you will either be prompted for a PIN or immediately shown a One-Time-Code OTC.
- If you are asked for a PIN, enter the PIN number previously sent during the enrolment phase.
- Enter the OTC into the authentication dialogue, make sure you enter all the characters.
If you need to authenticate again you can select the '<' or '>' button and a new string will be displayed (you may have to enter your PIN again).
Updating Keys
The Swivel Mobile Phone Client downloads 99 keys at a time and these keys are used one at a time until there are none left. However a new set of 99 keys can be downloaded at any time by selecting Update Keys. Downloading keys requires network connectivity so it is recommended that you download a new set of keys before the Android is likely to be without network connectivity for any length of time.
Known Issues
Android version 4.4.4
The 4.4.4 Operating System of Android has functionality issues with the Swivel Mobile Client 2.0 upgrade to the Swivel Mobile Client 2.10 overcome this.
A work around exists if it is not possible to upgrade:
In order to install the file SwivelMobile-debug.apk please connect your mobile via usb to your computer to place the attached file onto your phones file system, then use a file manager application https://play.google.com/store/apps/details?id=com.mobisystems.fileman&hl=en - Once you have the file loaded onto your phone on the internal storage then just navigate to it using file manager application and then double click and it will launch.
Troubleshooting
- Is the Swivel server accessible on the internet
- Check the connection settings to the Swivel server
- Check the Swivel logs for any error messages
- Can the phone access the internet
- If a RADIUS connection is seen from the access device to the Swivel server but authentication fails, try using PAP
- Download new security strings to the phone and retest
- Is the pin 6 characters when you only entered a 4 digit pin? If yes then enter all of the numbers you see on screen (the extra 2 are used as an index).
- Login fails and User receives a security string or One Time Code by SMS or email at each login attempt. Again make sure you are entering all of the numbers shown on screen.
- If the proxy port (8443) on the virtual or hardware appliance is being used, ensure that it supports the proxy request of the key retrieval using AgentXML. If this is the case then contact Support for an updated version of the Proxy.
Error Messages
Incorrect settings - please check your settings
The settings for downloading the security strings are incorrect. Verify what has been entered, and check what the values should be.
Timed Out
The settings for connecting to the Swivel server may be incorrect or the port is being blocked.
AGENT_ERROR_NO_SECURITY_STRINGS, AGENT ERROR NO SECURITY STRINGS
See AGENT ERROR NO SECURITY STRINGS
Tested Mobile Phones
The following phones have been tested
| Manufacturer | Phone Model | Kernel Version | Android Version | Operator | Compatible Y/N |
| Android | Galaxy S5 SM-G900F | 3.4.0-3624618 + | 5.0 | O2 | Y |
| Android | Galaxy S4 GT-I9505 | 3.4.0-481100 + | 4.4.4 | O2 | Y |
| Android | Galaxy S4 GT-I9505 | 3.4.0-481100 + | 4.4.2 | O2 | Y |
| Android | - | 3.2 + | - | Orange | Y |
| Android | - | 3.2 + | - | O2 | Y |
| Android | - | 3.2 + | - | Vodafone | Y |
- The current version only supports one device per user.
Keywords: Android, Security, Tokens, Android App,
