SEAGATE Lyve Mobile Securit User Guide

SEAGATE Lyve Mobile Securit

Product Information

Model:

Lyve Mobile Security Lyve Mobile offers two ways for product end user admins to manage how product end users securely access Lyve Mobile storage devices:

• Lyve Portal Identity: Product end users authorize client computers to access Lyve Mobile devices using their Lyve Management Portal credentials. Requires an internet connection for initial setup and periodic reauthorization through Lyve Management Portal.
• Lyve Token Security: Product end users are provided with Lyve Token files that can be installed on certified client computers and Lyve Mobile Padlock devices. Once configured, computers/Padlock devices unlocking Lyve Mobile devices do not require access to Lyve Management Portal or the internet.

Key Terms

• Client computer: A computer with the Lyve Client app installed that will be used to unlock one or more Lyve Mobile devices.
• Lyve Client app: An app used to unlock specific Lyve Mobile devices. Lyve Client can be used in either or both of the following security procedures:
  • Lyve Portal Identity–Allows users to enter their Lyve Management credentials.
  • Lyve Token Security–Allows users to generate registration files.
• Lyve Mobile Padlock: Allows a USB external drive containing an unlocker to be directly connected to a Lyve Mobile PCIe Adapter or Lyve Mobile Rackmount Receiver.
• Lyve Token file: An encrypted security token file authorizing an unlocker to access specific Lyve Mobile devices.

Product Usage

Lyve Portal Identity:

To authorize client computers to access Lyve Mobile devices using Lyve Portal Identity, follow these steps:

1. Ensure there is an internet connection and open Lyve Management Portal credentials.
2. Install the Lyve Client app on the client’s computer that will be used to unlock the Lyve Mobile device.
3. Open the Lyve Client app and enter your Lyve Management Portal credentials.
4. Select the Lyve Mobile device you want to unlock and follow the prompts to unlock it.

Lyve Token Security:

To configure Lyve Token Security, follow these steps:

1. Ensure there is no internet connection required for the setup and periodic reauthorization.
2. Obtain the Lyve Token file from the product end user admin.
3. Install the Lyve Client app on the certified client computer or Lyve Mobile Padlock device that will be used to unlock the Lyve Mobile device.
4. Import the Lyve Token file into the Lyve Client app on the certified client computer or Lyve Mobile Padlock device.
5. Connect the certified client computer or Lyve Mobile Padlock device to the Lyve Mobile device you want to unlock.
6. Follow the prompts in the Lyve Client app to unlock the device.

Overview

Lyve Mobile offers two ways for product end user admins to manage how product end users securely access Lyve Mobile storage devices:

Lyve Portal Identity—Product end users authorize client computers to access Lyve Mobile devices using their Lyve Management Portal credentials. Requires an internet connection for initial setup and periodic reauthorization through Lyve Management Portal.
Lyve Token Security—Product end users are provided with Lyve Token files that can be installed on certified client computers and Lyve Mobile Padlock devices. Once configured, computers/Padlock devices unlocking Lyve Mobile devices do not require access to Lyve Management Portal or the internet.

Product Key terms

Client computer— A computer with the Lyve Client app installed that will be used to unlock one or more Lyve Mobile devices.

Lyve Client app— An app used to unlock specific Lyve Mobile devices. Lyve Client can be used in either or both of the following security procedures:

• Lyve Portal Identity—Allows users to enter their Lyve Management credentials.
• Lyve Token Security—Allows users to generate registration files.

Lyve Mobile Padlock— Allows a USB external drive containing an unlocker to be directly connected to a Lyve Mobile PCIe Adapter or Lyve Mobile Rackmount Receiver.
Lyve Portal Identity— Product end users authorize client computers to access Lyve Mobile devices using their Lyve Management Portal credentials. Requires an internet connection for initial setup and periodic reauthorization through Lyve Management Portal.
Lyve Token file— An encrypted security token file authorizing an unlocker to access specific Lyve Mobile devices.

Lyve Token Security— Product end users are provided with Lyve Token files that can be installed on certified client computers and Lyve Mobile Padlock devices. Once configured, computers/Padlock devices unlocking Lyve Mobile devices do not require access to Lyve Management Portal or the internet.

Product end user— End user accessing data from Lyve Mobile devices.

Product end user admin— Administrator responsible for security administration and project workflows. Provides product end users with either or both:

• Permissions to access Lyve Mobile devices using Lyve Management Portal credentials (Lyve Portal Identity).
• Lyve Token files that can be installed on certified client computers and Lyve Mobile Padlock devices (Lyve Token Security).

Registration file— A JSON file certifiying a specific installation of the Lyve Client app as an unlocker. A product end user downloads a registration file from Lyve Client running on the client computer. The registration file is sent to a product end-user admin, who uses it to produce a Lyve Token file.
Registration files cannot be transferred between client computers or installations of Lyve Client. If a product end user uninstalls/reinstalls Lyve Client, they’ll need to download new registration files to send to their product end user admin.

Unlocker— A device that is authorized to access assigned Lyve Mobile devices. There are two types of unlockers:

• Software unlocker—A client computer installed with a Lyve Client app that has been certified to access assigned Lyve Mobile devices.
• Hardware unlockers—A Lyve Mobile Padlock that has been certified to access assigned Lyve Mobile devices.

Lyve Portal Identity

With Lyve Portal Identity, product end users sign in to the Lyve Management Portal to authorize client computers to access Lyve Mobile devices.

Requirements

• Product end user admin has set up projects and assigned product end users to one or more projects. Product end-user has successfully set up an account in Lyve
• Management Portal. Product end-user has downloaded and installed the Lyve Client app on the computer they will use to unlock Lyve Mobile devices. For details on installing and using the Lyve Client app, see Getting Started with Lyve Client Software.
• Devices have been delivered to the end user.

Product end-user tasks

1. Product end user signs in to their account using the Lyve Client app on the computer they will use to unlock Lyve Mobile devices.
2. Lyve Client authorizes the computer to unlock and access assigned Lyve Mobile devices. Note—An internet connection is required when initially authorizing the computer.

The client computer remains authorized to access assigned Lyve Mobile devices for 30 days. During the 30 day period, it can unlock devices even without access to Lyve Management Portal or the internet. The client computer will automatically unlock a device if it connected to it in the past and is still authorized for security.

Lyve Token Security – Overview

With Lyve Token Security, product end user admins provide product end users withL yve Token files that authorize unlockers to access assigned Lyve Mobile devices. Unlockers can unlock assigned Lyve Mobile devices without access to Lyve Management Portal or the internet.

There are two types of unlockers:

• Software unlocker—A client computer installed with a Lyve Client app that has been certified to access assigned Lyve Mobile devices.
• Hardware unlockers —A Lyve Mobile Padlock that has been certified to access assigned Lyve Mobile devices.

For details on unlocker configuration and usage, see the following:

• Lyve Token Security – Software Unlocker
• Lyve Token Security – Hardware Unlocker

Lyve Token Security – Soware Unlocker

Requirements

• Product end user admin has set up projects and added devices to projects.
• Devices have been delivered to the product end user.
• End user has downloaded and installed the Lyve Client app on the computer they will use to unlock Lyve Mobile devices. For details on installing and using the Lyve Client app, seeG etting Started with Lyve Client Software.

Process

1.  Product end user registers the Lyve Client app installed on a client computer and creates aregistration file. User sends the registration file to a product end-user admin.
2. Admin uploads the registration file to the Lyve Management Portal and registers the client computeas a software unlocker.
3. Admin assigns devices to the unlocker and downloads an encryptedL yve Token file authorizing the unlocker to access Lyve Mobile devices.
4. Admin sends the token file to the user.
5. User imports the token file into the Lyve Client app on the client computer. Lyve Client can now unlock assigned Lyve Mobile devices with no connection to Lyve Management Portal or the internet.

End user initial tasks

Create a registraon file
You will need a registration file for each client computer/Lyve Client installation used to access Lyve Mobile devices.

1. On the client computer that you will use to unlock Lyve Mobile devices, open the Lyve Client app.

2. On the Welcome screen, click Get started.

3. In the dialog, click Register Lyve Client.
   If you don’t see the dialog, click on the Devices tab and then click the banner.
   Alternatively, click on the Unlock icon on any device card and select Register.

4. In the dialog, enter a registration filename. Click Save.

5. Confirm the location for the download. Click Save.
   A JSON file is downloaded to the location you specified.

Send the registration file to your product end user admin
Send the registration file JSON file to your product end user admin.

Admin tasks

Register the Lyve Client installaion as an unlocker

1. Sign in to lyve.seagate.com. Enter a verification code to continue to Lyve Management Portal.
2. Click Projects in the navigation bar.
3. Click on a project.
4. On the Project Details page, click on the Manage Projects dropdown and select Register Software.
5. In the Register Software Client dialog, click Attach File.
6. Navigate to the location where you are storing the certificate for the Lyve Client installation you wish to register. Select the file and click Attach File.
7. Enter a name for the Lyve Client installation. Choose any friendly name that helps you differentiate one product end user/Lyve Client installation from another.
8. Click Register.

You must upload a registration file and enter a name before you can click Register.

Choose unlockers and assign devices

1. In the confirmation dialog, click the Token Files Download link.
   If you’re no longer viewing the confirmation dialog, go to the Project Details page and select Token Files Download from the Manage Projects dropdown.

2. Click checkboxes to select one or more unlockers. Selected unlockers will be permitted to unlock the devices you specify.

3. Click checkboxes to select one or more devices. Selected devices can be unlocked by any of the
   unlockers selected in step 1.
   If you don’t know a device’s serial number, you can find it by scanning the QR code on the left side of the Lyve Mobile Array handle.

4. Click Continue.

Download Lyve Token files

Note that in the following steps you’ll need to provide your Lyve Management Portal password and multifactor authentication before your Lyve Token files will be downloaded.

1. Review the details of the Lyve Token file you created.
2. Click Download.
3. At the prompt, enter your Lyve Management Portal password and click the Continue icon.
4. A dialog informs you that the Lyve Token file has been downloaded. ClickC lose.
5. Using a file browser such as Files Explorer or Finder, locate the file in the folder where you receive downloads.

Send the Lyve Token file to the product end user
Send the Lyve Token file you downloaded to the appropriate product end user.

End user final tasks

Download Lyve Token file
Download the Lyve Token file you received from you product end user admin to the appropriate Lyve Client installation accessing Lyve Mobile devices.

Import Lyve Token file and/or unlock devices

1. On the client computer, open the Lyve Client app.
2. Click on the Devices tab and then click the bannerAlternatively, click on the Unlock icon on any device card and selectI mport Token Files.
3. Use the folder tree to find the location of the downloaded JSON file. ClickIn spect File.
4. Review the following details:
   Serial Numbers| Devices that the Lyve Token file can unlock.
   ---|---
   Expires| Date/time when the Lyve Token file becomes invalid.
   Allow Import| Yes —Lyve Token file can be stored in the Lyve Client installation.

No —Lyve Token file may only be used to temporarily unlock devices.

5. Click one of the following:

Import Lyve Token File| Imports the Lyve Token file to the Lyve Client installation for future use. The file does not need to be reselected in the future.
---|---
Use Lyve Token File once| Allows Lyve Client to unlock assigned devices once. The file must be reselected to use it again in the future.

File issues
Issues with a Lyve Token file may prompt the following messages:

The file you’ve selected is corrupt or is not a Lyve Token file at all. It cannot be imported or used to unlock devices.| Lyve Client does not recognize the file as a Lyve Token file. Select a different Lyve Token file or register Lyve Client and request a new Lyve Token file from your product end user admin.
The selected Lyve Token file cannot be used with this installation of Lyve Client.| This Lyve Client installation is not an unlocker in this Lyve Token file. Select a different Lyve Token file or register Lyve Client and request a new Lyve Token file from your product end user admin.
The selected Lyve Token file does not authorize Lyve Client to unlock this device. Devices with the following serial numbers will be unlocked.| The Lyve Token file you attempted to import for a device is not authorized to unlock the selected device. Select a different Lyve Token file or register Lyve Client and request a new Lyve Token file for the selected device.
Lyve Token file has expired. Register Lyve Client and request a new Lyve Token file from your project administrator.| The Lyve Token file has passed its expiration date. Register Lyve Client and request a new Lyve Token file from your product end user admin.

Lyve Token Security – Hardware Unlocker

Requirements

• Product end user admin has set up projects and added devices to projects, including Lyve Mobile storage devices and a Lyve Mobile Padlock.
• Devices have been delivered to the product end user.

Process

1. In Lyve Management Portal, admin selects the Lyve Mobile Padlock as a hardware unlocker and assigns devices to it. Admin downloads an encrypted Lyve Token file that authorizes the unlocker to access Lyve Mobile devices.
2. Admin sends the token file to the product end user.
3. User downloads the Lyve Token file to a USB external drive.
4. User connects the USB external drive to a USB 3.0 port on Lyve Mobile Padlock. Lyve Mobile Padlock can now unlock assigned Lyve Mobile devices with no connection to Lyve Management Portal or the internet.

Admin tasks

Choose unlockers and assign devices

1. Sign in to lyve.seagate.com. Enter a verification code to continue to Lyve Management Portal.

2. Click Projects in the navigation bar.

3. Click on a project.

4.  On the Project Details page, click on the Manage Projects dropdown and select Token Files Download.

5. Click checkboxes to select one or more unlockers. Selected unlockers will be permitted to unlock the devices you specify.

6. Click checkboxes to select one or more devices. Selected devices can be unlocked by any of the unlockers selected in step 1.
   If you don’t know a device’s serial number, you or the device user can find it by scanning the QR code on the left side of the Lyve Mobile Array handle.

7. Click Continue.

Download Lyve Token file

1. Review the details of the Lyve Token file you created.
2. Click Download.
3. At the prompt, enter your Lyve Management Portal password and click the Continue icon.
4. A dialog informs you that the Lyve Token file has been downloaded. ClickC lose.
5. Using a file browser such as Files Explorer or Finder, locate the file in the folder where you receive downloads.

Send the Lyve Token file to the product end user
Send the Lyve Token file you downloaded to the appropriate product end user.

End user tasks

Download Lyve Token files
Download the Lyve Token file you received from you product end user admin and copy them to a USB external drive.

Connect USB drive to Lyve Mobile Padlock
Connect the USB external drive containing the Lyve Token file to one of the USB 3.0 ports on Lyve Mobile Padlock.

Hier klicken, um eine aktuelle Online-Version
dieses Dokuments aufzurufen. Auch finden Sie hier die aktuellsten Inhalte sowiee rweiterbare Illustrationen, eine übersichtlichere Navigation sowie Suchfunktionen.

References

• lyve.seagate.com
• lyve.seagate.com
• Lyve Management Portal User Manual - Project Management | Seagate US
• Lyve Management Portal User Manual - Project Management | Seagate UK
• Lyve Management Portal User Manual - Project Management | Seagate US
• Lyve Mobile Security User Guide - Accessing Devices with a Lyve Token Hardware Unlocker | Seagate US
• Lyve Mobile Security User Guide - Accessing Devices with a Lyve Token Software Unlocker | Seagate US
• Lyve Client Software User Manual - Getting Started with Lyve Client Software | Seagate US

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>