Excalibur Scenarios Manual for Administrators¶

Introduction¶

This document is like a pilot manual. It describes step by step how to use Excalibur, how to register an account, login, logout, actions in Dashboard interface, and how to use Excalibur application on mobile phone. The PAM section is an optional item for customers.

Excalibur Application¶

For full use of Excalibur, you need to have Excalibur Enterprise installed on your phone. The application is available for Android and iOS mobile platforms that can be downloaded from Google Play and Apple Store. Supported versions of mobile platform are Android 5.0 and up and iOS 9 and up. Recommended version of Android is Android 6.0 due to fingerprint support.

Open your mobile browser / Chrome, Safari, Opera, etc. / and type www.getexcalibur.com, scroll down and click on required platform you will be automatically redirected to Google Play or Apple Store to download the latest version of Excalibur application, or open store, find Excalibur application and install it.

Installation of Excalibur application¶

How to install application from web browser¶

1. Type to browser www.getexcalibur.com 
2. Select required platform
3. Click on “Install” button and install application
4. Click on “Open” button to run application

How to install application from market¶

1. Run market /Google Play, Apple store/ and find Excalibur 3.0 application
2. Click on “Install” button and install application
3. Click on “Open” button to run application

Run and initialization of application¶

How to run and initialize Excalibur application¶

1. Click on Excalibur icon to run application on mobile phone.
2. You will be asked to allow the camera usage to Excalibur application. Allow it
3. Click on “Register” button on Excalibur CPUI /PC Client/.
4. Click on “Next” button
5. Type in username and password and confirm by “Register” button
6. Scan registration QR code from PC client
7. Confirm registration
8. You will be asked to allow the position usage to Excalibur application. Allow it
9. Provide required authentication factors: Fingerprint / Face ID and PIN
10. You should be registered  

Main icon of application¶

History - detailed list of all authenticated sessions.

Scanner - scanner for all supported QRs (login, register, …)

Settings - list of all registered companies (identities) with appropriate actions

Application settings¶

Run on background - Android¶

Android Excalibur application provides to disable/enable background running on mobile. Enabling improves application speed.

How to disable/enable “Run on background”¶

1. Click on application settings
2. Disable or enable “Run on background”

Vibrations¶

Excalibur provides to disable/enable vibrations of mobile. When you scan the QR code or provide factors, vibrations are used.

How to disable/enable vibrations¶

1. Click on application settings
2. Disable or enable “Vibrations”

Notifications - iOS¶

iOS Excalibur application provides to disable/enable notifications on token. Notifications are required to work properly

1. Click on application settings
2. Disable or enable “Notifications”

Usage & Diagnostics¶

Excalibur application provides option to send data from User’s phone to the Vendor.

1. Click on application settings
2. Disable or enable “Usage & Diagnostics”

Language¶

Excalibur application provides a change of language in English or Slovak version.

How to change language¶

1. Click on application settings
2. Click on “Language”
3. Select language

App theme¶

Excalibur application provides an option to set the theme of Application. By default, theme is preset by device's mode. You can choose between device or dark and light theme

How to change app theme¶

1. Click on application settings
2. Click on App Theme
3. Select required theme

Report a problem¶

If you have a problem with the application, you have an option to report a problem.

How to report a problem¶

1. Click on application settings
2. Click on “Report a problem”
3. If you want to be contacted by developer, type email
4. Describe your problem and send your message by clicking on the “Send” button at the top right

Home geofences settings¶

If home office is allowed, then it is an option to set home location for logging to PC Client

How to create Location¶

1. Click on application settings    
2. Select “Home geofences”
3. Search your address using the “Search address” bar, the result will be displayed on the map.
4. Tap on selected place and confirm by “Add geofence”

How to remove Locations¶

1. Click on application settings
2. Select “Home geofences”
3. Select the location which you want to delete and click on it.
4. Click on “Remove geofences” to delete location

Application and server version and Library review¶

In the token you can find information about Application and third party libraries.

How to show version of mobile application and server version¶

1. Click on application settings
2. Click on selected company
3. At bottom rows are shown information about last registration (date, time), version of Excalibur server and mobile application  

How to show version of mobile application¶

1. Click on application settings
2. Scroll down and go to the About app.

How to show third party libraries¶

1. Click on application settings
2. Scroll down and go to the About app.

User’s data review¶

Excalibur application provides details of your registered account on token.

How to show account details¶

1. Click on application settings
2. Click on selected company
3. Select user’s account

4. At bottom rows are shown information about user’s account such as:

5. Login as - name which you use to login

6. Full name - Your name and surname
7. E-Mail - mail address which is used
8. Domain - domain where your account registered is
9. Type - Type of your account (Local / Active Directory)
10. Manager - In case that manager has been assigned to user

Reset PIN¶

Excalibur application provides a reset PIN in your device. If you use multicompany, PIN code is same for booth company

How to reset PIN¶

1. Click on application settings
2. Click on “Reset PIN”
3. Confirm by providing required authentication factors (PIN, fingerprint, Face ID)
4. Enter your new PIN code

Show password¶

Excalibur application provides to display your password on your registered phone. This option can be enabled or disabled by company's security policies.

How to show password¶

1. Click on application settings
2. Click on selected company
3. Click on your account
4. Click on “Show password”
5. Provide required authentication factors

Connection to server¶

User has an option to check connection of his/her token to Excalibur server

How to check connection¶

1. Click on application settings
2. If you see green dot next to your company, token is connected to server
3. If you see red dot next to your company, token is not connected to server

Session history¶

Excalibur lets you inspect your session history

How to check session history¶

1. Click on  Session History button on the left side of bottom panel
2. Scroll through your session history or change the month
3. Select specific session to see it on the map and see session details

Application termination - Android¶

You can close Excalibur application as follows

How to close application 1¶

1. Click on  application settings button and scroll down
2. Click on the “Exit App” button
3. Click on the Exit button to terminate application. Application doesn't run on background if “Run on background” is set up

How to close application 2¶

1. Click on the “Home”button on the phone. Application may run on background if “Run on background” is set up

Login/unlock and logout/lock PC¶

Online Login¶

When both your computer and your phone are online Excalibur executes Online Login which after confirming authentication factors logs you in automatically

1. Click on  scanner button and scan the Login QR from the screen of your computer with Excalibur mobile phone application
2. Confirm by providing required authentication factors (PIN, fingerprint, Face ID)
3. Computer should log you in automatically, if not:
   1. Continue to Static Password if Excalibur asks for your current password
   2. Continue to Expired Password if your password is expired and Excalibur asks for a new password
   3. Continue to OTP Login if Excalibur generates OTP code

Static password¶

During login Excalibur might ask you for your current User password. In this case:

1. Type in your current User password
2. Click on the “Login” button
3. Computer should log you in automatically

Change of expired password¶

When your password expires due to your company’s password policy Excalibur might ask you for the new password. In this case:

1. Type in your current User password
2. Type in your new User password
3. Confirm by clicking the “Change” button
4. Computer should log you in automatically

Login with OTP password¶

When your phone or your PC is offline, the Excalibur application might generate short OTP code with expiration instead of logging you in automatically. In that case:

1. Retype the OTP code into OTP field of your computer’s screen
2. Confirm by pressing “ENTER” key on your keyboard or click on confirmation button

Login without Phone¶

When you forget your phone, you might still log into the computer using Excalibur

1. Click on “Forgotten phone” button on your computer’s login screen
2. Type in your username, Excalibur PIN code and the reason why you can’t use Excalibur mobile phone application to log in
3. Confirm by clicking the “Login” button
4. Wait for the Administrator, Service Desk operator or your superior to confirm the Login

Session termination (lock/logout)¶

Excalibur always shows you all your active sessions and enables you to lock/logout them even if you are away from the computer

How to lock/logout session¶

1. Choose the online session from session list
2. Click on button
3. Select “Lock” or “Logout”

How to unlock/logout session¶

1. Choose the locked session from session list
2. Click on button
3. Select “Unlock” or “Logout”

Unlock option is only available at the location of last performed login. In case that User changed location, he / she has to scan QR code again to be able to log in.

Client application¶

How to install Excalibur client¶

Installation packages are delivered as .msi files for 32 and 64 bit version of Windows. To install Excalibur client on computer, follow steps in Excalibur Client Installation Manual

How to minimize/maximize client¶

To mininimize Excalibur client, click on x button located in the right top corner. To maximize Excalibur client, click on QR code

How to check internet connectivity¶

On the bottom bar on the right side, the Excalibur logo is located. It represents connection to the server. If logo has green dot, then client has connection to server. Red dot means that client has no connection to server. Client shows message to use OTP code to login.

How to select connection¶

Next to the connectivity icon, there is selector.

1. Hoover with mouse over connection selector
2. Select preferred connection
3. LAN - more preferred option over WiFi, due to stability and speed.
4. WiFi - less preferred option over LAN, due to stability and speed.
5. VPN - If Cisco AnyConnect is installed on your computer, then you have option to select this connection. If you select it, the Cisco AnyConnect window shows up.
6. Client should be connected via selected connection.

How to select language¶

Excalibur client allows switching between Slovak and English language. To switch between languages, follow steps:

1. Hover with mouse over EN/SK icon.
2. Select required language.

How to select keyboard language input¶

Excalibur client allows switching between Slovak and English keyboard language input. To switch between languages, follow steps:

1. Hover with mouse over ENG/SLK icon in rectangle.
2. Select required language input.

How to use Help in Excalibur Client¶

In the right bottom corner, the question mark in circle is located. To display Help, follow steps:

1. Hover with mouse over Help icon.
2. Select required help.
3. Help should be shown.

How to check version of Excalibur Client¶

The version of Excalibur Client is displayed in the center bottom of Excalibur Client screen. Grey text.

How to get logs from Excalibur Client¶

Logs are stored in log folder. To get logs, follow steps:

1. Navigate to folder: C:\Program Files\Excalibur Enterprise\logs
2. There are logs stored in txt files.

Dashboard¶

Login to Dashboard¶

Excalibur provides an option for login to the user's interface / Dashboard.

How to login to dashboard¶

1. For login to dashboard type to web browser the address of your Dashboard
2. After Dashboard login screen loading, scan QR code with initialized token and provide required factors
3. After login you will be redirected to user account

How to register from dashboard¶

1. For registration from dashboard type to web browser the address: “addressofyourdashboard/register”
2. Type your credentials in format: Domain\username
3. Scan registration QR code with initialized token and provide required factors
4. After registration you will be redirected to user account

Overview¶

How to check Server and facade status¶

If it is necessary to check server and facade status, follow the next steps:

1. Login to dashboard under Administrator account
2. Click on Overview on left menu
3. Click on the Server tab

Administrator can see on the left side of this tab server’s version and components which server uses. On right tab is shown facade version and connectivity status

How to restart server¶

If it is necessary to restart server, follow the next steps:

1. Login to dashboard under Administrator account
2. Click on Overview on left menu
3. Click on the Server tab
4. Click on “Restart” button

How to Add a component to server¶

If it is necessary to add new component to server, follow the next steps:

1. Login to dashboard under Administrator account
2. Click on Overview on left menu
3. Click on the Server tab
4. Add new component:
   1. Click on the “Drag here or browse to upload” button. Find component on your drive. Select it, and click to open.
   2. Find component on your drive and drag it to server tab
5. Click on “Restart” button

How to get logs from Facade¶

If it is necessary to check or report logs from Facade, follow the next steps:

1. Login to dashboard under Administrator account
2. Click on Overview on left menu
3. Click on the Server tab
4. Click on “Get Logs” button
5. Click on “Download logs” button
6. Logs are downloaded immediately

How to enable/disable “Night mode”¶

Night mode serves to process manual sessions. Manual sessions are usually processed during 3-4:00 am. But in the same cases enabling Night mode is needed.

1. Login to dashboard under Administrator account
2. Click on Overview on left menu
3. Click on the Server tab
4. Click on the Night mode button and allow it.

How to check PAM storage¶

Excalibur allows to see usage of disc space for PAM

1. Login to dashboard under Administrator account
2. Click on Overview on left menu
3. Click on the Server tab.
4. On the right side you can see usage of disc space

How to check TRESK availability¶

Information about TRESK are described in TRESK Whitepaper

1. Login to dashboard under Administrator account
2. Click on Overview on left menu
3. Click on the Server tab
4. On the right side you can see availability of TRESK

How to check statistics¶

Excalibur Dashboard provides statistics about Sessions, Actions, incidents and used devices in company

1. Login to dashboard under Administrator account
2. Click on Overview on left menu
3. You can switch among Statistics/Sessions/Actions/Devices tabs to show details

How to show report¶

1. Login to dashboard under Administrator account
2. Click on Overview on left menu
3. Click on Report tab

Users¶

Administrator has an option to manage other users.

How to check user’s sessions¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on Sessions tab
5. Sessions will be shown.

In the session tab you can check the type of session, date, workstation and location. You can lock or log out last known session

How to check user’s actions¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on Actions tab
5. There is a list of all actions which user made

How to check user’s incidents¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on Incidents tab
5. There is a list of all incidents which user made

How to check user’s account¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on the Accounts tab
5. Accounts will be shown

How to disable user’s account¶

If it is any reason for disable the user’s account, follow the next steps:

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on the Accounts tab
5. Cover with mouse cursor on account, “Disable” button will be shown
6. Click on “Disable” button
7. Confirm disable action

How to enable user’s account¶

If it is any reason that any user has disabled account and it is necessary to activate it, the user has to execute self-registration again.

How to check user’s tokens¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on Tokens tab

How to disable user’s token¶

If it is any reason for disable the user’s token, follow the next steps:

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on Tokens tab
5. Cover with mouse cursor on “version app” on selected token, “Disable” button will be shown
6. Click on “Disable” button
7. Confirm disable action

How to enable user’s token¶

If there is any reason that any user has disabled token and it is necessary to activate it, the user has to execute self-registration again.

How to check user’s computer¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on Computers tab and there is a list of computers which have been used

How to check user’s PAM applications¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on PAM tab

How to run PAM application from user’s detail¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Switch to PAM tab
5. Click on icon of desired application and session will start in a new browser tab

How to check user’s groups¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on the Groups tab
5. Informations about user’s groups will be shown
6. By clicking on specific group, information about group will be shown

How to check user’s roles¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on Roles tab
5. Informations about user’s roles will be shown

How to check user’s subordinates¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on Subordinates tab
5. By clicking on subordinate, information about user will be shown

How to set location¶

Users usually have the option to set their own locations by default policy. Administrator may have a policy to set location for another user.

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on Location tab
5. Find locality on map
6. Click on “+” button at the top right on the map
7. Click on selected locality
8. Select Type of locality. Home/ Temporary
9. For Temporary location set expiration date
10. Confirm by clicking on “Create” button
11. Scan QR code or confirm Push notification on mobile
12. Provide required factors

How to add Home / Temporary Location¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on the Locations tab
5. Click on “+” button and click on selected place on the map
6. Select type of location. If you select Temporary, you select validation date/
7. Click on “Create” button
8. Scan shown QR code or confirm push notification on mobile phone
9. Provide required factors

How to edit Home / Temporary Locations 1¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on Location tab
5. Find location on map
6. Right click on selected location
7. Select “Edit locations”
8. Change position by dragging circle or change radius for temporary location by dragging points on circuit
9. Click on map
10. Confirm changes
11. Scan shown QR code or confirm push notification on mobile phone
12. Provide required factors

How to edit Home / Temporary Locations 2¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on Location tab
5. Find location on list
6. Click on selected location and click on button
7. Change position by dragging circle or change radius for temporary location by dragging points on circuit
8. Click on map
9. Confirm changes
10. Scan shown QR code or confirm push notification on mobile phone
11. Provide required factors

How to change temporary validation date 1¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on the Locations tab
5. Find locality on map
6. Right click on selected temporary location
7. Select “Change date”
8. Change date by clicking on date and select new date
9. Click on “Change” button
10. Scan shown QR code or confirm push notification on mobile phone
11. Provide required factors

How to change temporary validation date 2¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on Location tab
5. Find location on list
6. Click on selected temporary location and click on button
7. Change date by clicking on date and select new date
8. Click on “Change” button
9. Scan shown QR code or confirm push notification on mobile phone
10. Provide required factors

How to remove Home/Temporary locations 1¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on Location tab
5. Find location on map
6. Right click on selected location
7. Select “Remove locations”
8. Confirm removing

How to remove Home/Temporary locations 2¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on Location tab
5. Find location on list
6. Click on selected location and click on “x” button

How to change map layer¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on the Locations tab
5. On the bottom left of the map you can switch between layers Map/Hybrid/Styled Map
6. Click on selected layer, changes will be shown immediately

How to check users Users logs¶

1. Login to dashboard under Administrator account
2. Click on Users on left menu
3. Click on selected user from list
4. Click on the Logger tab
5. You see all actions
6. By clicking on specific action, detail shows up

Timeline¶

Timeline provide preview of all sessions (Locked, Online, Manual, OTP and Tokenless) which has occurred in a day

How to check timeline¶

1. Login to dashboard under Administrator account
2. Click on Timeline on left menu
3. There is a list of users with their timelines
4. By clicking on left/right arrow, you can check timelines which has been occurred
5. By clicking on button on right top, you can select timeline by day

Actions¶

How to check Actions¶

1. Login to dashboard under Administrator account
2. Click on Actions on left menu
3. There is a list of the latest actions which have occurred. Tabs are divided by action
4. By clicking on specific row in tab of action, information about action on right side will be shown

How to filter Actions¶

1. Login to dashboard under Administrator account
2. Click on Actions on left menu
3. Click on selected tab of action
4. Click on button and select criteria (status, users or time)

Sessions¶

How to check Sessions¶

1. Login to dashboard under Administrator account
2. Click on Sessions on left menu
3. There is a list of all Logged, Active, and Manual sessions, as well as their History divided to tabs
4. By selecting of tab and clicking on specific row, you will be redirected to user account with session tab

How to lock/logout session from Sessions menu¶

1. Login to dashboard under Administrator account
2. Click on Sessions on left menu
3. Cover with mouse cursor on selected session, lock and logout buttons will be shown
4. Click on lock/logout button and confirm lock/logout

Computers¶

How to check computers¶

1. Login to dashboard under Administrator account
2. Click on Computers on left menu
3. There is a list of all computers which are used in the domain. In the tab are recorded information about computers (name, version of Excalibur, version of OS, connection status)
4. By clicking on a specific computer, you will be redirected to the page with Sessions, Incidents, Users, Groups and Actions tab.

How to check computer’s sessions¶

1. Login to dashboard under Administrator account
2. Click on Computers on left menu
3. Click on selected computer
4. You will be redirected to computer’s sessions and you can see all sessions of computer

How to check computer’s incidents¶

1. Login to dashboard under Administrator account
2. Click on Computers on left menu
3. Click on selected computer
4. You will be redirected to computer’s sessions
5. Switch to Incident tab
6. By clicking on specific incident, information about the incident will be shown

How to check computer’s users¶

1. Login to dashboard under Administrator account
2. Click on Computers on left menu
3. Click on selected computer
4. You will be redirected to computer’s sessions
5. Switch to Users tab and you can see users who have been logged to computer

How to check computer’s groups¶

1. Login to dashboard under Administrator account
2. Click on Computers on left menu
3. Click on selected computer
4. You will be redirected to computer’s sessions
5. Switch to Groups tab

How to check computer’s actions¶

1. Login to dashboard under Administrator account
2. Click on Computers on left menu
3. Click on selected computer
4. You will be redirected to computer’s sessions
5. Switch to Actions tab
6. By clicking on specific action, information about action will be shown

How to get Logs from computers¶

1. Login to dashboard under Administrator account
2. Click on Computers on left menu
3. Click on selected computer / Note: On computer have to be installed supported PC client application and computer have to be connected. /
4. Click on “Get logs” button on the right side
5. Logs will be downloaded to your computer

Components¶

How to check components¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. There is a list of all components with their version, platform and type

How to create component¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Click on “+” button on right top
4. Type name of component
5. Select platform and other fields
6. Save component

How to rename component¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Cover with mouse cursor on selected component, buttons will be shown
4. Click on button and rename component
5. Save changes

How to delete component 1¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Cover with mouse cursor on selected component, buttons will be shown
4. Click on ”x” button
5. Confirm delete

How to delete component 2¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Click on selected component
4. Click on ”x” next to button on right top
5. Confirm delete

How to set component¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Click on selected component
4. Click on button on right top
5. Edit component
6. Save changes

How to check sessions of component¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Click on selected component
4. Switch to Sessions tab

How to check incidents of component¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Click on selected component
4. Switch to Incidents tab

How to check users of component¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Click on selected component
4. Switch to Users tab

How to check groups of component¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Click on selected component
4. Switch to Groups tab

How to check actions of component¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Click on selected component
4. By clicking on specific row, information about action will be shown

How to create role for component¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Click on selected component
4. Switch to Roles tab
5. Click on “+” button of roles tab on right top
6. Type name of role
7. Save role

How to rename role of component¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Click on selected component
4. Switch to Roles tab
5. Cover with mouse cursor on selected role, buttons will be shown
6. Click on button and rename role
7. Save changes

How to delete role of component¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Click on selected component
4. Switch to Roles tab
5. Cover with mouse cursor on selected role, buttons will be shown
6. Click on ”x” button
7. Confirm delete

How to assign group of users for role of component¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Click on selected component
4. Switch to Roles tab
5. Click on selected role
6. Switch on Group tab on right side
7. Click on “+” button under Group tab
8. Select groups of users
9. Confirm by “Add” button

How to unassign group of users for role of component¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Click on selected component
4. Switch to Roles tab
5. Click on selected role
6. Switch on Group tab on right side
7. Click on “-” button under Group tab
8. Select groups of users
9. Confirm by “Remove” button

How to check users of role of component¶

1. Login to dashboard under Administrator account
2. Click on Components on left menu
3. Click on selected component
4. Switch to Roles tab
5. Click on selected role
6. Switch on Users tab on right side

PAM - optional¶

How to create PAM application 1¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Click on + button in the top right corner and settings windows shows up
4. Fill in all fields and save it

How to create PAM application 2¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Switch to List tab
4. Click on + button in the top right corner and settings windows shows up
5. Fill in all fields and save it

How to run PAM application from PAM section 1¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Click on icon of desired application and session will start in a new browser tab

How to run PAM application from PAM section 2¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Switch to List tab
4. Click on icon of desired application and session will start in a new browser tab

How to terminate PAM session¶

1. Close PAM tab on web browser

How to edit PAM application 1¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Click on the Edit button under icon of desired application and settings windows shows up
4. Make a change and save it

How to edit PAM application 2¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Switch to List tab
4. Go over desired application and click on button which shows up on the right side and settings windows shows up
5. Make a change and save it

How to delete PAM application 1¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Click on the Delete button under icon of desired application
4. Confirm delete of application

How to delete PAM application 2¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Switch to List tab
4. Go over desired application and click on button which shows up
5. Confirm delete of application

How to display PAM details¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Switch to List tab
4. Click on the name of the desired application and further details shows up /sessions, actions, incidents, users, groups, history/

How to view PAM session¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Switch to List tab
4. Click on the name of the desired application and session tab shows up
5. Go over desired session and click on button which shows up
6. Click on the button to play the recorded session on browser

How to download typescript of PAM session /SSH/¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Switch to List tab
4. Click on the name of the SSH application and session tab shows up
5. Go over desired session and click on button which shows up
6. Typescript will be downloaded immediately

How to download typescript timing of PAM session /SSH/¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Switch to List tab
4. Click on the name of the SSH application and session tab shows up
5. Go over desired session and click on button which shows up
6. Typescript timing will be downloaded immediately

How to display users who use specific PAM application¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Switch to List tab
4. Click on the name of the desired application and session tab shows up
5. Switch to Users tab to display all users who use this PAM application

How to display groups where specific PAM application is assigned¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Switch to List tab
4. Click on the name of the desired application and session tab shows up
5. Switch to Groups tab to display all groups where PAM application is assigned

How to display changes which have been made¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Switch to List tab
4. Click on the name of the desired application and session tab shows up
5. Switch to History tab to display all changes of PAM application which have been made

How to download file (File transfer have to be enabled)¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Select desired SSH application and run it
4. Click on button at the top of the new PAM session tab, and panel shows up
5. Click on device
6. Select folder by double click
7. Doubleclick on selected file. File is downloaded immediately

How to download file from another destination (RDP)¶

If you have access to another location follow next steps

1. Open This computer
2. Go to Shared disk on Excalibur and copy file there
3. Then move the file to the Download folder. File will be downloaded immediately

How to upload file (File transfer have to be enabled)¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Select desired SSH application and run it
4. Click on button at the top of the new PAM session tab, and panel shows up
5. Click on device
6. Select folder by double click where file will be uploaded
7. Click on the Upload file button and select file from computer. File is uploaded immediately

How to check transfered files¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Switch to File transfers tab and there is a list of all files which were transferred

How to download transferred files¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Switch to File transfers tab and there is a list of all files which were transferred
4. Click on desired file and file is downloaded immediately

How to search word in PAM sessions¶

1. Login to dashboard under Administrator account
2. Click on PAM on left menu and Resource tab shows up
3. Switch to Fulltext search tab
4. Type desired keyword into Search bar. All sessions which include keywords are shown immediately.
5. Hover by mouse cursor over required session and click on the button, to play the required session. Blue highlighted interval on timeline is the place of required keyword you search

Groups¶

Users¶

How to create a group of Users¶

1. Login to dashboard under Administrator account
2. Click on Users under Groups on left menu
3. Click on “+” button
4. Type in the name of group
5. Select users by typing to Users field or select users by domain
6. Save group

How to delete a group of Users¶

1. Login to dashboard under Administrator account
2. Click on Users under Groups on left menu
3. Find the group and move with the mouse over it. Buttons will be shown.
4. Click on “x” button
5. Confirm deleting of group

How to rename group of Users¶

1. Login to dashboard under Administrator account
2. Click on Users under Groups on left menu
3. Find the group and move with the mouse over it. Buttons will be shown.
4. Click on button, and rename group
5. Save the changes

How to edit group of Users¶

1. Login to dashboard under Administrator account
2. Click on Users under Groups on left menu
3. Click on selected group
4. Click on right top button, and edit group
5. Save changes

How to check users in group¶

1. Login to dashboard under Administrator account
2. Click on Users under Groups on left menu
3. Click on selected group
4. Switch tab on right top from Filter to Users

How to assign policies to group¶

1. Login to dashboard under Administrator account
2. Click on Users under Groups on left menu
3. Click on selected group
4. Switch tab on right top from Filter to Policies
5. Click on “+” tab on right top
6. Select policies from list
7. Confirm by Add button

How to change policy criteria in group¶

In groups is an option to change the policy of the group. If it is necessary, follow the next steps:

1. Login to dashboard under Administrator account
2. Click on Users under Groups on left menu
3. Click on selected group
4. Switch tab on right top from Filter to Policies
5. Click on right top button
6. Select desired action’s tabs and change required criteria
7. Save changes

How to check History of group of Users¶

1. Login to dashboard under Administrator account
2. Click on Users under Groups on left menu
3. Click on selected group
4. Switch tab on right top from Filter to History

Computers¶

How to create a group of Computers¶

1. Login to dashboard under Administrator account
2. Click on Computers under Groups on left menu
3. Click on “+” button
4. Type in the name of group
5. Select computers by typing to Clients field or select computers by domain
6. Save group

How to delete a group of Computers¶

1. Login to dashboard under Administrator account
2. Click on Computers under Groups on left menu
3. Find the group and move with the mouse over it. Buttons will be shown.
4. Click on “x” button
5. Confirm deleting of group

How to rename group of Computers¶

1. Login to dashboard under Administrator account
2. Click on Computers under Groups on left menu
3. Find the group and move with the mouse over it. Buttons will be shown.
4. Click on button, and rename group
5. Save the changes

How to edit group of Computers¶

1. Login to dashboard under Administrator account
2. Click on Computers under Groups on left menu
3. Click on selected group
4. Click on right top button, and edit group
5. Save changes

How to check computers in group¶

1. Login to dashboard under Administrator account
2. Click on Computers under Groups on left menu
3. Click on selected group
4. Switch tab on right top from Filter to Computers

How to check History of group of Computers¶

1. Login to dashboard under Administrator account
2. Click on Computers under Groups on left menu
3. Click on selected group
4. Switch tab on right top from Filter to History

Geofences¶

How to create a group of Geofences¶

1. Login to dashboard under Administrator account
2. Click on Geofences under Groups on left menu
3. Click on “+” button
4. Select geofences from list and save
5. Type in the name of group
6. Save group

How to delete group of Geofences¶

1. Login to dashboard under Administrator account
2. Click on Geofences under Groups on left menu
3. Find the group and move with the mouse over it. Buttons will be shown.
4. Click on “x” button
5. Confirm deleting of group

How to rename group of Geofences¶

1. Login to dashboard under Administrator account
2. Click on Geofences under Groups on left menu
3. Find the group and move with the mouse over it. Buttons will be shown.
4. Click on button, and rename group
5. Save the changes

How to edit group of Geofences¶

1. Login to dashboard under Administrator account
2. Click on Geofences under Groups on left menu
3. Click on selected group
4. Click on right top “+” or”-” button, and add or remove geofences
5. Save changes

How to edit check History of group of Geofences¶

1. Login to dashboard under Administrator account
2. Click on Geofences under Groups on left menu
3. Click on selected group
4. Switch tab on right top from Geofences to History

Security¶

Roles¶

How to assign role to user¶

Excalibur Dashboard has an option to assign role to user. If it is necessary, follow the next steps:

1. Login to dashboard under Administrator account
2. Click on Roles on left menu
3. Click on selected role (Administrator, Service desk or Auditor)
4. Click on “+” button on right top
5. Select groups of users from list
6. Click on the Add button

How to remove role to user¶

1. Login to dashboard under Administrator account
2. Click on Roles on left menu
3. Click on selected role (Administrator, Service desk or Auditor)
4. Click on “-” button on right top
5. Select groups of users from list
6. Click on the Remove button

How to check users of roles¶

1. Login to dashboard under Administrator account
2. Click on Roles on left menu
3. Click on selected role (Administrator, Service desk or Auditor)
4. Switch tab from Groups to Users

How to check the History of roles¶

1. Login to dashboard under Administrator account
2. Click on Roles on left menu
3. Click on selected role (Administrator, Service desk or Auditor)
4. Switch tab from Groups to History

Security policies¶

How to create policy¶

1. Login to dashboard under Administrator account
2. Click on Security policies on the left menu
3. Click on “+” button
4. Type in the name of policy
5. Click on “+” button on the tab and select tabs (Authentication, Verification, etc), which you want to set
6. Select options for each action of policy
7. Save the policy

How to rename policy¶

1. Login to dashboard under Administrator account
2. Click on Security policies on the left menu
3. Find policy and move with the mouse over it. Buttons will be shown
4. Click on button
5. Rename policy
6. Save changes

How to delete policy¶

1. Login to dashboard under Administrator account
2. Click on Security policies on the left menu
3. Find policy and move with the mouse over it. Buttons will be shown
4. Click on “-” button
5. Confirm deleting

How to create copy of policy¶

1. Login to dashboard under Administrator account
2. Click on Security policies on the left menu
3. Find policy and move with the mouse over it. Buttons will be shown
4. Click on button
5. Rename policy and save it

How to change policy settings¶

1. Login to dashboard under Administrator account
2. Click on Security policies on the left menu
3. Click on selected policy
4. Select policy tab on right side
5. Click on button near policy tabs
6. Select tab and create changes
7. Save changes

How to check the history of policy¶

1. Login to dashboard under Administrator account
2. Click on Security policies on the left menu
3. Click on selected policy
4. Switch tab from Policies to History

How to check which group is assigned to policy¶

1. Login to dashboard under Administrator account
2. Click on Security policies on the left menu
3. Click on selected policy
4. On right side are groups which are assigned to policy

Incidents¶

How to check Incidents in Excalibur¶

1. Login to dashboard under Administrator account
2. Click on Incidents on left menu
3. You can see Incident tabs. Tabs are divided by the level of incidents

How to show details about incident¶

1. Login to dashboard under Administrator account
2. Click on Incidents on left menu
3. Click on selected incident
4. On right side on incident tab are shown information about incident (User, date, level, group, data, token, policy, map)

How to filter incidents¶

1. Login to dashboard under Administrator account
2. Click on Incidents on left menu
3. Click on button and select criteria to filtering

Verifications¶

How to check Verifications in Excalibur¶

1. Login to dashboard under Administrator account
2. Click on Verifications on left menu
3. You can see Verification tabs. Tabs are divided by Actions

How to show details about verification¶

1. Login to dashboard under Administrator account
2. Click on Verifications on left menu
3. Click on selected tab of action
4. By clicking on selected row information about verification will be shown (User, date, level, group, data, token, policy, map)

How to filter verifications¶

1. Login to dashboard under Administrator account
2. Click on Verifications on left menu
3. Click on button and select criteria to filtering

Geofences¶

How to create geofence¶

1. Login to dashboard under Administrator account
2. Click on Geofences under Security section on the left menu
3. Find up location for geofence
4. Click on “+” button at the top
5. Click on the selected location and drag a mouse scale the circle. Once the circle covers a desired area
6. Type name of new geofence
7. Click on “Create” button
8. Scan shown QR code or confirm push notification on mobile phone
9. Provide required factors

How to check geofence¶

1. Login to dashboard under Administrator account
2. Click on Geofences under Security section on the left menu
3. On right side is list of geofences, you can check it

How to rename geofence 1¶

1. Login to dashboard under Administrator account
2. Click on Geofences under Security section on the left menu
3. Find geofence on the map by typing to search bar on right top
4. Right click on geofence and select “Rename geofence”
5. Rename geofence
6. Confirm changes by clicking on “Rename” button
7. Scan shown QR code or confirm push notification on mobile phone
8. Provide required factors

How to rename geofence 2¶

1. Login to dashboard under Administrator account
2. Click on Geofences under Security section on the left menu
3. On right side is list with created geofences
4. Click on selected geofence and click on button
5. Rename geofence
6. Confirm changes by clicking on “Rename” button
7. Scan shown QR code or confirm push notification on mobile phone
8. Provide required factors

How to edit geofence 1¶

1. Login to dashboard under Administrator account
2. Click on Geofences under Security section on the left menu
3. Find geofence
4. Right click on geofence and select “Edit geofence”
5. Edit geofence. You can change the radius and position of geofence
6. Click on point on round or point inside the circle and drag it. Radius or position will be changed
7. Click on map
8. Confirm changes
9. Scan shown QR code or confirm push notification on mobile phone
10. Provide required factors

How to edit geofence 2¶

1. Login to dashboard under Administrator account
2. Click on Geofences under Security section on the left menu
3. On right side is list with created geofences
4. Click on selected geofence and click on button
5. Edit geofence. You can change the radius and position of geofence
6. Click on point on round or point inside the circle and drag it. Radius or position will be changed
7. Click on map
8. Confirm changes
9. Scan shown QR code or confirm push notification on mobile phone
10. Provide required factors

How to remove geofence 1¶

1. Login to dashboard under Administrator account
2. Click on Geofences under Security section on the left menu
3. Find geofence
4. Right click on geofence and select “Remove geofence”
5. Confirm changes

How to remove geofence 2¶

1. Login to dashboard under Administrator account
2. Click on Geofences under Security section on the left menu
3. On right side is list with created geofences
4. Click on selected geofence and click on “x” button
5. Confirm changes

How to change map layer¶

1. Login to dashboard under Administrator account
2. Click on Geofences under Security section on the left menu
3. On left top of the map you can switch between layers Map/Hybrid/Styled Map
4. Click on selected layer, changes will be shown immediately

Audit¶

How to check changes in Excalibur dashboard¶

Excalibur provides to check all changes/actions under administrator account. Changes are divided into Roles, Policies, Group of users, Group of computers, Group of geofences, Geofences, Locations, Component tab.

1. Login to dashboard under Administrator account
2. Click on Audit on left menu
3. Select required tab
4. By clicking on specific row, information about changes will be shown on right side

Logger¶

Logger allows to display all actions by users' tokens. Administrator can see performance of authentication and flow of each action

How to see performance of authentication¶

1. Login to dashboard under Administrator account
2. Click on Logger on left menu

How to change performance graph¶

1. Login to dashboard under Administrator account
2. Click on Logger on left menu
3. Select time interval on the right top

How to show flow¶

1. Login to dashboard under Administrator account
2. Click on Logger on left menu
3. Click on Flow tab
4. Select specific action to show detail
5. You can filter by name of action and datetime.

Status¶

Version¶

How to check versions of Excalibur on devices¶

1. Login to dashboard under Administrator account
2. Click on Version on left menu
3. Tabs are divided by OS platform. Tabs consist of two parts.
   1. List of PC clients or mobile phone, with their name, system platform, connectivity status (or date of last logout), version of Excalibur client/application.
   2. List of Excalibur client/application version and their count
4. By clicking on row, client/application information will be shown

API Access tokens¶

How to create API Access tokens¶

1. Login to dashboard under Administrator account
2. Click on API Access tokens on left menu
3. Click on ”+” button
4. Type the name of API Access tokens filter
5. Save it

How to generate API Access tokens¶

1. Login to dashboard under Administrator account
2. Click on API Access tokens on left menu
3. Click on selected API Access token
4. Select required API calls
5. Activate API by clicking on Active
6. Click on Regenerate token to show API hash string. Please remember it.
7. Save it

How to rename API Access tokens¶

1. Login to dashboard under Administrator account
2. Click on API Access tokens on left menu
3. Find the selected API Access token and move with the mouse over it. Buttons will be shown.
4. Click on button, and rename API Access token
5. Save the changes

How to remove API Access tokens¶

1. Login to dashboard under Administrator account
2. Click on API Access tokens on left menu
3. Find the selected API Access token and move with the mouse over it. Buttons will be shown.
4. Click on ”x” button, and delete API Access token
5. Confirm delete.

Syslog¶

How to create Syslog¶

1. Login to dashboard under Administrator account
2. Click on Syslog on left menu
3. Click on ”+” button
4. Type the name of Syslog filter
5. Confirm changes

How to set Syslog¶

1. Login to dashboard under Administrator account
2. Click on Logger on left menu
3. Click on selected Syslog
4. Select level of Syslog
5. Select File from stream option
6. Type path where logs will be recorded
7. Save settings

How to rename Syslog¶

1. Login to dashboard under Administrator account
2. Click on Syslog on left menu
3. Find the selected Syslog and move with the mouse over it. Buttons will be shown.
4. Click on button, and rename Syslog
5. Save the changes

How to remove Syslog¶

1. Login to dashboard under Administrator account
2. Click on Syslog on left menu
3. Find the selected Syslog and move with the mouse over it. Buttons will be shown.
4. Click on ”x” button, and delete Syslog
5. Confirm delete.

Excalibur AD Facade¶

How to install AD Facade¶

Installation package is delivered as .msi file for 64bit version of Windows. To install Excalibur AD facade follow steps described in Excalibur AD Facade Manual

How to get logs¶

Facade's logs are available from Excalibur Dashboard. To get logs from AD Facade follow steps described in chapter How to get logs from Facade

Related documentation¶

Excalibur User Manual

Excalibur Dashboard Administrator Manual

Excalibur PAM Manual

Excalibur FAQ