Document: DJ Secure: Using OTP and PKI Token for Mac- Revised on 10/03/2014
Two Factor Authentication and PKI Token
(for Mac)
What’s happening?
Dow Jones is implementing two factor authentication to increase security and provide ease of use to
end users.
What is ‘Two Factor Authentication’?
When you authenticate yourself against a system two times, its two factor. This means that AFTER you
log on to DJNAMERICAS you will be prompted to enter another password that will be sent to a separate
device, of your choice.
How am I impacted and what’s in it for me?
Two factor authentication will cut down on the number of passwords needed to log into various DJ
systems. This will mean another login AFTER you log on to DJNAMERICAS. And that’s it! You will be able
to access various systems without entering passwords for each one.
1|Page
Document: DJ Secure: Using OTP and PKI Token for Mac- Revised on 10/03/2014
How do I get there?
There are two ways to do this (step by step instructions are below):
1. Load the PKI soft token on your normal working machine.
2. Load the authentication app on your smartphone or tablet.
Note: The Fanso Soft Token is now known as PKI Token. If you have the Fanso
Soft Token already installed in your computer, you can skip this process and go to the
OTP setup, needed for your smartphone or tablet.
Which one to get?
If you use the same machine on a daily basis, then get the PKI soft token. If you bounce around to
different machines, then the authentication app is for you. You can also get both! No harm done.
The PKI token is installed on your computer, and pops up when you login. You will enter your pin in the
pop up window. Then, the first time you access a system on Single Sign On (SSO,) it will come in to play.
For all updates regarding PKI Token, please visit https://pki.dowjones.com.
2|Page
Document: DJ Secure: Using OTP and PKI Token for Mac- Revised on 10/03/2014
OTP
The One Time Passcode (OTP) is an authentication method for mobile devices (smart phones and
tablets). OTP should be used when a corporate laptop is not available.
Quick Overview
To ensure security, you need to be on the Dow Jones corporate network to enroll in OTP. To enroll in
Dow Jones OTP (One Time Passcode) on your mobile device, you’ll need:

A smartphone or tablet: i.e. iPhone, Android, Windows Phone or Blackberry.

Your Windows login ID and password.

To install the Google Authenticator app on your mobile device from your mobile app store.
Note: To enroll more than one mobile device, you will need to provide the same OTP
code. By default, if an invalid OTP is used, the system will alert you via email.
Now, let’s get started.
How to enroll in Dow Jones OTP on a mobile device?
Step 1: Type https://token.dowjones.net/otp in the URL field to set up Google Authenticator. This will
take you to the Enterprise Token Management Web Portal Page.
3|Page
Document: DJ Secure: Using OTP and PKI Token for Mac- Revised on 10/03/2014
Step 2: Log in using your network User Name and Password.
Network user name
Network password
Upon logging in, you will be taken to the USB Token User Portal page, containing a barcode.
4|Page
Document: DJ Secure: Using OTP and PKI Token for Mac- Revised on 10/03/2014
Step 3: To set up the Google Authenticator app for your phone (iPhone Example), please follow the
instructions listed below:
I.
On your phone, go to App Store.
II.
Search for Google Authenticator.
5|Page
Document: DJ Secure: Using OTP and PKI Token for Mac- Revised on 10/03/2014
III.
Click FREE.
IV.
Click INSTALL to download the Authenticator App on your mobile device.
6|Page
Document: DJ Secure: Using OTP and PKI Token for Mac- Revised on 10/03/2014
V.
Sign in to your account.
VI.
Click OPEN.
7|Page
Document: DJ Secure: Using OTP and PKI Token for Mac- Revised on 10/03/2014
Step 4: To install Authenticator App on your phone, follow the instructions listed below:
I.
Click Begin setup.
II.
Hold the phone up to the barcode, then click Scan Barcode to generate a code.
8|Page
Document: DJ Secure: Using OTP and PKI Token for Mac- Revised on 10/03/2014
III.
Make note of this code to enter on your desktop/laptop.
IV.
Enter code and then click Verify & Register.
882954
9|Page
Document: DJ Secure: Using OTP and PKI Token for Mac- Revised on 10/03/2014
The following message will appear when the PIN is verified.
(882954)
Your device is now ready and can generate codes for secure access to corporate resources from noncorporate computers and laptops.
10 | P a g e
Document: DJ Secure: Using OTP and PKI Token for Mac- Revised on 10/03/2014
PKI Token
The PKI Token is required for Single Sign On access to DJ resources on your corporate computer.
IT can no longer firmly establish a network perimeter and rely on simple username and password
credentials for security. With critical data and applications online, strong authentication for every user is
essential to protect our business.
PKI Token is a two-factor authentication method that provides proven, strong authentication for
employees accessing corporate IT systems. Based on Public Key Cryptography, PKI Token along with the
DJ Single Sign On portal provides seamless and secure access to our network eliminating the need to
remember usernames and passwords for each application.
For all updates regarding PKI Token, please visit https://pki.dowjones.com.
First Time Users
Follow the steps listed below to request PKI Token access via CourAccess.
Step 1: Request an OTP/PKI Token from CourAccess at: https://couraccess.dowjones.net
Step 2: Log In.
Step 3: Click Add System Access.
Step 4: Search for PKI Token.
Note: If not found, go to your CourAccess dashboard and click the green pencil to the
left of PKI Token to modify your access.
Your request will be handled within 3 business days. To expedite the process or if you have
questions on how to use CourAccess, please contact the GISO Admin group at GISOAdmin@dowjones.com.
If you have trouble loading the token, contact Help Desk or Desktop Support.
Existing Users
If you have an approved PKI Token please follow the instructions listed below to set up your PKI Token
on Mac.
11 | P a g e
Document: DJ Secure: Using OTP and PKI Token for Mac- Revised on 10/03/2014
How to set up PKI Token on Mac?
The PKI Token replaces the Mac Wireless Certificate request process. To set up PKI Token on Mac:
Step 1: Click here to download the latest version of the Mac PKI Token App.
Step 2: Once the download is complete, open the installer file and drag the Mac PKI Token App into the
folder next to it. Close the installer window.
Step 3: Double-click the Drag to here folder, and find Mac PKI Token App. Then, control-click or rightclick the icon of the app to select Open from the top of the menu that appears.
Step 4: If you see a warning dialog the first time you run the app, Dismiss it. The App window opens.
12 | P a g e
Document: DJ Secure: Using OTP and PKI Token for Mac- Revised on 10/03/2014
Step 5: Enter your corporate Windows credentials and the OTP code.
Note: Admin Pass is your current Mac user password.
Step 4: Click Get Token.
Note: If you get an error like Account Not Provisioned, request PKI Token access via
CourAccess.
If you work from home, Mac connects to the VPN via the Network Pane. Dow Jones issued laptops
should come with the Cisco VPN client installed. If you do not have the Cisco VPN client software, please
contact Dow Jones Help Desk.
13 | P a g e