Skip to main content

Challenge Response

Advanced authentication operation for use with token or disk encryption systems.

Signature: def challengeresponse(cinfo)

Parameters:

  • cinfo['acctid'] - The account the operation should be performed for

  • cinfo['attributes'] - Attributes for defining options in the operation

  • cinfo['challenge'] - Challenge code for the system

  • cinfocinfo['response'] - Response code for the system

Return Value:

  • ACSuccess 0

  • ACUnknownError 1

  • ACVerifyFailed 14

Remarks:

Depending on the use case for the operation, either for token authentication or for disk encryption, both the expected input and output will vary for this operation.

For disk encryption targets generally a challenge string will be provided which will be validated by the target system to receive a response string, which should be output and provided to the end user to unlock the encrypted disk.

For token authentication targets one or more challenge response operations are passed to the target system to authenticate conditions. The challenge string contains the state across the multiple operations while the response is the string to validate. The next challenge state and response should be returned until all conditions are validated.

The agent.addChallenge and agent.addResponse callbacks should be used to return information from this operation. See the callback section for full details on the individual callbacks.