# Configuring SafeNet

To configure SafeNet settings:

1. In the **Connection** section, enter the valid URL into the **OTP Service URL** field. To verify that the connection with the OTP Service can be established, click the **Check connection** button.

{% hint style="info" %}
**Note:** RAS Connection Broker communicates with the SafeNet Token Management System Server. It is highly recommended to have this behind a firewall for security reasons.
{% endhint %}

2. Click the **Authentication** tab.
3. In the **Mode** drop-down list, select how you want your users to be authenticated.

The available modes are:

* **Mandatory for all users:** every user using the system must login using two-factor authentication.
* **Create token for Domain Authenticated Users**: Allows Parallels RAS to automatically create software tokens for Domain Authenticated Users. Choose a token type from the drop-down list. Note that this option only works with software tokens.
* **Use only for users with a SafeNet account**: Allows users that do not have a SafeNet account to use the system without having to login using two-factor authentication.

4. In the **TMS Web API URL** field, enter the location of the SafeNet API URL.
5. In the **User Repository** field, enter the user repository destination.
6. Click **Finish.**

## **Parallels Client**

In **Parallels Client — New Account Info** dialog:

1. Enter any four digits in the **OTP PIN** number field (these digits will be required further on in the process).
2. Enter your email address and then click on **OK**.
3. Log into your email account and retrieve the email containing the information you will need to activate your SafeNet authentication. An example of this email is shown below.

   *Activation Key: YZQHoczZWw3cBCNo*

   *Token Serial: 4F214C507612A26A*

   *Download MobilePASS client from: <http://localhost:80/TMSService/ClientDownload/MobilePASSWin.exe>*

   *\*Login with domain credentials.*

   *\*Place the attached seed file in the same folder as the MobilePASS client.*

   *Enter the One-Time Password to log into the RD Session Host Connection.*

   *Application PIN: 4089*
4. Download the MobilePASS client from the URL provided in the email.
5. Enter the Activation Key found in the SafeNet email.
6. Next, input the application PIN found in the email into the **MobilePASS PIN** field.
7. Click **Generate** to generate the eToken number and then click **Copy**.
8. Combine the OTP PIN and eToken in this order: OTP + eToken.
9. Enter this value into the Parallels Client and click **OK** to log in.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.parallels.com/landing/ras-admin-guide/parallels-ras-21-administrators-guide/connection-and-authentication-settings/multi-factor-authentication/using-safenet/configuring-safenet.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.