Sign in to the administration app

When the administration app starts, it shows only the sign-in card. The Access window appears once you've signed in successfully.

You sign in with one of three methods—your personal key, the same key sent as an HTTP Basic password, or your Windows account—and, if the sign-in policy requires it, a code from your authenticator app. The code then covers the whole session; the app's lists won't ask for it again.

1. Start the administration app from its shortcut (see Set up the administration app on a workstation). The sign-in card appears.
2. Under Adresse des Datendienstes (Data service address), enter the address of the data service, for example https://data.example.com or https://data.example.com:8433. On the server itself, the service also accepts unencrypted http://127.0.0.1:8434; we advise against it except for testing and emergencies. From any other computer, only HTTPS works.

3. Choose a method:

   Method	What to do
   Personal key	Enter your key (wkl_…) in the Persönlicher Schlüssel (Personal key) field
   Key as password	Enter your key and select Schlüssel als Kennwort senden (HTTP Basic) (Send key as password). The app sends it with the user name pkuser (HTTP: sign-in (reference), section “Personal keys” (data service documentation)). With this method you have to type the key; a saved key works only with the personal key method. HTTP Basic (RFC 7617, https://www.rfc-editor.org/rfc/rfc7617) only encodes the user name and password, it doesn't encrypt them, so the app sends them only over HTTPS or to the local computer
   Windows account	Select Mit Windows-Konto anmelden (Sign in with Windows account); to switch back, select Mit persönlichem Schlüssel anmelden (Sign in with personal key). The account that counts is the one Access is running under

   

4. Optionally, select Schlüssel speichern (Windows-Anmeldeinformationen) (Save key (Windows credentials)). Windows stores the key in Credential Manager under an entry for this address. The next time you start the app, the empty key field shows “Gespeicherter Schlüssel wird verwendet” (Saved key is used), and you can leave it empty. Keep the trade-off in mind: the saved key is protected only by your Windows sign-in, so any process running under your account can read it. For administration, the second factor remains the real safeguard. Don't save the key on a computer that other people use under your account.
5. Select Anmelden (Sign in).

6. If the sign-in policy requires a second factor, the Bestätigungscode (Verification code) card appears. Enter the six digits from your authenticator app and select Bestätigen (Confirm).

   

Result: The Access window opens with the overview. The next time you start the app, the address and method are already filled in, even after an update of the app.

• Removing a saved key: Clear Schlüssel speichern (Windows-Anmeldeinformationen) and sign in.
• Each code works once. If you've just used a code, wait for the next one (every 30 seconds). After five wrong codes for your person, or twenty from the same origin (your computer's address), within 15 minutes, the service stops accepting codes for up to 15 minutes.
• Abmelden (Sign out), at the bottom of the navigation bar, closes all areas and shows the sign-in card again. The close button on the card and closing the window both exit Access.
• You can't sign in to administration with a SQL login: SQL Server checks that password against a data source, and administration doesn't belong to any data source.
• For the messages that appear on the card, see Troubleshooting.

• Set up or reset the second factor
• Define the sign-in policy
• Work with areas, lists, and commands