You are viewing TT User Setup Version 7.17 and higher. For earlier versions, click here

Introducing System Settings

Use the System Settings window to configure server properties like:

• Concurrent Logins: Limits the number of times a single username can be logged in concurrently.
• Password Locking: Prevents users from logging in after certain limits are surpassed (i.e., incorrect login attempts or days of inactivity). An administrator can configure a message for a user whose login attempt fails for any reason.
• Password Rules: Defines the level of password complexity required for all users changing their password, the number of unique passwords required before reusing a prior password, and the length of time a password is valid.
• Automatic Diagnostics: Determines which potential problems TT User Setup Diagnostic Checks automatically searches for.
• X_STUDY and FMDS Settings: Allows an administrator to enable or disable X_STUDY and its related FMDS settings.

Note: Only Super Administrators have access to the System Settings because these properties apply to all users. In a X_TRADER® ASP environment, only TT Administrators can edit the System Settings.

Configuring Concurrent Login Rules

Administrators can limit the number of times a single user can be logged in concurrently (based on the number of IP addresses from which a user has logged in). If a user attempts to log in with a username that has already reached the assigned maximum number of logins, the login fails until that user ID closes a client connection and releases a license. TT SIM logins do not affect concurrent license counts.

Note: The concurrent login feature works for users logged in using Universal Login only.

Warning: To correctly control time delays, you must synchronize the machine times for each TT User Setup server.

To limit the number of concurrent logins...

1. From the Server Admin menu, select System Settings.

   The System Settings window appears and defaults to the General tab.

   

2. Check the Enforce maximum concurrent logins per user option.
3. Click Save.

You have successfully limited the number of concurrent logins.

Configuring Password Locking Rules

Use the password locking feature to prevent users from logging in after defined limits are surpassed. As an administrator, you may not lock out a user. However, you can configure users to be locked out when either of the following conditions occurs:

• A user enters an incorrect password too many times.
• A user does not attempt a login within a certain number of days.

TT User Setup provides the user with a notification whenever the user's status has changed to "locked". You can unlock users from the Edit User window.

Note: The Locked Out column on the Users window lists all the locked out users in your trading environment.

To set password locking rules...

1. From the Server Admin menu, select System Settings.

   The System Settings window appears and defaults to the General tab.

   

2. Check the Automatically lock out users due to failed attempts or inactivity option.
3. In the Number of failed login attempts before user status is set to LOCKED field, select a number between 1 and 100 to designate how many incorrect passwords a user can enter before the user's status is set to "locked".

   Note: The default value is 3.

4. In the Days of inactivity allowed before user status is set to LOCKED field, select a number between 1 and 100 to designate the number of days of inactivity before a user's status is set to "locked".

   Note: The default value is 30.

5. Click Save.

You have successfully set password locking rules.

Customizing the Failed Login Attempt Message

If a user login fails, TT User setup prompts the user with a standard message. From the Failed Login Rules section in the System Settings window, you can configure a custom message that appears after the standard message.

  To activate and customize the failed login attempt message...

1. From the Server Admin menu, select System Settings.
2. On the System Settings window, click the General tab.
3. In the Failed Login Rules section, check the Apply an additional failed login message to users option.

   

4. In the text box, edit the default message or create a new message.
5. Click Save.

Note: The message in the text box appears after a failed login attempt.

Configuring Password Rules

Use the Password Rules to configure password complexity, password reuse, and password expiration rules.

• The Password Complexity section defines the level of password complexity required for all users changing their password. In addition, you may incorporate password reuse restrictions.

  Note: Password complexity changes are enforced the next time the user changes their password.TT User Setup initiates a password change when password expiration rules take effect, when a user manually changes their password, or when the administrator manually resets the user's password.

• The Password Reuse section defines the number of unique passwords required before allowing a login to reuse a password.

  Note: Password reuse restrictions are calculated from the last n times a user's password was changed, not from when password reuse restrictions were enabled or edited.

• The Password Expiration properties define the length of time a password is valid.

  As an administrator you can require a user's password to expire after a fixed number of days. However, if you want to prevent a specific user's password from expiring, check the Password never expires option on the Create New User or Edit User window.

  Note: Password expiration is calculated from the last time a user's password was changed, not from when password expiration rules were enabled or edited.

• The Two-factor Authentication properties defines the two-factor authentication’s behavior. Enabling two-factor authentication requires setting the server settings on the Password Rules tab and setting the configuration in each user’s User Settings. For more information, refer to Enabling Two-factor Authentication.

  Note: Two-factor authentication requires TT User Setup 7.17.30 and X_TRADER 7.17.40 or higher.

• X_TRADER ASP and non-X_TRADER ASP users hosted in TTNET can request a more or less restrictive Days until password expires setting. By default, passwords expire every 90 days and after 5 days users that are required to use two-factor authentication must re-authenticate. To request a different default for your firm, please contact TT Support.

To set password rules...

1. From the Server Admin menu, select System Settings.

   The System Settings window appears and defaults to the Password Rules tab.

   

2. Check the Enforce password complexity rules option to enable related fields.
3. Specify values in the Minimum length (6-20) and Maximum length (6-20) fields to set minimum and maximum password lengths.

   Note: The default values are 6 and 20.

4. Check any or all of the following options:
   • Passwords must contain at least one lowercase letter
   • Passwords must contain at least one uppercase letter
   • Passwords must contain at least one digit
   • Passwords must contain at least one non-alphanumeric character

5. To configure the system to enforce password reuse restrictions, select the check box next to Enforce password reuse restrictions and then select the Number of unique passwords required before reusing a prior password.

6. To configure the system to enforce password expiration rules, select the check box next to Enforce password expiration rules , and then select the number of days until the password expires and the number of days prior to password expiration that the system will begin issuing expiration warnings. This setting does not apply to users with passwords that never expire.

7. If users must change their initial password after login or after an administrator updates the password, check the Require user to change initial password option. This setting does not apply to users with passwords that never expire.
8. Click Save.

   You have successfully set password expiration rules.

Automatic Diagnostics

TT User Setup allows you to run diagnostic checks that list potential set up issues based on the information available in the TT User Setup database. For example, Gateway Logins missing Accounts and Missing Product Limits.

The Automatic Diagnostics window allows you to select the diagnostics checks that all clients will automatically run. When the TT User Setup Server detects one of the automatically configured errors, it opens the Server Messages window and displays an Automatic diagnostics checks error.

To configure Automatic Diagnostics...

1. From the Server Admin menu, select System Settings.
2. Select the Automatic Diagnostics tab.

   

3. Select the diagnostics that TT User Setup will automatically detect and report.
4. Click Save.

Enabling and Configuring X_STUDY and FMDS System Settings

X_STUDY uses the FMDS server to obtain historical data to display in a chart for a given contract. The X_STUDY/FMDS settings available in TT User Setup allow you to designate or change the FMDS server to which one or more user's X_STUDY(s) connects. In addition, you can set up a secondary FMDS server to which X_STUDY connects if the primary server is down.

X_STUDY and FMDS must be enabled and configured at a system level before it can be enabled and configured at a user level. To enable and configure X_STUDY and FMDS for a user, refer to the Setting Application Permissions topic in the User Administration section.

Note: This option is only available for X_TRADER version 7.7.3 or later and X_STUDY 7.0.3 or later.

To enable X_STUDY/FMDS functionality for this TT User Setup system...

1. From the Server Admin menu, select System Settings.
2. On the System Settings window, click the X_STUDY/FMDS Settings tab.

   

3. Ensure the X_STUDY/FMDS Allowed option is checked.
4. For the Primary FMDS Server section, enter the IP address and Port of the FMDS Server.

   You cannot save X_STUDY/FMDS settings unless the IP address field is populated.

5. In the Service field, type the service number.

   The Service field is an additional qualifier used to differentiate multiple FMDS machines within a network. This value must match the X_STUDY workstations’ Communications setting. The default setting is 250.

6. In the Timeout (secs) field, type the number of seconds to wait to connect to each FMDS server.

   Note: Typically the default value can be used in the Port, Service, and Timeout fields.

7. To set up a secondary FMDS server, repeat steps 4-6 in the Secondary FMDS Server section.
8. Click Save.

You have successfully configured your FMDS server(s).