RSA Security 6.1 User Manual

RSA SecurID Software Token 4.1 Administrator’s Guide

RSA SecurID Software Token 4.1 Administrator’s Guide10 1: Overview and RequirementsMac OS X System RequirementsSupported Provisioning ServersYou can p

RSA SecurID Software Token 4.1 Administrator’s Guide100 Internet Explorer browser plug-in 13Llog messageformat 95samples 96log output files 94logging

RSA SecurID Software Token 4.1 Administrator’s Guide 101self-service token, approving request for 66service, getting support 8set device password 74S

RSA SecurID Software Token 4.1 Administrator’s Guide1: Overview and Requirements 11Token Storage DevicesA token storage “device” is a logical storage

RSA SecurID Software Token 4.1 Administrator’s Guide12 1: Overview and RequirementsCoexistence with RSA SecurID Toolbar 1.4 or LaterRSA SecurID Softwa

RSA SecurID Software Token 4.1 Administrator’s Guide2: Installing the Application 132 Installing the ApplicationThis chapter describes installing RSA

RSA SecurID Software Token 4.1 Administrator’s Guide14 2: Installing the ApplicationThe web browser plug-in is a custom feature of the desktop applica

RSA SecurID Software Token 4.1 Administrator’s Guide2: Installing the Application 15Customization PoliciesYou can set policies to customize the behavi

RSA SecurID Software Token 4.1 Administrator’s Guide16 2: Installing the ApplicationToken Storage Database Options for VPN Client Applications (Window

RSA SecurID Software Token 4.1 Administrator’s Guide2: Installing the Application 17If your users log on to the VPN client before logging on to Window

RSA SecurID Software Token 4.1 Administrator’s Guide18 2: Installing the ApplicationToken Database Copy ProtectionRSA SecurID Software Token for Windo

RSA SecurID Software Token 4.1 Administrator’s Guide2: Installing the Application 19Enterprise-Wide InstallationsYou can install the application on a

© 2009 RSA Security Inc. All rights reserved.November 2009Contact InformationSee the RSA corporate web site for regional Customer Support telephone an

RSA SecurID Software Token 4.1 Administrator’s Guide20 2: Installing the Application4. On the Place of Purchase screen, select the region where you or

RSA SecurID Software Token 4.1 Administrator’s Guide2: Installing the Application 217. Do one of the following:• To install the application to a direc

RSA SecurID Software Token 4.1 Administrator’s Guide22 2: Installing the ApplicationCommand Line InstallationA Windows Installer command line installa

RSA SecurID Software Token 4.1 Administrator’s Guide2: Installing the Application 23Command Line PropertiesThe following table describes the propertie

RSA SecurID Software Token 4.1 Administrator’s Guide24 2: Installing the ApplicationCommand Line SyntaxTo install RSA SecurID Software Token for Windo

RSA SecurID Software Token 4.1 Administrator’s Guide2: Installing the Application 25• Enter command line options (for example, /i) in either lowercase

RSA SecurID Software Token 4.1 Administrator’s Guide26 2: Installing the ApplicationInstall the Token Database to a Non-Default LocationThe following

RSA SecurID Software Token 4.1 Administrator’s Guide2: Installing the Application 27Modify an InstallationYou can modify an existing installation to a

RSA SecurID Software Token 4.1 Administrator’s Guide28 2: Installing the ApplicationTo remove web browser plug-ins using the command line:Use the msie

RSA SecurID Software Token 4.1 Administrator’s Guide2: Installing the Application 29Repair an Installation on Multiple Computers Using the Command Lin

RSA SecurID Software Token 4.1 Administrator’s GuideContents 3ContentsPreface...

RSA SecurID Software Token 4.1 Administrator’s Guide30 2: Installing the ApplicationPrerequisites for Upgrading from Version 3.0.7 or Version 4.0Befor

RSA SecurID Software Token 4.1 Administrator’s Guide2: Installing the Application 31To upgrade using the command line:Enter the msiexec installation c

RSA SecurID Software Token 4.1 Administrator’s Guide32 2: Installing the ApplicationToken Transfer from Version 3.0.7 to Version 4.1Version 4.1 automa

RSA SecurID Software Token 4.1 Administrator’s Guide2: Installing the Application 33Transfer Tokens Manually from Version 3.0.7To transfer tokens manu

RSA SecurID Software Token 4.1 Administrator’s Guide34 2: Installing the ApplicationUninstalling RSA SecurID Software Token for Windows You can uninst

RSA SecurID Software Token 4.1 Administrator’s Guide2: Installing the Application 35Installing RSA SecurID Software Token for Mac OS X You can deploy

RSA SecurID Software Token 4.1 Administrator’s Guide36 2: Installing the ApplicationTo edit the database configuration file and install the software:1

RSA SecurID Software Token 4.1 Administrator’s Guide2: Installing the Application 376. Click Continue.A license agreement dialog box opens, as shown i

RSA SecurID Software Token 4.1 Administrator’s Guide38 2: Installing the ApplicationUpgrading RSA SecurID Software Token for Mac OS X Use the RSA Secu

RSA SecurID Software Token 4.1 Administrator’s Guide2: Installing the Application 39Uninstall RSA SecurID Software Token for Mac OS XRSA provides a sc

RSA SecurID Software Token 4.1 Administrator’s Guide4 ContentsUninstalling RSA SecurID Software Token for Windows ...

RSA SecurID Software Token 4.1 Administrator’s Guide3: Provisioning Software Tokens 413 Provisioning Software TokensThis chapter provides the key st

RSA SecurID Software Token 4.1 Administrator’s Guide42 3: Provisioning Software TokensWith RSA Authentication Manager 7.1 and RSA SecurID Appliance

RSA SecurID Software Token 4.1 Administrator’s Guide3: Provisioning Software Tokens 43Fob-Style Software TokensNote: RSA Authentication Manager 7.1

RSA SecurID Software Token 4.1 Administrator’s Guide44 3: Provisioning Software TokensTokens That Do Not Require a PINWith tokens that do not requir

RSA SecurID Software Token 4.1 Administrator’s Guide3: Provisioning Software Tokens 45For example, if your token storage device is a TPM, you can bi

RSA SecurID Software Token 4.1 Administrator’s Guide46 3: Provisioning Software TokensFor instructions on binding a token to a device type, see one

RSA SecurID Software Token 4.1 Administrator’s Guide3: Provisioning Software Tokens 473. On the left side of the Token Storage Devices screen, click

RSA SecurID Software Token 4.1 Administrator’s Guide48 3: Provisioning Software TokensProvisioning OverviewYou can provision tokens for the SecurID

RSA SecurID Software Token 4.1 Administrator’s Guide3: Provisioning Software Tokens 49The following table lists the provisioning steps and the follo

RSA SecurID Software Token 4.1 Administrator’s GuideContents 5Chapter 4: User Options for Managing Tokens and Devices... 67Importing Tokens..

RSA SecurID Software Token 4.1 Administrator’s Guide50 3: Provisioning Software TokensConfigure the Software Token Record Using RSA Authentication M

RSA SecurID Software Token 4.1 Administrator’s Guide3: Provisioning Software Tokens 51Step 4: Bind the Token In the DeviceSerialNumber field, do one

RSA SecurID Software Token 4.1 Administrator’s Guide52 3: Provisioning Software TokensStep 6: Select the Software Token SettingsIn the Software Toke

RSA SecurID Software Token 4.1 Administrator’s Guide3: Provisioning Software Tokens 53Distribute the TokenTo use Dynamic Seed Provisioning to distri

RSA SecurID Software Token 4.1 Administrator’s Guide54 3: Provisioning Software Tokens8. Do one of the following:• If you did not bind the token to

RSA SecurID Software Token 4.1 Administrator’s Guide3: Provisioning Software Tokens 55The following table lists the provisioning steps, and the foll

RSA SecurID Software Token 4.1 Administrator’s Guide56 3: Provisioning Software TokensTo configure a token record in RSA Authentication Manager 6.1:

RSA SecurID Software Token 4.1 Administrator’s Guide3: Provisioning Software Tokens 575. Under Output, in the Target Directory field, browse to the

RSA SecurID Software Token 4.1 Administrator’s Guide58 3: Provisioning Software TokensBind the TokenTo bind a token using RSA Authentication Manager

RSA SecurID Software Token 4.1 Administrator’s Guide3: Provisioning Software Tokens 594. In the Data field, paste the GUID, enclosed in brackets.Bin

RSA SecurID Software Token 4.1 Administrator’s Guide6 ContentsAppendix B: Logging ...

RSA SecurID Software Token 4.1 Administrator’s Guide60 3: Provisioning Software TokensAssign a Token NicknameBy default, the SecurID desktop applica

RSA SecurID Software Token 4.1 Administrator’s Guide3: Provisioning Software Tokens 615. From the Software Token Device Type drop-down menu, select

RSA SecurID Software Token 4.1 Administrator’s Guide62 3: Provisioning Software TokensBefore You BeginBefore you provision tokens using Credential M

RSA SecurID Software Token 4.1 Administrator’s Guide3: Provisioning Software Tokens 63To configure Credential Manager to allow users to request a to

RSA SecurID Software Token 4.1 Administrator’s Guide64 3: Provisioning Software Tokens9. In the File Format of Software Token field, do one of the f

RSA SecurID Software Token 4.1 Administrator’s Guide3: Provisioning Software Tokens 655. Under Provide Your Token Details, in the DeviceSerialNumber

RSA SecurID Software Token 4.1 Administrator’s Guide66 3: Provisioning Software TokensApprove the RequestBefore the user can import the token, you m

RSA SecurID Software Token 4.1 Administrator’s Guide4: User Options for Managing Tokens and Devices 674 User Options for Managing Tokens and DevicesTh

RSA SecurID Software Token 4.1 Administrator’s Guide68 4: User Options for Managing Tokens and DevicesImport a Token Automatically Using CT-KIP (Windo

RSA SecurID Software Token 4.1 Administrator’s Guide4: User Options for Managing Tokens and Devices 692. Click Import from Web. The Import from Web sc

RSA SecurID Software Token 4.1 Administrator’s Guide Preface 7PrefaceAbout This GuideThis guide describes how to prepare for and deploy RSA SecurID So

RSA SecurID Software Token 4.1 Administrator’s Guide70 4: User Options for Managing Tokens and DevicesNote: On some Windows machines, you may be promp

RSA SecurID Software Token 4.1 Administrator’s Guide4: User Options for Managing Tokens and Devices 71Import a Token from a Non-Default DirectoryIf a

RSA SecurID Software Token 4.1 Administrator’s Guide72 4: User Options for Managing Tokens and DevicesChange a Token NameIf you assign a nickname to a

RSA SecurID Software Token 4.1 Administrator’s Guide4: User Options for Managing Tokens and Devices 73Select a TokenThe application displays the name

RSA SecurID Software Token 4.1 Administrator’s Guide74 4: User Options for Managing Tokens and DevicesOnce a device password is set, the application p

RSA SecurID Software Token 4.1 Administrator’s Guide4: User Options for Managing Tokens and Devices 75Reset the Device (Local Hard Drive)If a user for

RSA SecurID Software Token 4.1 Administrator’s Guide76 4: User Options for Managing Tokens and Devices4. In the Forgot your password? section, click R

RSA SecurID Software Token 4.1 Administrator’s Guide4: User Options for Managing Tokens and Devices 77View Token InformationUsers can view information

RSA SecurID Software Token 4.1 Administrator’s Guide78 4: User Options for Managing Tokens and DevicesView Token Storage Device InformationUsers can v

RSA SecurID Software Token 4.1 Administrator’s Guide4: User Options for Managing Tokens and Devices 79Delete a TokenA user does not need to delete a t

RSA SecurID Software Token 4.1 Administrator’s Guide8 PrefaceRSA Security Console Help. Describes day-to-day administration tasks performed in the RS

RSA SecurID Software Token 4.1 Administrator’s Guide80 4: User Options for Managing Tokens and DevicesObtaining the Next TokencodeUnder some condition

RSA SecurID Software Token 4.1 Administrator’s Guide5: Troubleshooting 815 TroubleshootingThe following tables describes possible issues that might oc

RSA SecurID Software Token 4.1 Administrator’s GuideA: Customizing the Application 83A Customizing the ApplicationUse the information in this appendix

RSA SecurID Software Token 4.1 Administrator’s Guide84 A: Customizing the ApplicationDisableSetDevicePassword DWORD 0x00000000 (default)0x00000001Prev

RSA SecurID Software Token 4.1 Administrator’s GuideA: Customizing the Application 85Policies for RSA SecurID Software Token for Mac OS X Note the fol

RSA SecurID Software Token 4.1 Administrator’s Guide86 A: Customizing the ApplicationPolicy DetailsThe following sections provide additional details a

RSA SecurID Software Token 4.1 Administrator’s GuideA: Customizing the Application 87You can automate the provisioning of one token to a user using CT

RSA SecurID Software Token 4.1 Administrator’s Guide88 A: Customizing the ApplicationDisableDeleteTokenBy default, all users can delete their tokens.

RSA SecurID Software Token 4.1 Administrator’s GuideA: Customizing the Application 89ValidDevicesThe SecurID desktop application supports storing toke

RSA SecurID Software Token 4.1 Administrator’s Guide1: Overview and Requirements 91 Overview and RequirementsThis chapter introduces RSA SecurID Softw

RSA SecurID Software Token 4.1 Administrator’s Guide90 A: Customizing the Application3. Click the device icon for the next device that you want to add

RSA SecurID Software Token 4.1 Administrator’s GuideA: Customizing the Application 91Configure Group Policy SettingsYou can configure Group Policy set

RSA SecurID Software Token 4.1 Administrator’s Guide92 A: Customizing the ApplicationCustomizing RSA SecurID Software Token for Mac OS XYou customize

RSA SecurID Software Token 4.1 Administrator’s GuideB: Logging 93B LoggingThis appendix describes logging in RSA SecurID Software Token (the SecurID d

RSA SecurID Software Token 4.1 Administrator’s Guide94 B: LoggingLocation of Log Output FilesThe logger is configured programmatically to output a rol

RSA SecurID Software Token 4.1 Administrator’s GuideB: Logging 95Log Message FormatThe format of the output log file is as follows:[time stamp] [sever

RSA SecurID Software Token 4.1 Administrator’s Guide96 B: LoggingSample Log MessagesThis section contains examples and explanations of messages logged

RSA SecurID Software Token 4.1 Administrator’s GuideB: Logging 9725 Aug 2010 16:16:05 INFO 0x0000161c Software Token Client - Application Settings:<

RSA SecurID Software Token 4.1 Administrator’s Guide 99IndexAactivation codegenerating 53maximum length 48ActivationCode policy 83, 86administrative