000037873 - How to modify the number of allowable active tokens per user on RSA Authentication Manager 8.x

Document created by RSA Customer Support Employee on Aug 30, 2019
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000037873
Applies ToRSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x
IssueThis article explains how to modify the number of allowable active tokens per user on RSA Authentication Manager 8.x. The default limit is three active tokens for each user.
Resolution

Procedure



  1. Launch an SSH client, such as PuTTy.
  2. Login to the primary Authentication Manager server as rsaadmin and enter the operating system password.

Note that during Quick Setup another user name may have been selected. Use that user name to login.



  1. Navigate to /opt/rsa/am/utils:


cd /opt/rsa/am/utils


  1. Run one of the following commands:
    • To set the limit for active tokens per user, type the following, and then press Enter:
       

      ./rsautil store -a add_config auth_manager.admin.maximum_usable_tokens <n> GLOBAL 501

        where <n> is an integer between 1 and 3 that specifies the maximum number of active tokens allowed per user. For values outside the range [1,3], Authentication Manager uses the default limit of three active tokens.

  • To change the limit after setting it for the first time, type the following, and then press Enter:

    ./rsautil store -a update_config auth_manager.admin.maximum_usable_tokens <n> GLOBAL 501

    where <n> is an integer between 1 and 3 that specifies the maximum number of active tokens per user. For values outside the range [1,3], Authentication Manager uses the default limit of three active tokens.

  1. When prompted, enter your Operations Console administrator user ID, and press Enter.
  2. When prompted, enter your Operations Console administrator password, and press Enter. 6.
  3. Restart all Authentication Manager services on the primary instance and all replica instances (see article 000012810 - How to stop, start and restart RSA Authentication Manager 8.x services):

    cd /opt/rsa/am/server
    ./rsaserv restart all

NotesThe limit for assigned tokens can only be changed to either 1 or 2 from the default value 3.

Attachments

    Outcomes