000036757 - How can users export a set of One Time Tokencodes from Authentication Manager self-service Console.

Document created by RSA Customer Support Employee on Sep 10, 2019Last modified by RSA Customer Support Employee on Sep 10, 2019
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000036757
Applies ToRSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
IssueHow can users export a set of One Time Tokencodes from self-service Console for Authentication without contacting the Administrator while the token is forgotten to be carried to workplace or misplaced. 
User is within network perimeter and has forgotten to carry the token to workplace.
TasksThe administrator with the super admin role needs to setup the following on the Authentication Manager primary server:

TASK1:
  1. From the Security Console, click Setup > Self-Service Settings.
  2. On the Settings page, under Customization, click Enable or Disable Self-Service Features.
  3. Select the following Enable and set display options.
User-added image
  1. Click Save.

TASK 2:
  1. In the Security Console, click Setup > Self-Service Settings.
  2. Click Manage Authenticators.
  3. In the Emergency Access Tokencode Settings section, select Allow user to place token in emergency access mode. And select Set of One Time Tokencode and the number of codes to be displayed.
User-added image
  1. In the Emergency Access Tokencode Settings for Temporarily Unavailable Tokens section, do the following.
  2. Use the Emergency Access Tokencode Lifetime fields to enter the length of time you want emergency access Tokencodes to remain active. (Validity can be chosen based on the travel duration.
User-added image
  1. Click Save
ResolutionUsers can login to the Self-Service Console using their password and export a set of One Time Tokencodes for Authentication.
  1. Login to the Self-Service Console.
  2. Click on Troubleshoot.
User-added image
  1. Select Token is temporarily unavailable or misplaced option and click OK.
User-added image
  1. Click on Export to File to save the Codes in a .TXT file. 
User-added image
Notes
  1. To implement this solution the user needs to be within the network perimeter. 
  2. This solution only works for RSA SecurID software and hardware tokens.
  3. You can use the Emergency Tokencode once.
  4. If a SecurID PIN exists: Log on with your PIN + Emergency Tokencode.
  5. If you do not have a SecurID PIN: use only the Emergency Tokencode displayed. 

Attachments

    Outcomes