000037951 - Using a password dictionary file to control PIN criteria for RSA Authentication Manager 8.x

Document created by RSA Customer Support Employee on Sep 16, 2019Last modified by RSA Customer Support Employee on Sep 16, 2019
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000037951
Applies ToRSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x 
IssueThis article explains how to use the password dictionary to exclude particular PINs like 1111, 1234 or 4444 from being created.


  1. In the Security Console, click Setup > System Settings.
  2. Under Authentication Settings, click Password Dictionary.
  3. Under Password Dictionary, make sure that the status is No password dictionary found. If the status is Password dictionary imported, you must first delete the existing password dictionary before adding a new one. For instructions, see Delete a Password Dictionary 
  4. In the Password Dictionary Name list, click Import Password Dictionary File.
  5. Under Password Dictionary Basics, enter the name of the password dictionary that you are importing in the Password Dictionary Name field.
  6. Under Password Dictionary File, browse to the password dictionary file that you are importing.
  7. When prompted, select the password dictionary filename, and click Open.
  8. Click Import File.  The import process can take several minutes.
  9. Click Update Status to refresh. When the status shows Password dictionary imported, the name of the new password dictionary is displayed in the Password Dictionary Name list.
  10. Click Done.
  11. Navigate to Authentication > Policies > Token Policies.  
  12. Edit the initial token policy.
  13. Choose the password dictionary you created from the drop down menu of Excluded Words Dictionary.  A sample password dictionary named password.txt file is attached to this article.