Using RSA Security Key Utility

Document created by RSA Information Design and Development on Mar 9, 2020Last modified by RSA Product Team on Mar 18, 2020
Version 3Show Document
  • View in full screen mode

If your organization uses FIDO2-certified security keys, you can use RSA Security Key Utility to manage user verification for the security keys. RSA Security Key Utility is a Windows utility that you deploy on users' Windows machines. Users can then use the utility to manage a PIN for the security key or reset the key.

 

System Requirements

 

  • RSA Security Key Utility works with any FIDO2-certified USB security key.

  • RSA Security Key Utility is supported on the following operating system versions:

    • Windows 10 version 1909 x64 and x86

    • Windows 10 version 1903 x64 and x86

    • Windows 10 version 1809 x64 and x86

    • Windows 10 version 1803 x64 and x86

    • Windows 8.1 x64 and x86

  • Users on Windows 10 version 1903 and later must have administrative privileges.

 

Install RSA Security Key Utility on a Single Computer

 

You can install the RSA Security Key Utility on a single computer using an install wizard. Repeat the procedure for other computers.

 

Before you begin 

 

Download RSA_Security_Key_Utility.zip in the RSA Link RSA SecurID Access Cloud Authentication Service Downloads space.

 

Procedure 

 

  1. Log on to the computer as an administrator, or install with administrator privileges.
  2. Extract RSA_Security_Key_Utility. to a folder on the computer.

  3. To start the installation wizard, double-click RSA Security Key Utility x64.msi or RSA Security Key Utility x86.msi.

    Or type the following:

    msiexec.exe /i "RSA Security Key Utility x64.msi" /quiet

  4. Click Next to advance through the Welcome dialog boxes.

  5. Read the License Agreement or click Print to print it. When ready, select I accept the terms in the license agreement and click Next.

  6. Click Install. RSA Security Key Utility installs on the local computer. Windows prompts you to allow account control privileges if you set up account control privileges. Click Allow.

  7. Click Finish.

 

Install RSA Security Key Utility on Multiple Computers

 

To install RSA Security Key Utility on multiple computers at one time, do the following:

 

  1. Download RSA_Security_Key_Utility.zip from the RSA Link RSA SecurID Access Cloud Authentication Service Downloads space.

  2. Extract RSA_Security_Key_Utility.zip to a folder on the computer.

  3. Provide Account Control Privileges to User Computers.

  4. Deploy the Installation Package to Multiple Computers.

 

Provide Account Control Privileges to User Computers

 

Administrators can install RSA Security Key Utility on all computers in a domain. Users who are members of the Administrators group can install RSA Security Key Utility on their own computers.

 

Procedure 

 

Use the following tools to control privileges:

 

  • Microsoft Management Console (MMC) 3.0
  • Use Group Policy to control MMC usage

 

Note:  A user with elevated privileges on the computer can install and remove RSA Security Key Utility.

 

Deploy the Installation Package to Multiple Computers

 

After you set the account privileges to the necessary groups, you can deploy RSA Security Key Utility using one of the following methods:

 

  • A third-party product that automatically deploys MSI packages

  • Silent installation from the msiexec command line

 

Procedure 

 

Deploy the MSI file with a third-party tool, or use the command line to perform a silent installation.

 

To perform a silent installation, perform the following steps.

 

  1. Right-click the command prompt icon from the Start menu and click Run as administrator to open the command prompt.

  2. Navigate to the directory that contains the RSA Security Key Utility x64.msi or RSA Security Key Utility x86.msi package file. Or provide the full pathname to the package file on the command line.

  3. Type a case-sensitive command similar to the following, depending on the name of your MSI package:

    msiexec /i “RSA Security Key Utility x64.msi" /quiet

    To log any errors, add the /lv (log verbose) option at the end of the command and the log file name, for example, C:\install.log. For silent mode, add the /quiet option.

 

Uninstall RSA Security Key Utility on a Single Computer

 

Procedure 

 

  1. Click Settings > Apps > RSA Security Key Utility. An Uninstall button appears on the menu toolbar.

    Or type the following at a command line to start the uninstallation wizard:

    msiexec /uninstall {02FA8C8D-78A5-42C2-83BD-21C728B21E26}

  2. Click Uninstall.

  3. Do one of the following (if prompted):

    • If logged on as an administrator, click Allow to elevate your privileges.
    • If logged on as a user, enter an administrator user name and password to elevate your privileges and allow the uninstall process to continue.

 

Uninstall RSA Security Key Utility on Multiple Computers

 

You can uninstall RSA Security Key Utility from multiple users’ computers using a third-party tool, such as Microsoft System Center Configuration Manager, without user interaction.

 

Procedure 

 

  1. Enter the following

    msiexec /uninstall {02FA8C8D-78A5-42C2-83BD-21C728B21E26} /quiet /lv C:\uninstall.log

    with the /qn option for silent mode, the /lv option for verbose logs, and the fully qualified pathname.

  2. Put the log file, for example uninstall.log, in a known location such as %USERPROFILE%

 

Create or Change PIN

 

 

RSA Security Key Utility supports adding a PIN between 4-63 characters, depending on language. If necessary, a user can change the PIN by entering the current and new PINs.

 

Procedure 

 

  1. Click Start > RSA > RSA Security Key Utility.

    Depending on your configuration, Windows might present User Account Control (UAC) screens to request administrative credentials.

  2. Insert the security key.

  3. Click Create PIN or Change PIN, and follow the instructions.

 

Reset Key

 

If a user locks the PIN because of eight incorrect PIN attempts, the user must reset the security key. The user can also choose to reset the key to restore it to its manufacturer default settings.

 

Procedure 

 

  1. Click Start > RSA > RSA Security Key Utility.

    Depending on your configuration, Windows might present User Account Control (UAC) screens to request administrative credentials.

  2. Insert the security key.

  3. Click Reset Key and follow the instructions.

 

Third-Party Information

Yubico Copyright

 

 

 

 

We want your feedback! Tell us what you think of this page.

 

Previous Topic:RSA and Yubico
You are here

Table of Contents > Users and Authenticators > Using RSA Security Key Utility

Attachments

    Outcomes