000023179 - Will the Change in Daylight Savings Time DST have adverse effect on my Authentication Manager server?

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000023179
Applies ToRSA Authentication Manager 6.1
Daylight Savings Time
DST
IssueWill the Change in Daylight Savings Time DST have adverse effect on my Authentication Manager server?
Resolution

The most important point is:

 

RSA, The Security Division of EMC, has qualified RSAAuthentication Manager  softwarewith the supported operating system patches and found no issues.

 

I believe for your benefit the following points should be specifically mentioned:

  1. No RSA patches are requiredfor the Daylight Saving Time ?change of the start and end dates?, on any Authentication Manager, Replica AM, Remote Admin Workstation, RSA Authentication Agent software for Windows, or Software token Software application.
  2. RSAsoftwaredepends on the Operating System's Clock settings (the OS connection to Bios clock is necessary) and Time Zone settings  are used to determine the Universal Coordinated Time; if the OS is patched for the Time Zone settings change and changes the Local Time automatically and correctly then the UCT time will also calculate correctly.
  3. ALL AM Servers (Primary and all Replicas) should be running on the same OS and have the same patches, a problem may occur when one replica is unpatched in regards to calculating the UCT value for local time zone with Daylight Savings Time enabled.
  4. Manual time change on Authentication Manager Servers in case point 2 does not work should not be attempted with out contacting RSA first
  5. Software Tokens on workstations calculate token codes by use of their operating systems clock settings to determine the UCT value for the bios local time. For software workstations, so long as the workstations will calculate the SAME UCT time value (+- 60 seconds) as the AM servers they also will work seamlessly.
    1. Blackberry Software Tokens users please see this URL for more specific DST information for Blackberrys: www.blackberry.com/dst2007
    2. Palm Software Token users please see this URL for more specific DST information for Palms: http://www.palm.com/us/support/downloads/dst.html
  6. RSASecurID Appliance; please go to the following URL to view the RSA Recommended Patches, and fixes for your appliance hardware. (You will be required to authenticate with your SCOL Login and password. If you do not currently have one; you can register for a login to access this page have your Serial number available). https://knowledge.rsasecurity.com/dlcpages/rsa_securid/securid_dlc_app.asp#app201

The following is a SCOL email:

SC Note:  Qualification of RSA products to account for changes in the Daylight Saving Time schedule 

Summary:

 

A provision of the United States Energy Policy Act of 2005 extends Daylight Saving Time (DST) in the United States by four weeks, beginning in 2007. Several countries (such as Canada and Bermuda) are also implementing the same DST change; other countries may decide to make similar changes to DST rules.
Beginning in 2007, DST start and end dates will be as follows:

  • Start date: Second Sunday of March (11 March 2007)
  • End date: First Sunday of November (4 November 2007)

It is assumed that the appropriate operating system patches will be installed by customers to account for these changes to DST. RSA software relies on the correct UTC time provided by the operating system. 

 

 

Note: The patch for Microsoft Windows 2000 is not available from Microsoft without an extended product maintenance contract. Follow the steps specified in the Microsoft Support Knowledge Base (KB) 914387 article to update your Windows 2000 systems manually if you do not have an extended product maintenance contract.

 

 

RSA, The Security Division of EMC, has found that the following products require no additional changes:

  • RSA ACE/Server 5.2
  • RSA Authentication Manager 6.0 and 6.1
  • All supported versions of the RSA SecurID Agent software including Agents for Web, PAM, NMAS, and Windows
  • All supported versions of the RSA Software Token
  • RSA Card Manager
  • RSA Authenticator Client
  • RSA Digital Certificate Solutions
  • All supported versions of the RSA ClearTrust/RSA Access Manager Web Server Agents

 

RSA has identified and fixed certain DST-related issues in the products listed below. For more information about your product, please log on to RSA SecurCare Online at https://knowledge.rsasecurity.com and click "Downloads? > "All Downloads" and select the appropriate product in the left navigation menu. Next, click the ?Patches & Fixes? button to view the DST-related documentation.
 ?         RSA ClearTrust/RSA Access Manager Servers  
 ?         RSA ClearTrust/RSA Access Manager Application Server Agents 
 ?         RSA Federated Identity Manager 

?        RSA SecurID Appliance

?        RSA Sign-On Manager

Obtaining Support and Service:

 

For customers with current maintenance contracts, please contact your local RSA Customer Support center with any additional questions regarding this RSA SecurCare Note. Contact phone numbers and e-mail addresses can be found by logging on to RSA SecurCare Online at https://knowledge.rsasecurity.com and clicking "Contact & Help? > ?Contact Us - Phone" or "Contact Us - Email" in the left navigation menu.

 

General Customer Support Information:

 

http://www.rsasecurity.com/node.asp?id=1067

 

RSA SecurCare Online:

 

https://knowledge.rsasecurity.com

 

About the RSA SecurCare Notes & Alerts Subscription:

RSA SecurCare Notes & Alerts are targeted e-mail messages RSA sends you based on the

RSA product family you currently use. If you would like to stop receiving RSA SecurCare Notes & Alerts, or if you would like to change which RSA product family Notes & Alerts you currently receive, log on to RSA SecurCare Online at https://knowledge.rsasecurity.com and click ?Notes & Alerts? > ?Subscription? in the left navigation menu. Follow the instructions on the page and remove the check mark next to the RSA product family Notes & Alerts that you no longer want to receive. Then click the ?Submit? button to save your selection.

 

 

Sincerely,

 

RSA Customer Support

 

WorkaroundDaylight Savings Time went into effect
Legacy Article IDa33228

Attachments

    Outcomes