Authentication Manager 8.x Quick Setup Access Code Not Displayed After Appliance Deployment
20 hours ago
Originally Published: 2019-06-07
Article Number
000044099
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.1 or later
Issue

After deploying a new RSA SecurID appliance, the Quick Setup Access Code does not appear on the appliance console, preventing the administrator from accessing the Quick Setup page to complete initial configuration. 

Expected Console Output (normal deployment): 

To complete the appliance configuration, access Quick Setup at:
https://<AM_IP_Address>

Quick Setup Access Code: xxxxxxxx

To confirm the authenticity of the appliance, verify that the SHA-1
fingerprint of the certificate presented during Quick Setup matches
the SHA-1 fingerprint displayed below.

XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX


 Observable Symptoms (when the issue is present): 

To complete the appliance configuration, access Quick Setup at:
https://<AM_IP_Address>
To confirm the authenticity of the appliance, verify that the SHA-1
fingerprint of the certificate presented during Quick Setup matches
the SHA-1 fingerprint displayed below.

XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX
 
 
Cause

Incorrect network settings provided during appliance deployment prevent the Authentication Manager server from becoming reachable on the network, which causes the Quick Setup Access Code to not display on the console.

When the appliance cannot communicate on the network — for example, because an incorrect default gateway was entered — it is unable to initialize the Quick Setup service and make it accessible via browser. As a result, the Quick Setup  Access Code is not presented on the console.

This commonly happens when network configuration details (IP address, subnet mask, or default gateway) are entered incorrectly.

 

Resolution

NOTE: If the network settings are incorrect, the appliance may not be reachable via SSH. In that case, access the appliance directly using the VM console (e.g., VMware vSphere Console) instead of an SSH client and proceed from Step 2.

 

  1. Launch an SSH client (such as PuTTY) and connect to the appliance using its IP address.
  2. Log in as rsaadmin and enter the operating system password when prompted.

NOTE: If a different operating system username was selected during deployment, use that username instead of rsaadmin.

  1. Check the current default gateway by running:
    cat /etc/sysconfig/network/routes

    The output will look similar to:

    default <current-gateway-IP> - eth0
  2. Escalate to root:
    sudo su -

    Enter the rsaadmin operating system password when prompted.

  3. Open /etc/sysconfig/network/routes in the vi text editor: 
    vi /etc/sysconfig/network/routes
  4. Press i to enter Insert mode.
  5. Update the default gateway IP address for eth0 to the correct value:
    default <new-default-gateway-IP> - eth0
  6. Press Escape to exit Insert mode.
  7. Type the following and press Enter to save the file and exit:
    :wq!
  8. Reboot the appliance:
    sudo reboot

     

  9. Once the appliance has restarted, open a browser and navigate to https://<AM_IP_Address> to access the Quick Setup page.

Verification: After the reboot, confirm the Quick Setup Access Code is now displayed on the appliance console. The console output should match the expected format shown in the Issue section above. Enter the Access Code in the browser to proceed with Quick Setup. 

Notes
  • Related Article — "No Configured Interfaces Were Detected" Error After Quick Setup: If after completing Quick Setup you encounter the error "No configured interfaces were detected", refer to Article 000037165 for steps to resolve this error on a new RSA Authentication Manager 8.4 server.

  • Related Article — Quick Setup Page Inaccessible Due to Browser Cipher Mismatch: If the Quick Setup Access Code displays correctly on the console but the Quick Setup page still cannot be accessed in a browser, the issue may be a browser SSL cipher mismatch rather than a network configuration problem. Refer to Unable to Access the RSA Authentication Manager 8.1 Quick Setup Page (Article 000046950) for supported browsers, protocols, and cipher suites.