An administrator can review and remove the CT-KIP authcode data from the rsa_rep.am_ctkip_authcode table within the Authentication Manager database.

Steps to acquire the Authentication Manager database administrator password

1. Logon to the SecurID Appliance either via SSH where Secure Shell has been enabled or the local console with the rsaadmin account.

Note that during Quick Setup another user name may have been selected. Use that user name to login.

2. Navigate to the /opt/rsa/am/utils folder using the command:

3. Retrieve the password for the rsa_dba user using the following command:

NOTE: When prompted, enter the Operations Console administrative account username and password.

Report on CT-KIP authcode data

1. To generate a report on CT-KIP authcode data use the following command:

2. When prompted enter the rsa_dba password obtained in step 3 above.
3. Review the contents of the /tmp/report_data.csv:

Removing CT-KIP authcode data

1. To remove the CT-KIP authcode data in the rsa_rep.am_ctkip_authcode table use the folloing command:

2. When prompted enter the rsa_dba password obtained in step 3 above.

NOTE: The distribution of software tokens via dynamic seed provisioning (CT-KIP) will generate new data in the rsa_rep.am_ctkip_authcode table.

For more information on the Change User/Token Security Domain (CUSD) refer to page 62 of the RSA Authentication Manager 8.8 Bulk Administration Utility (AMBA) Guide.

The syntax will be as follows:

Action,DefLogin,SecurityDomain,DestinationSecurityDomain,MiscVariable
CUSD,<all>,MyOldSecDomain,MyNewSecDomain,4