Cloud Access Service User System Requirements

RSA Authenticator App Device Requirements

Connectivity Requirements for RSA Authenticator App Registration to CAS

At registration time, the device where the RSA Authenticator App is installed must be able to access the URLs listed in this section. These URLs are necessary to register the app to CAS. If users' devices may be connected to your organization's network at the time of registration, ensure that your organization's firewalls allow end user devices to access these URLs.

For FedRAMP customers:

• Allow DNS TXT query: homing.securidgov.com. The primary and secondary homing service URLs that may be returned, are currently:

  https://homingprod5gva.blob.core.usgovcloudapi.net

  https://homingprod5gaz.blob.core.usgovcloudapi.net

• *.digicert.com

• ctldl.windowsupdate.com (Windows devices only)

For non-FedRAMP customers:

• Allow DNS TXT query: homing.securid.com. The primary and secondary homing service URLs that may be returned, are currently:

• *.digicert.com

• ctldl.windowsupdate.com (Windows devices only)

OS and App Versions

RSA updates the RSA Authenticator App on a regular basis in iOS, Android, Windows, and MacOS. We recommend that users always update to the latest version of the app, available from official app stores.

Older versions of the RSA Authenticator App may no longer be supported. Refer to Product Version Life Cycle for Authenticator App. Each Authenticator App version comes with a minimum operating system version requirement. Please refer to the release notes of the version of the Authenticator App you are looking to use.

FIDO Requirements

RSA CAS is a FIDO2 Certified Server.

While FIDO authentication is generally supported on all modern browsers, it might not work on browsers that run on virtual machines.

For further information, refer to Quick Setup Guide - FIDO.

To use mobile passkeys, ensure that the following URLs are accessible:

• https://cable.ua5v.com

• https://cable.auth.com