How to Restrict users from using certain PIN's that are less secure
2 years ago
Originally Published: 2018-08-01
Article Number
000044319
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.X
 
Issue
This article explains how to block certain PIN's or Passwords from being used by the users while they set the PIN while authenticating with Token. 


 
Tasks
Before You Begin
Create a password dictionary. Create a text file and enter each dictionary entry on a separate line. When you save the file, verify that the file is not larger than 20 MB.

Example
1111 
2222 
3333 
1234 
5678

 
Resolution
Procedure:

Section 1:
  1. In the Security Console, click Setup > System Settings.
  2. Under Authentication Settings, click Password Dictionary.
  3. Under Password Dictionary, make sure that the status is No password dictionary found. If the status is Password dictionary imported, you must first delete the existing password dictionary before adding a new one. For instructions, see Delete a Password Dictionary.
  4. In the Password Dictionary Name list, click Import Password Dictionary File.
  5. Under Password Dictionary Basics, enter the name of the password dictionary that you are importing in the Password Dictionary Name field.
  6. Under Password Dictionary File, browse to the password dictionary file that you are importing.
  7. When prompted, select the password dictionary filename, and click Open.
  8. Click Import File and the import process can take several minutes.
  9. Click Update Status to refresh. When the status shows Password dictionary imported, the name of the new password dictionary is displayed in the Password Dictionary Name list.
  10. Click Done.
Section 2:
  1. In the Security Console, click Authentication > Policies > Token Policies > Manage Existing.
  2. Use the search fields to find the token policy that you want to edit.
  3. From the search results, click the token policy that you want to edit.
  4. Click edit on the token policy dropdown.
  5. Navigate to section SecurID PIN Format 
  6. Change Excluded Words Dictionary from "none" to the dictionary file imported earlier. 
  7. Click Save. 
Notes
Post the dictionary file is imported and linked we observe the following error on the Authentication activity monitor if the user tries to set a PIN matching to the one defined in the dictionary.
Error: PIN change failed dictionary check