This article explains how users can generate a temporary emergency access tokencode from the RSA Authentication Manager Self-Service Console without contacting their RSA help desk.
This is useful if the end-user has misplaced their token or forgotten to carry their assigned token to their workplace.

Configure Self-Service Settings

1. From the Security Console, click Setup > Self-Service Settings.
2. On the Settings page, select Customization. 
3. Click Enable or Disable Self-Service Features.
4. Enable the following options:

• For Provisioning, enable provisioning features.
• For Log On Section, enable Display Log on Section.
• For Troubleshooting Links, enable Display Troubleshooting links.
• For Set Display Options for Troubleshooting, enable Display Token is temporarily unavailable for misplaced option.

​

5. Click Save.
6. In the Security Console, click Setup > Self-Service Settings.
7. Select Manage Authenticators.
8. In the Emergency Access Tokencode Settings section, select Allow user to place token in emergency access mode. 

9. In the Emergency Access Tokencode Settings for Temporarily Unavailable Tokens section, use the Emergency Access Tokencode Lifetime fields to enter the length of time you want emergency access tokencodes to remain active. 

10. When done, click Save.

1. Login to the Self-Service Console.
2. Click Troubleshoot. 

3. Select the option that the token is temporarily unavailable or misplaced.
4. Click OK. 

5. An emergency access tokencode is generated for the user.
6. The user can now use the emergency access tokencode to authenticate. Use the Test Log On button to confirm. 

• The emergency access tokencode can be used more than once if the emergency access tokencode settings are set to Temporary Fixed tokencode (TFT); however a set of On time tokencodes (OTT) is valid once.
• If you have a SecurID PIN, log on with your PIN + the emergency access tokencode.
• If you do not have a SecurID PIN: Use only the emergency access tokencode.