RSA Product Set: SecurID
RSA Product/Service Type: RSA MFA Agent for Microsoft Windows
RSA Version/Condition:  2.x

A logon to Windows shows "Currently offline. Unable to connect to the network or RSA service." For example:

The RSA MFA Test Authentication Utility reports an "Unsuccessful connection to RSA." message during troubleshooting. For example:

The RSA MFA Test Authentication Utility trace reports the following data during the time period before the message "Unsuccessful connection to RSA." appears:

[Local: 2026-03-06 11:32:06.865] 2026-03-06 00:32:06.865 10732.1 [V] [RSA.Authentication.Mfa.Authenticator.StartAuthenticationAttempt] Enter
[Local: 2026-03-06 11:32:06.868] 2026-03-06 00:32:06.868 10732.1 [V] [RSA.Authentication.Mfa.Authenticator.StartAuthenticationAttempt] Calling OfflineAuthenticationSvcClient.ReportAuthenticationStart
[Local: 2026-03-06 11:32:06.872] 2026-03-06 00:32:06.872 10732.1 [E] [RSA.Authentication.Mfa.Authenticator.StartAuthenticationAttempt] Caught exception: System.ServiceModel.CommunicationObjectFaultedException: The communication object, System.ServiceModel.Channels.ServiceChannel, cannot be used for communication because it is in the Faulted state.

Server stack trace: 
   at System.ServiceModel.Channels.CommunicationObject.Close(TimeSpan timeout)

Exception rethrown at [0]: 
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at System.ServiceModel.ICommunicationObject.Close(TimeSpan timeout)
   at System.ServiceModel.ClientBase`1.System.ServiceModel.ICommunicationObject.Close(TimeSpan timeout)
   at RSA.Authentication.Mfa.Authenticator.StartAuthenticationAttempt(Boolean testAuthentication)
[Local: 2026-03-06 11:32:06.873] 2026-03-06 00:32:06.873 10732.1 [V] [RSA.Authentication.Mfa.Authenticator.StartAuthenticationAttempt] Return

RSA MFA Agent Data events found in the Event Viewer > Applications and Services Logs reports an error for one or more of the RSA MFA Agent for Microsoft Windows components. For example:

A service component did not start: DayFilesSvc: Error: An error occured creating the configuration section handler for system.serviceModel/bindings: Could not load file or assembly 'System.ServiceModel.Web, Version: 4.0.0.0, Culture=neutral, PublicKeyToken='31bf3856ad364e35' or one of its dependencies. The file or directory is corrupted and unreadable. (Exception from HRESULT: 08=x80070570) (C:\Program Files\RSA\RSA MFA Agent for Microsoft Windows\Offline Authentication\RSA.WinAgentWindowsService.exe.Config line 7)

The error 0x80070570 indicates that a file or directory is corrupted and unreadable. In this case, it specifically affects the System.ServiceModel.Web assembly, a critical component of the .NET Framework used by OfflineAuthenticationSvc, one of the components/modules of the RSA MFA Agent for Windows.

Fix the .NET framework using the following steps:

1. Repair System Files

Use the System File Checker (SFC) to identify and replace corrupted system binaries.

• • Open Command Prompt as an Administrator.
  • Run the following command: sfc /scannow
  • If SFC finds but cannot fix files, run: DISM /Online /Cleanup-Image /RestoreHealth

2. Run the .NET Framework Repair Tool
   
   Since the error originates from a .NET configuration handler, use the official Microsoft .NET Framework Repair Tool at URL https://www.microsoft.com/en-in/download/details.aspx?id=30135.

• • Download and run the tool; it will automatically scan for known issues in the .NET Framework installation and attempt to apply fixes.

3. Check for Disk Corruption
   
   The "corrupted and unreadable" status often points to underlying file system issues.

• • In the Command Prompt, run: chkdsk C: /f (replace C: with your system drive letter if different).
  • You will likely need to restart the server to allow the scan to complete before Windows boots.

4. Clear Windows Update Cache
   
   Corrupted update files can sometimes trigger this error during background service starts.

• • Stop the Windows Update service.
  • Rename or delete the folder: C:\Windows\SoftwareDistribution.
  • Restart the Windows Update service and check for updates to ensure the latest Servicing Stack Update (SSU) is installed.

5. Verify the Assembly Path
   
   If the file remains unreadable after repairs, navigate to the Global Assembly Cache (GAC) or the .NET directory:

• • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\
  • Try to locate System.ServiceModel.Web.dll. If the folder itself is inaccessible, it may need to be deleted and reinstalled via the Add Roles and Features wizard (by toggling .NET Framework 4.x features)

The RSA MFA Agent for Microsoft Windows software relies on a working Microsoft Windows .NET framework. Refer to the MFA Agent 2.x for Microsoft Windows Installation and Administration Guide for your installed version for .NET framework requirements.

The following listed components/modules are started when the 'RSAWindowsAgentService' service starts and data is written to RSA MFA Agent Data log in the Event Viewer under Application and Service Logs:

• DayFileSvc
• OfflineAuthenticationSvc
• AzureAuthSvc
• AuthServerSvc
• PasswordlessAuthenticationSvc
• ConfigurationProtectionService