RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x
Platform: null
Platform (Other): null
O/S Version: null
Product Name: null
Product Description: null
To know RSA SecurID password encryption at rest.
OR
Detailed information about the internal database, external identity source, or both.
1) Ensure SSH access is enabled on the primary. Check this by logging on to the Operations Console and selecting Administration >
Operating System Access.
2) Open an SSH session on the Authentication Manager primary.
Login to the primary Authentication Manager server as rsaadmin and enter the operating system password.
Note that during Quick Setup another user name may have been selected. Use that user name to login.
Run the commands below to capture the com.rsa.db.dba.password, shown below.
On this server, the value is (asByoqA2vgpQwfYfET17RIWwzIqSaa) but will be different in your deployment of Authentication Manager.
Password hashing algorithm is SSHA256 as shown from ims_identity_source table output below:
login as: rsaadmin
Keyboard-interactive authentication prompts from server:
| Password:
End of keyboard-interactive prompts from server
Last login: Thu Mar 4 12:15:41 2021 from 192.168.20.1
RSA Authentication Manager Installation Directory: /opt/rsa/am
rsaadmin@amprimary:~> cd /opt/rsa/am/utils
rsaadmin@amprimary:/opt/rsa/am/utils> ./rsautil manage-secrets -a get com.rsa.db.dba.password
Please enter OC Administrator username: ocadmin
Please enter OC Administrator password: *********
com.rsa.db.dba.password: asByoqA2vgpQwfYfET17RIWwzIqSaa
rsaadmin@amprimary:/opt/rsa/am/utils> cd ../pgsql/bin
rsaadmin@amprimary:/opt/rsa/am/pgsql/bin> ./psql -h localhost -p 7050 -d db -U rsa_dba
Password for user rsa_dba:
psql.bin (9.4.1)
SSL connection (protocol: TLSv1.2, cipher: AES256-GCM-SHA384, bits: 256, compression: off)
Type "help" for help.
db=# select NAME,INTERNAL_STORE,SRC_TYPE,SALT_SIZE,PWD_ALGORITHM, DESCRIPTION from ims_identity_source;
name | internal_store | src_type | salt_size | pwd_algorithm | description
-------------------+----------------+----------+-----------+---------------+------------------------
Internal Database | t | 10 | 5 | SSHA256 | System Identity Source
Active Directory | f | 0 | 5 | SSHA256 |
AD test | f | 0 | 5 | SSHA256 |
AD test_2 | f | 0 | 5 | SSHA256 |
(4 rows)
db=#
IMS_IDENTITY_SOURCE table: Detailed information about the internal database, external identity source, or both.
file:///C:/Users/elassh/Downloads/SecurID/Guides/Developer%20Guide/auth_manager_developer_guide.htm#Production/AM_Developer_Guide/am_r_database_schema.html%3FTocPath%3DRSA%2520Authentication%2520Manager%2520Developer's%2520Guide%7CSQL%2520Access%2520to%2520the%2520RSA%2520Authentication%2520Manager%2520Database%7C_____1
Related Articles
Edit the Internal Database 15Number of Views Set the RSA Authentication Manager internal database password to optional 239Number of Views How to create Internal Database users without passwords in Authentication Manager 8.x 21Number of Views How to check the size of the internal database in RSA Authentication Manager 8.x 299Number of Views Add a User to the Internal Database 46Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Reporting on RSA Authentication Manager 8.x users with On-Demand Token, a fixed passcode or a hardware/software token assi… How to Download OTP Token Seed Files from myRSA Anomalix idGenius - SAML Relying Party Configuration - RSA Ready Implementation Guide RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide