Understanding the format of RSA cookies
Originally Published: 2003-06-17
Last Modified: 2023-09-25
Article Number
Applies To
RSA Authentication Agent 5.3 for Web
RSA Cookie
Cookie Format
Issue
Cause
Resolution
NOTE: Since the release of RSA ACE/Agent 4.4, the documented structure and naming of the cookies has changed
For version 4.3 and earlier, cookie names are as follows:
local = webid2
domain = webid2_dom
For RSA ACE/Agent 4.4 and later, the cookie has variable length fields; therefore, the different fields are delimited, with the names as follows.
local = rsa-local
domain = webid2_dom
Additionally, the data in the cookie is URL encoded and are designed to conform to RFC 2965.
The cookie is made of a number of fields, where the variable length fields are delimited (with a Z00' sequence) and the order of the fields is as follows:
delimiter
username
shell
auth type
create time
sd time
3rd party data
RSA Reserved Data
so, given the following cookie:
rsa-local=TestTechZ00Z002Z003D8749DAZ003D8749DAZ00Z00Z9AZ0DXZ3DZC7Z19Z0
FLZECccZD1ZBDZ95fZAA9ZC3FycZFFZ16Z5AZE9Z26NZA3n0Z80ZD4
The data is broken down into the following items:
delimiter = Z00
username = TestTech
shell = <blank>
auth type = 2
create time = 3D8749DA
sd time (same as create) = 3D8749DA
3rd party data = <blank>
Use double null to delimit reserved data
RSA Reserved Data =
9AZ0DXZ3DZC7Z19Z0FLZECccZD1ZBDZ95fZAA9ZC3FycZFFZ16Z5AZE9Z26NZA3n0Z80ZD4
The current version of web agent is RSA ACE/Agent 5.2 for Web and support for versions 4.4 and earlier has now ceased.
Related Articles
Access Policy 2.0: Easily Rollout Passwordless to the Masses Number of Views Services failed to restart after upgrade to 8.8 while using custom signed certificates Number of Views RSA SecurID prompt does not appear when connecting with Remote Desktop Protocol RDP on Windows Server 2012 with RSA Authen… Number of Views Authentication for the Cloud Administration APIs Number of Views How to generate a Certificate Signing Request (CSR) with the Subject Alternative Name (SAN) field using openssl on RSA Aut… Number of Views
Trending Articles
RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide User Application Portal The RSA Identity Governance & Lifecycle AD Collector and AD ADC authentication source fail to establish a TLS 1.2 SSL conn… How to Replace the Web Server Certificate for the RSA Identity Governance & Lifecycle Web Console Unable to Resolve User by Login ID and/or Alias or Authenticator Not Assigned to User When Attempting to Authenticate via …
Don't see what you're looking for?
