Regenerating the node secret for the RADIUS Server solves both issues:

You can regenerate the node secret used to authenticate communication between

the RSA Authentication Manager and RSA RADIUS Server at any time.

To regenerate a node secret:

1 Stop the RSA RADIUS service/daemon on the RADIUS server.

2 Log into the RADIUS server as root (Solaris/Linux) or administrator

(Windows).

3 Navigate to the ..RSA Radius\Service (Windows) or

/opt/rsa/radius (Solaris/Linux) directory.

4 Run the rsainstalltool (Windows) or rsaconfiguretool

(Solaris/Linux) utility with the identity option.

To regenerate the node secret for a Primary RADIUS Server, enter the

following command:

# ./rsaconfiguretool -identity PRIMARY

To regenerate the node secret for a a Replica RADIUS Server, enter the following command:

# ./rsaconfiguretool -identity REPLICA

5 Restart the RSA RADIUS service.

See also https://knowledge.rsasecurity.com/docs/rsa_securid/rsa_auth_mgr/61/rsa_radius_admin.pdf