Select Hardware Tokens for Provisioning

Hardware tokens are handheld devices, such as key fobs, that display pseudorandom tokencodes. Before a user can request a hardware token through the Self-Service Console, you must select this type of authenticator for user requests.

Note:  These settings apply only to hardware tokens requested through Self-Service.

Procedure 

1. In the Security Console, click Setup > Self-Service Settings

2. Under Provisioning, click Manage Authenticators.

3. Under Hardware Token Types Available for Request, find the types of hardware tokens you want to make available for user requests, and click the associated checkbox.

4. For each hardware token you select, do the following:

   1. In the Display Name field, enter a descriptive name for the token. This name displays in the Self-Service Console.

   2. (Optional) In the Image Location field, enter the directory path and filename of an image file that shows the token.

   3. In the Description field, enter a description of the token. This description displays in the Self-Service Console.

   4. For Authentication Type, select one of the following:

      • Passcode - A code entered by a user to authenticate. The passcode is a combination of a PIN and a tokencode.

      • Tokencode only - A random number displayed on the front of a user's RSA SecurID token. Tokencodes change at a specified time interval, typically every 60 seconds.

      Note:  This setting only applies to hardware tokens requested through Self-Service.

5. To allow users to use the RSA SecurID 800 Authenticator with RSA Smart Card Middleware, do the following:

   1. Select SID800 and complete step 4.

   2. For Require Remote Seeding, select this option for dynamic seed provisioning.

   3. In the RSA Smart Card Middleware URL field, enter the URL of the Smart Card Middleware software for users to download. This URL displays in the Self-Service Console.

   4. In the Smart Card Middleware Instructions field, enter instructions and the version of the Smart Card Middleware. These instructions and the version of the Smart Card Middleware appear in the Self-Service Console.

   5. In the Smart Card Middleware Update URL field, enter the URL of the Smart Card Middleware update for users to download. This URL appears in the Self-Service Console.

   6. In the Smart Card Middleware Update Instructions field, enter instructions and the version of the Smart Card Middleware update. These instructions and the version appear in the Self-Service Console.

   7. In the Certificate Authority URL field, enter the URL of the certificate authority web site where users can obtain digital certificates. This URL appears in the Self-Service Console.

6. (Optional) To make this token the default token type for all token requests, select Make this the default option for hardware token requests.

7. Under Expiring Token Parameters, enter the number of days before a token expires that users can request a replacement token.

8. Click Save.