SSTDT Family Key Values for AMBA

[DavidAllison]

SSTDT (Set Software Token Device Type) has been deprecated by SSTP (Set Software Token Profile) in Authentication Manager 8.3 Patch 3.  But if you are using a version prior to 8.3.0.3, the following shows the correct KeyType and FamilyKey values for every token type.  A few side notes:

• All values are literal, and can be copied and pasted into your AMBA script.  This includes spaces and parentheses.
• Web SDK 1.0.2 does not support SDTID.
• Desktop PC SID 64-bit 3.0.x only works with SID tokens, and does not work with AES-128 tokens.
• CT-KIP is not supported on the following token types:  
  • BlackBerry 2.1.1
  • Desktop PC SID 64-bit 3.0.x
  • Palm 2.0
  • (Passcode) Desktop PC AES 128-bit 3.0.x
  • Symbian OS 2.20
  • (Tokencode Only) Desktop PC AES 128-bit 3.0.x
  • Windows Mobile 2.2

// Template for Android 1.x
Action,Key,KeyType,MiscVariable
SSTDT,Android,FamilyKey,1.x

// Template for Android 2.x
Action,Key,KeyType,MiscVariable
SSTDT,Android,FamilyKey,2.x

// Template for BlackBerry 2.1.1

// Key is CaseSensitive; it is BlackBerry not Blackberry
Action,Key,KeyType,MiscVariable
SSTDT,BlackBerry,FamilyKey,2.1.1

// Template for BlackBerry 3.0

// Key is CaseSensitive; it is BlackBerry not Blackberry

Action,Key,KeyType,MiscVariable
SSTDT,BlackBerry,FamilyKey,3.0

// Template for BlackBerry 3.5
// Key is CaseSensitive; it is BlackBerry not Blackberry

Action,Key,KeyType,MiscVariable
SSTDT,BlackBerry,FamilyKey,3.5

// Template for BlackBerry 10
// Note that there is a space in the Key name and that both the B's are capitalized

Action,Key,KeyType,MiscVariable
SSTDT,BlackBerry 10,FamilyKey,1.x

// Template for Browser Toolbar 1.3.0
Action,Key,KeyType,MiscVariable
SSTDT,Browser Toolbar,FamilyKey,1.3.0

// Template for Browser Toolbar 1.4
Action,Key,KeyType,MiscVariable
SSTDT,Browser Toolbar,FamilyKey,1.4

// Template for Desktop Mac 4.0
Action,Key,KeyType,MiscVariable
SSTDT,Desktop Mac,FamilyKey,4.0

// Template for Desktop Mac 4.x
Action,Key,KeyType,MiscVariable
SSTDT,Desktop Mac,FamilyKey,4.x

// Template for Desktop PC 4.0
Action,Key,KeyType,MiscVariable
SSTDT,Desktop PC,FamilyKey,4.0

// Template for Desktop PC 4.x
Action,Key,KeyType,MiscVariable
SSTDT,Desktop PC,FamilyKey,4.x

// Template for Desktop PC 5.x
Action,Key,KeyType,MiscVariable
SSTDT,Desktop PC,FamilyKey,5.x

// Template for Desktop PC with Automation 4.x
Action,Key,KeyType,MiscVariable
SSTDT,Desktop PC with Automation,FamilyKey,4.x

// Template for Desktop PC with Automation 5.x
Action,Key,KeyType,MiscVariable
SSTDT,Desktop PC with Automation,FamilyKey,5.x

// Template for Desktop PC SID 64-bit 3.0.x
// --- DOES NOT SUPPORT PASSWORD-PROTECTED SDTID FILE
// --- DOES NOT RECOGNIZE DEVICE SERIAL NUMBER
// --- DOES NOT WORK WITH AES-128 TOKENS
Action,Key,KeyType,MiscVariable
SSTDT,Desktop PC SID 64-bit,FamilyKey,3.0.x

// Template for Generic AES 128
Action,Key,KeyType,MiscVariable
SSTDT,Generic AES 128,FamilyKey,0

// Template for iOS 2.x
Action,Key,KeyType,MiscVariable
SSTDT,iOS,FamilyKey,2.x

// Template for iPhone 1.3
Action,Key,KeyType,MiscVariable
SSTDT,iPhone,FamilyKey,1.3

// Template for J2ME 2.3
Action,Key,KeyType,MiscVariable
SSTDT,J2ME,FamilyKey,2.3

// Template for Nokia 1.x
Action,Key,KeyType,MiscVariable
SSTDT,Nokia,FamilyKey,1.x

// Template for Palm 2.0
Action,Key,KeyType,MiscVariable
SSTDT,Palm,FamilyKey,2.0

// Template for (Passcode) Desktop PC AES 128-bit 3.0.x
// note the spaces and parentheses in the Key name

Action,Key,KeyType,MiscVariable
SSTDT,(Passcode) Desktop PC AES 128-bit,FamilyKey,3.0.x

// Template for Symbian OS 2.20
Action,Key,KeyType,MiscVariable
SSTDT,Symbian OS,FamilyKey,2.20

// Template for (Tokencode Only) Desktop PC AES 128-bit 3.0.x
// --- DOES NOT RECOGNIZE DEVICE SERIAL NUMBER --- FOB-STYLE OR PINLESS ONLY !!!
Action,Key,KeyType,MiscVariable

SSTDT,(Tokencode Only) Desktop PC AES 128-bit,FamilyKey,3.0.x

// Template for UPEK PSOL 5.8
Action,Key,KeyType,MiscVariable
SSTDT,UPEK PSOL,FamilyKey,5.8

// Template for Web SDK 1.0.2
Action,Key,KeyType,MiscVariable
SSTDT,Web SDK,FamilyKey,1.0.2

// Template for Windows Mobile 2.2
Action,Key,KeyType,MiscVariable
SSTDT,Windows Mobile,FamilyKey,2.2

// Template for Windows Mobile 2.3
Action,Key,KeyType,MiscVariable
SSTDT,Windows Mobile,FamilyKey,2.3

// Template for Windows Phone 1.x
Action,Key,KeyType,MiscVariable
SSTDT,Windows Phone,FamilyKey,1.x

This document was generated from the following discussion: SSTDT (Set Software Token Device Type) Family Key Values for AMBA

[StevenSpicer]

None of those values need quotes, right?

[DavidAllison]

Correct.  AMBA is comma delimited, commas and only commas are used as value separators.  You can copy/paste right out of this article and into your CSV file to put in the SSTDT command before using CIF to point to your assign command (ATU, ATUA, etc.).

[JUSTINPALMEN]

Hello, Sorry for my ignorance but could I ask, how would this actually look in a csv? I am very green to the AMBA tool. I currently have a need to bulk assign and deploy. I have the token assign part working using the following headers and the stdid file gets emailed but of course it fails due to no profile.

Action

IdentitySource

SecurityDomain

DefLogin

TokEnabled

SetPin

MiscVariable

deliveryMethod

ATUA

any hints on what I am missing or examples of a csv that assigns a token and then deploys the token with the proper software device type - example for android.

[DavidAllison]

A sample .CSV file would look something like this:

// Template for iOS 2.x
Action,Key,KeyType,MiscVariable
SSTDT,iOS,FamilyKey,2.x
CIF,Action,IdentitySource,SecurityDomain,DefLogin,TokEnabled,MiscVariable,MinTokenLife,OTPLength,DeliveryMethod,DestinationAddress,PinType,SoftIDPW,DeviceSerialNumber,SoftIDParams,TemplateFile
ATUA,<IDSOURCE>,<SecurityDomain>,<UserID>,1,4,180,8,SMTP2,<email>,Passcode,<password>,<DeviceSerialNumber>,011,/opt/rsa/am/amba/SDTIDDefaultNotice.xml

You will have to change anything <in arrow brackets> to your own value without brackets.  This example also assumes you have an email template file called SDTIDDefaultNotice.xml in /opt/rsa/am/amba (this directory doesn't exist, you would have to create it or point the path to wherever your XML file is).