Obtain the Identity Router Image


SecurID distributes the identity router image in a unique format for VMware (OVA), Microsoft Hyper-V (VHD), and Amazon Web Services (AMI). You can download the OVA or VHD and use it to deploy virtual appliances on your network, or you can share the AMI with your Amazon account and configure virtual appliances in the cloud. You can use the same image to set up multiple identity routers. Perform the following procedure to obtain the appropriate identity router image for your deployment.

Note: For instructions on downloading the image to an Authentication Manager server, see Quick Setup - Connect SecurID Authentication Manager to the Cloud Authentication Service with an Embedded Identity Router.

Before you begin

You must be a Super Admin in the Cloud Administration Console.


  1. In the Cloud Administration Console, click Platform > Identity Routers.

  2. Click Download Identity Router Image.

  3. Do one of the following:
    • For VMware, click Download OVA Image for VMware, and save the image to a location accessible by VMware.

    • For Hyper-V, click Download VHD Image for Hyper-V, and save the image to a location accessible by Hyper-V.

    • For Amazon Web Services:
      1. Click Access AMI for Amazon.

      2. Under AWS Accounts with AMI Access, enter the Account ID for the AWS account that requires access to the identity router AMI.

      3. (Optional) If you need to grant access to another account, click Add, and repeat the previous step.

      4. (Optional) If you need to revoke AMI access for any reason, click the minus symbol (-) next to the account you want to remove.

      5. Note the values in the Identity Router AMI Name and AWS Regions with AMI Access fields. You can search the AWS private images catalog using these values to quickly locate the AMI for a specific region, and to verify that the AMI shared to your AWS account is the latest genuine version provided by SecurID.

      6. Click Update AMI Access.

  4. The OVA and VHD images each contain two network interfaces. If you plan to configure one network interface for this identity router, you must manually delete the second network interface from the image. You can do this by editing the image in the VMware administration client or Hyper-V Manager.

After you finish