Using RSA Security Key Utility

[#1]

Using RSA Security Key UtilityUsing RSA Security Key Utility

If your organization uses FIDO2-certified security keys, you can use RSA Security Key Utility to manage user verification for the security keys. RSA Security Key Utility is a Windows utility that you deploy on users' Windows machines. Users can then use the utility to manage a PIN for the security key or reset the key.

• System Requirements

• Install RSA Security Key Utility on a Single Computer

• Install RSA Security Key Utility on Multiple Computers

• Uninstall the RSA Security Key Utility

• Create or Change PIN

• Reset Key

Note: If version 1.0.0 is already installed on your computer, you can install an upgrade without removing version 1.0.0.

System RequirementsSystem Requirements

• RSA Security Key Utility works with any FIDO2-certified USB security key.

• RSA Security Key Utility is supported on the following operating system versions:

  • Windows 10 version 1909 x64 and x86

  • Windows 10 version 1903 x64 and x86

  • Windows 10 version 1809 x64 and x86

  • Windows 10 version 1803 x64 and x86

  • Windows 8.1 x64 and x86

• Users on Windows 10 version 1903 and later must have administrative privileges.

Install RSA Security Key Utility on a Single ComputerInstall RSA Security Key Utility on a Single Computer

You can install the RSA Security Key Utility on a single computer using an install wizard. Repeat the procedure for other computers.

Before you begin

Download RSA_Security_Key_Utility.zip in the RSA Link SecurID Cloud Authentication Service Downloads space. The latest version is 1.1.0.

Procedure

1. Log on to the computer as an administrator, or install with administrator privileges.

2. Extract RSA_Security_Key_Utility. to a folder on the computer.

3. To start the installation wizard, double-click RSA Security Key Utility x64.msi or RSA Security Key Utility x86.msi.

   Or type the following:

   msiexec.exe /i "RSA Security Key Utility x64.msi" /quiet

   This command installs the utility or upgrades it to version 1.1.0.

4. Click Next to advance through the Welcome dialog boxes.

5. Read the License Agreement or click Print to print it. When ready, select I accept the terms in the license agreement and click Next.

6. Click Install. RSA Security Key Utility installs on the local computer. Windows prompts you to allow account control privileges if you set up account control privileges. Click Allow.

7. Click Finish.

Install RSA Security Key Utility on Multiple ComputersInstall RSA Security Key Utility on Multiple Computers

To install RSA Security Key Utility on multiple computers at one time, do the following:

1. Download RSA_Security_Key_Utility.zip from the RSA Link SecurID Cloud Authentication Service Downloads space. The latest version is 1.1.0.

2. Extract RSA_Security_Key_Utility.zip to a folder on the computer.

3. Provide Account Control Privileges to User Computers.

4. Deploy the Installation Package to Multiple Computers.

Provide Account Control Privileges to User ComputersProvide Account Control Privileges to User Computers

Administrators can install RSA Security Key Utility on all computers in a domain. Users who are members of the Administrators group can install RSA Security Key Utility on their own computers.

Procedure

Use the following tools to control privileges:

• Microsoft Management Console (MMC) 3.0
• Use Group Policy to control MMC usage

Note: A user with elevated privileges on the computer can install and remove RSA Security Key Utility.

Deploy the Installation Package to Multiple ComputersDeploy the Installation Package to Multiple Computers

After you set the account privileges to the necessary groups, you can deploy RSA Security Key Utility using one of the following methods:

• A third-party product that automatically deploys MSI packages

• Silent installation from the msiexec command line

Procedure

Deploy the MSI file with a third-party tool, or use the command line to perform a silent installation.

To perform a silent installation, perform the following steps.

1. Right-click the command prompt icon from the Start menu and click Run as administrator to open the command prompt.

2. Navigate to the directory that contains the RSA Security Key Utility x64.msi or RSA Security Key Utility x86.msi package file. Or provide the full pathname to the package file on the command line.

3. Type a case-sensitive command similar to the following, depending on the name of your MSI package:

   msiexec /i “RSA Security Key Utility x64.msi" /quiet

   This command installs the utility or upgrades it to version 1.1.0.

   To log any errors, add the /lv (log verbose) option at the end of the command and the log file name, for example, C:\install.log. For silent mode, add the /quiet option.

Uninstall the RSA Security Key UtilityUninstall the RSA Security Key Utility

Uninstalling removes the utility from the user's computer. This tasks requires the Product ID.

RSA Security Key Utility Version	Product ID
1.0.0	02FA8C8D-78A5-42C2-83BD-21C728B21E26
1.1.0	C06DD50C-006F-4A58-8682-DF244BD06E85

Do one of the following:

• Uninstall the RSA Security Key Utility

• Uninstall RSA Security Key Utility on Multiple Computers

Uninstall RSA Security Key Utility on a Single ComputerUninstall RSA Security Key Utility on a Single Computer

Procedure

1. Click Settings > Programs > Programs and Features. Select RSA Security Key Utility.

   Or type the following at a command line to start the uninstallation wizard:

   msiexec /uninstall {product-id}

2. Click Uninstall.

3. Do one of the following (if prompted):

   • If logged on as an administrator, click Allow to elevate your privileges.

   • If logged on as a user, enter an administrator user name and password to elevate your privileges and allow the uninstall process to continue.

Uninstall RSA Security Key Utility on Multiple ComputersUninstall RSA Security Key Utility on Multiple Computers

You can uninstall RSA Security Key Utility from multiple users’ computers using a third-party tool, such as Microsoft System Center Configuration Manager, without user interaction.

Procedure

1. Enter the following

   msiexec /uninstall {product-id} /quiet /lv C:\uninstall.log

   with the /qn option for silent mode, the /lv option for verbose logs, and the fully qualified pathname.

2. Put the log file, for example uninstall.log, in a known location such as %USERPROFILE%

Create or Change PINCreate or Change PIN

RSA Security Key Utility supports adding a PIN between 4-63 characters, depending on language. If necessary, a user can change the PIN by entering the current and new PINs.

Procedure

1. Click Start > RSA > RSA Security Key Utility.

   Depending on your configuration, Windows might present User Account Control (UAC) screens to request administrative credentials.

2. Insert the security key.

3. Click Create PIN or Change PIN, and follow the instructions.

Reset KeyReset Key

If a user locks the PIN because of eight incorrect PIN attempts, the user must reset the security key. The user can also choose to reset the key to restore it to its manufacturer default settings.

Procedure

1. Click Start > RSA > RSA Security Key Utility.

   Depending on your configuration, Windows might present User Account Control (UAC) screens to request administrative credentials.

2. Insert the security key.

3. Click Reset Key and follow the instructions.

Previous Page	Next Page