Bulk Remove RSA Tokens

[JacobMulholland]

Certain members of the support team in my organisation need the ability to run scripts for bulk token removal. 

Rather than grant them an Admin role to allow it, I'd love to be able to add the specific 'Task' to the existing role they have, but can't seem to find it. 

Can you advise please on what the Task is that would allow a use to run a batch script in an RSA console, to bulk remove assigned RSA tokens. 

[_EricaChalfin]

Jacob Mulholland‌,

It sounds like you are looking for the functionality available in RSA Authentication Manager Bulk Admin, specifically the UT (Unassign Token) and DT (Delete Token) actions, mentioned on pages 93 and 88, respectively.

Regards,

Erica

[JacobMulholland]

Morning Erica,

Cheers for the response. I’ve looked up our version details:

Is it at all possible to perform the function with the above version as updating to a whole new one (disregarding if they’re technically different software systems) isn’t something we want to look into if at all possible.

The requestors are thinking Super Admin will give them what they’re after, however a much better solution will be to ascertain what the specific Access Item is called in the RSA Authentication Manager console, as I could then simply add said Access Item to their existing roles.

Regards,

Jacob Mulholland | UAR Coordinator

CHED Services | Information Technology

A 40 Market Street Melbourne, VIC 3000

Email: jmulholland@powercor.com.au

Upcoming Leave: None

[_EricaChalfin]

Jacob Mulholland‌,

You can use the UT and DT functions with RSA Authentication Manager 8.2 SP1.  You will need the RSA Authentication Manager 8.2 SP1 Bulk Administration 1.6.0 Custom Application Guide (AMBA).

Please note that that version of the software is scheduled to be end of lifed in April (see the Product Version Life Cycle for RSA SecurID Access), so we would strongly recommend upgrading to RSA Authentication Manager 8.4 at your earliest convenience.

Regards,

Erica

[JacobMulholland]

Hi Erica,

In terms of end of lifed – that’s meaning RSA will no longer directly support it, or it will be non-functional?

I ask as sadly I have no budget for what I’m trying to do, it’s an efficiency upgrade that needs a few tweaks in our RSA world.

Can you advise on the price of the Bulk Admin 1.6.0 at all?

I’ve had people here saying that super admin rights will allow it as well, though I thought if the functionality isn’t there in the base portal that we’ve got then the rights we have won’t matter.

Can you confirm that Super Admin rights won’t allow any bulk work to be done on paper and cost please of the Bulk Admin 1.6.0 add-on.

Regards,

Jacob Mulholland | UAR Coordinator

CHED Services | Information Technology

A 40 Market Street Melbourne, VIC 3000

Email: jmulholland@powercor.com.au

Upcoming Leave: None

[_EricaChalfin]

Jacob Mulholland‌,

RSA Authentication Manager 8.2 SP1 will still be functional after April 2020.  The  Product Version Life Cycle page explains how support works once a version of software is no longer supported. 

No budget?  No problem!  If I am reading your entitlements correctly, you do have an enhanced support contract (but that is expiring soon).  Please check in with your RSA sales rep or reseller to confirm your maintenance end date.

While your maintenance is current you can upgrade your RSA Authentication Manager software for free and get the latest version of AMBA at no charge as well. I would recommend upgrading to the latest version (or at least downloading the software you need) while you can still get it.

Your original question was if there is an ability to run scripts for bulk token removal by adding a task to an admin role to accomplish this via the Security Console.  The roles are fixed and cannot have tasks added.  Depending on how many users and tokens we are talking about you could manually go through the Security Console UI, searching for users and unassigning tokens but if you have a large number of tokens to unassign, your best option is to use AMBA to complete the task.

Regards,
Erica 

[JacobMulholland]

Hi Erica,

That’s great news, thanks again. I will look into getting our environment updated but if not, certainly get the AMBA add-on happening.

Have a good weekend.

Regards,

Jacob Mulholland | UAR Coordinator

CHED Services | Information Technology

A 40 Market Street Melbourne, VIC 3000

Email: jmulholland@powercor.com.au

Upcoming Leave: None