@LongChen,
A belated welcome to the RSA Community!
To test if your high availability tokencodes are working, first check your user(s) in the Security Console, look up the user who has an Authenticate token. Through their dashboard, look at Assigned SecurID Tokens. Before Authentication Manager downloads, the token will be prepended with MFA. As soon as Auth Manager downloads the token records for that tokencode, the number will change. That does not test the token but it does validate it.
To test the tokencodes, if you have access to the firewall, you can block off Authentication Manager availability to connect to the cloud. Just note that making this change to test will affect everyone, so schedule this change and make your users aware.
You can also look under Batch Jobs for the Authentication Tokencodes Synchronization Job that runs overnight to see what tokencodes synch and if there are any errors.
Best regards,
Erica
