User notification that PIN or Fixed Passcode is expiring

[DanaBurton1]

I don't see anything in the Token policy that provide that kind of notification to the user, however that would be a great added feature to this software.

Is there a report or part of a report that shows the expiry date of a PIN or Fixed Passcode?

Cheers,

Dana Burton

IBM

[DanaBurton1]

Here is another question.... is there a Security reason why this feature can't be added?

[EricaChalfin · Accepted solution]

I am going to answer both of your questions in one reply.

You are correct. There is no packaged report that gives you a list of PIN expiry dates, but you can create a SQL statement to get that information. The command is:

SELECT amt.serial_number, amt.pin_modified_date, ipd.loginuid FROM rsa_rep.am_token amt JOIN rsa_rep.ims_principal_data ipd ON ipd.id = amt.principal_id;

To answer your other question, there is no security reason why we don't have that information in a report. I created an idea in the community that people can vote on. If an idea gets enough votes, PM will look at incorporating the idea into a future release. Go to https://community.securid.com/t5/securid-ideas/report-for-pin-code-expired-date/idi-p/578338.