Reporting on SecurID software tokens with software token lifetime extension in RSA Authentication Manager 8.x

[#1]

Article Number

000065384

Applies To

RSA Product Set: SecurID
RSA Product/Service Type: RSA Authentication Manager
RSA Version/Condition: 8.2 or later
 

Issue

RSA Authentication Manager 8.2 and later versions provide a number of reporting templates. However, there is no reporting template for reporting on Software Token Lifetime Extension.

Resolution

Where the Authentication Manager does not provide a reporting template to meet certain reporting requirements, a customer can engage the RSA Professional Services team to generate SQL statements or scripts to meet those reporting requirements.

The stle_report.sh.sh shell script attached to this article is to be used on a primary instance and will display a menu.

Example:

RSA Customer Support (Asia Pacific)

Software Token Lifetime Extension

1) Generate Software Token Lifetime Extension CSV Report
2) Display Software Token Lifetime Extension CSV Report
9) Exit

Please select an option

Installation

1. Download and copy the stle_report.sh shell script into the /tmp folder on the Authentication Manager instance. 

Where SSH has been enabled for Authentication Manager a secure FTP client (e.g. WinSCP) can be used to copy the shell script into the /tmp folder.

1. Change the permissions of stle_report.sh so it can be executed at the command line e.g. chmod 755 /tmp/stle_report.sh

Usage

1. Logon to the Authentication Manager instance with the rsaadmin account, either in an SSH session or at the local console.
2. Change the privileges of the rsaadmin account: sudo su -

  If you do not change the privileges of the rsaadmin account the following message appears:

You must be the root user to use this program; exiting...

3. Navigate to the /tmp folder using the command: cd /tmp
4. The shell script requires the Operations Console user credentials and can be executed in one of two ways.

Option 1; run the command ./stle_report.sh <Operations Console admin user name> <Operations Console admin password>

am84p:/tmp # ./stle_report.sh ocadmin password
Checking OC credentials..
OC credentials validated... continuing..

Option 2; get prompted to enter the Operations Console user credentials:

am84p:/tmp # ./stle_report.sh
Checking OC credentials....missing OC credentials!

Please enter OC Administrator username: <enter Operations Console admin user name> 
Please enter OC Administrator password: <enter Operations Console admin user password> 

OC credentials validated... continuing..

Should the Operations Console user credentials be incorrect then one of the following is seen:

am84p:/tmp # ./stle_report.sh ocadmin passwrd
Checking OC credentials..
OC credentials provided were invalid, exiting...

am84p:/tmp #

am84p:/tmp # ./stle_report.sh
Checking OC credentials....missing OC credentials!

Please enter OC Administrator username: ocadmin
Please enter OC Administrator password: ** entered OC password received **

OC credentials provided were invalid, exiting...

am84p:/tmp #

5. After the OC credentials have been validated the menu appears:

RSA Customer Support (Asia Pacific)

Software Token Lifetime Extension

1) Generate Software Token Lifetime Extension CSV Report
2) Display Software Token Lifetime Extension CSV Report
9) Exit

Please select an option

Selecting option 1 on a primary:

1

 - local hostname: am84p.csau.ap.rsa.net
 - found am84p.csau.ap.rsa.net in the Authentication Manager database as a primary.. continuing..
 - generating a file called: /tmp/STLE_report_202005221512.csv
 - done!

Press any key to continue...

Selecting option 1 on a replica:

1

 - local hostname: am84r.csau.ap.rsa.net
 - reports can only be generated on a primary. [ primary hostname : am84p.csau.ap.rsa.net ] ..returning to the menu..

Press any key to continue...

Selecting option 2 on a primary after generating a report using option 1:

2

Filename: /tmp/STLE_report_202005221512.csv

Software Token Lifetime Extension CSV Report
loginuid,name,serial_number,extend_token_sn,extension_mode,is_enabled,user_expiry_date,actual_expiry_date,old_expiry_date,next_tokencode_mode
,new_pin_mode,pin_modified_date,is_token_lost
scadmin,Internal Database,,,,,,,,,,,
jsmith,RSA Customer Support,000700001761,000008888980,1,t,2035-12-30 13:00:00,2026-07-06 00:00:00,2021-06-30 00:00:00,f,f,2020-04-21 05:02:28
.102,f
@PROXYUSER@,Internal Database,,,,,,,,,,,
mbell,RSA Customer Support,000503095211,,0,t,,2020-06-30 00:00:00,,f,f,2020-05-21 01:49:03.666,f
mbell,RSA Customer Support,MFA126333534,,0,t,,2119-10-27 00:00:00,,f,f,2020-03-27 03:34:06.019,f
trustedapp,Internal Database,,,,,,,,,,,

Press any key to continue...

Selecting option 2 on a primary where no report has been generated or on a replica:

2

No report found to display - try using option 1 to generate a report.

Press any key to continue...