Unable to Import SecurID Tokens via CT-KIP URL to the Windows SecurID Authenticator 6.x

[#1]

Article Number

000068094

Applies To

RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager, SecurID Authenticator 6.x for Windows

Issue

When trying to import SecurID tokens via CT-KIP URL to the SecurID Authenticator 6.x for Windows using the legacy 'Desktop PC 4.x' Software Token Profile, the 'Submit' button in the SecurID Authenticator application is greyed out and unclickable, and the token could not be imported. 

Cause

When distributing a token via CT-KIP URL using the legacy 'Desktop PC 4.x' Software Token Profile, the generated URL is in the following format: 

https://<Your_AM_Server_FQDN>:7004/ctkip/services/CtkipService

However, the SecurID Authenticator 6.x for Windows accepts the CT-KIP URL in the following format:

securidauthenticator://ctkip?scheme=https&url=<Your_AM_Server_FQDN>:7004/ctkip/services/CtkipService

 

Resolution

1. Click here  and download 'SecurID Authenticator 6.0.1 Microsoft Windows Device Definition File'. 
2. Extract the downloaded file. 
3. Login to the Security Console, and navigate to Authentication > Software Token Profiles > Add New. 
4. Create a new name for the Software Token Profile and click on 'Import Device Definition File', then import 'Desktop-Windows-SecurID-Authenticator-swtd.xml' from the extracted file in step 2.
5. Click 'Save'. 
6. You will now notice that when distributing a token using the new Software Token Profile via CT-KIP URL, the URL will be in the correct format for SecurID Authenticator 6.x for Windows, and the SecurID token will be imported successfully.