Hi...
we have a high number of tokens expiring and issued replacement CTKIP emails out to people (These are all desktop tokens, no mobile)
The expiration date on the activation codes were set to 7 days initially. is there a way to increase the activation days and have it retroactively extend that activation time on the outstanding expired tokens....
We are trying to avoid all the people who still have to activate their tokens having to have a whole new activation email sent to them.
Thanks
Hi George,
I have changed the location of this question to SecurID Suite to ensure that the right people see it and can answer your question.
If you don't get an answer in the next 24 hours I would recommend raising a case with RSA Customer Support for technical assistance.
You can do this by going to My RSA > My Products and clicking create case against your Authentication Manager Licence Serial Number.
Regards
Paul Thornton
RSA Social Engagement Manager
My apologies.
I just tested this thrice.
You will need to regenerate ctkip credentials with new activation codes.
The database locks in the date at the time of token generation.
This does not work as I wrote earlier:-->You can bump it out and as long as the ctkip url was never used it will extend them. <--wrong answer
a) I set ctkip expire to 1 day
b) I generated three new software token ctkips
c) I tested import of one, successful.
d) I set system time 3 days ahead (Feb 6th)
e) I attempted the second ctkip, failed due to expired activation code
f) I set system settings and bumped ctkip activation code expire time to never expires.
g) Tried token two, failed for same reason ctkip activation code expired.
h) I tried the third token that has never been attempted, failed due to expired activation code.
Thanks for the update...
So do you know what the expected behavior is in the HDAP portal?
Will we no longer see a pending activation token along with the expired one?
It sounds like it will only show an expired token after the activation code expires.
Another critical question for us right now...
So many of our users have gotten their activation emails during the week... have gone through the process of activating their tokens, but HAVE NOT connected to our VPN or validated their token work by doing a TEST TOKEN on the Self service page.
Once they have gone through the process are they officially activated?? many times we see in HDAP that if they have not connected to the VPN as a last step... They have a token still in Pending Activation or Pending Replacement status.
We are trying to figure out who and who will not need a new activation email sent out.
My apologies.
I just tested this thrice.
You will need to regenerate ctkip credentials with new activation codes.
The database locks in the date at the time of token generation.
This does not work as I wrote earlier:-->You can bump it out and as long as the ctkip url was never used it will extend them. <--wrong answer
a) I set ctkip expire to 1 day
b) I generated three new software token ctkips
c) I tested import of one, successful.
d) I set system time 3 days ahead (Feb 6th)
e) I attempted the second ctkip, failed due to expired activation code
f) I set system settings and bumped ctkip activation code expire time to never expires.
g) Tried token two, failed for same reason ctkip activation code expired.
h) I tried the third token that has never been attempted, failed due to expired activation code.