SecurID^®

Hi, does anyone know if it is possible to send Authentication Manager syslogs in CEF or LEEF format? ... View more

Recently some customers have reported that their vulnerability scan report a problem with Weak Ciphers used in TLSv1.2 connections, specifically some of these ciphers can negotiate a Diffie-Helman, DH key size that is only 1024 bytes. Qualys identifies this as QID 38863 - Weak SSL/TLS Key Exchange Authentication Manager, at least since version 8.4, has Ciphers that only allow 2048 byte DH keys, including TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 So as long as these Ciphers are used there is no vulnerability. As part of RSA Engineering review and update plans, new Ciphers will be evaluated and implemented into updates, currently targeted for patch 1 on AM 8.7, which is tentatively scheduled for General Availability, GA on August 23rd, 2022. ... View more

Long story short I had to move my RSA server suddenly to a new FQDN and was unable to do the preparation via the console prior. Now when I go to the Operations Console I get "invalid request".    I do have the machine running on the new IP addresses and I am able to SSH into the machine without issue.   Version: 8.3   I'm in a bit of a jam in that I saw a few articles about changing an alias, but this is not even working with the FQDN to get to the operations console.   I've seen numerous guides but they all assume you have access to the console which I do not. ... View more

Article Number 000068086 Applies To SecurID Authentication Manager 8.1 up to 8.5 Issue Radius failed on AM 8.4 after trying to add alternate IP to radius agent, Both primary and secondary radius tabs on the console are not opening and showing the error Image description " server unknown service is running You need to accurately configure a RADIUS server before you can view or edit any RADIUS Clients or Profiles." Image description   " Connection to RADIUS server failed due to incorrect certificate."   Cause Unknown Resolution Reconfiguration of RADIUS  1- Login to the Authentication Manager desired instance server via SSH, vSphere or direct connection. 2- Navigate to /opt/rsa/am/server 3- Stop the RADIUS service with the command ./rsaserv stop radius. 4- Navigate to /opt/rsa/am/config 5- Run the command ./config.sh RadiusOCConfig.configure.   6- Navigate to /opt/rsa/am/server 7- Start the RADIUS service with the command ./rsaserv start radius. After this RADIUS status should be back online and radius authentications will be back online ... View more