Citrix Netscaler Version 11 device is not able to process NEW PIN post migration from RSA Authentication Manager 7.1 to AM 8.1
4 years ago
Originally Published: 2016-05-26
Article Number
000050436
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: RSA Authentication Manager
RSA Version/Condition: 8.1 Service Pack 1
Platform: SUSE Enterprise Linux
O/S Version: 11 Service Pack 3
Product Description: SecurID Appliance
Issue
1.  Citrix devices using RADIUS protocol are not able to accept NEW PIN after migration from AM 7.1 to AM 8.1
2.  Users unable to SET PIN
2.  Authentication Activity monitor logs the below message under the reason column
"passcode accepted, new pin required"
3.  But the agent will not accept the new pin and Citrix Netscaler fails with error "Invalid Credentials"
4.  Authentications work fine from Citrix for users who have PIN SET from the Self service console of RSA AM 8.1

     
Resolution
1.  To Resolve the issue Restart the Citrix Netscaler 11 server.
2.  Post restart of the server, users with tokens in New Pin Mode can Set Pin from Citrix Netscaler 11
Notes
Contacting RSA Customer Support
TelephoneFor urgent issues use the telephone numbers listed here
EmailFor non-urgent issues email to support@rsa.com
Case
Management
For Case Management use RSA Online
(requires access to RSA SecurCare Online)