RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition:  8.7 SP2 and later

There are two main Authentication Manager (AM) appliance deployment methods in Azure, and two different Getting Started Guides.

In Commercial & GovCloud Azure Environments, RSA has publicly shared Azure images of all the available AM versions so that you can search for in the Azure Portal. This is described in "Step 3: Deploy the AM Azure Image File" of the Authentication Manager Microsoft Azure Virtual Appliance Getting Started Guide for your product version that are available on the RSA Community site.

You need to log on to the Azure portal and create a resource from the Services tab in order to search for "RSA Authentication Manager" to see all versions available. If you are not on Commercial or GovCloud Azure, you will not find any RSA Authentication Manager versions. 

On all other Azure sites, many with Classified names, including any private, on-premises, or air-gapped Azure cloud, when you search for "RSA Authentication Manager" from the Services Tab - Create a resource you will not find any RSA AM versions publicly available. You may see previous versions someone else from your organization uploaded privately. 

On these Azure sites, you need to obtain a file from RSA, which is not yet available on my.rsa.com as of October 2026, with a name such as azure-fixed-size-kit-8.9.0.0.0.zip. One way to obtain this file is to open a support case to request it.

This .zip file contains an AM fixed size .vhd, a SecuridTemplate.json, a Powershell .ps1 script, a Getting Started Guide.pdf and a SHA256 checksum for the azure-fixed-size-kit-8.9.0.0.0.zip file so that you can verify the integrity of this deployment file.

In GovCloud or Commercial

1. Prepare for deployment by having your license file, your deployment plan with configuration details for IP addresses, security groups etc.
2. Meet the prerequisites for deploying the AM Azure Image File
3. Deploy the AM Azure Image File you found when creating a resource in the Azure Portal
4. Set Up a new Primary Instance or attach a new replica with Quick Setup - https://<IP_address> of the newly deployed AM image

In Private, On-premises, or Air-Gapped, (Non-GovCloud, Non-Commercial) Azure Clouds

1. Meet the Prerequisites for Deploying AM Azure Image File, which includes preparing Deployment configuration details for IP addresses, Security Groups etc...
2. Create AM Azure Image using the Fixed-Size VHD by running AzureDeployment_fixed.ps1 script that you customized with configuration details. This runs from your Windows build machine.
3. Deploy the AM Azure Image File with template you create from the securidTemplate.json in the Services Tab of the Azure Portal. Select your Subscription/ Azure account, then run Quick Setup for either a new Primary Instance or replica with - https://<IP_address> of the newly deployed AM image.

In GovCloud or Commercial, follow the instructions in the RSA Authentication Manager 8.9 Azure Virtual Appliance Getting Started Guide.

In all other Azure clouds, follow the instructions in the RSA Authentication Manager 8.9 Getting Started Fixed Sized Azure Guide to deploy the RSA_Authentication_Manager.x86_disk1_fixed.vhd for Authentication Manager 8.9 into an air-gapped Azure cloud, or a non-commercial, not-GovCloud Azure cloud.

If there is no azure-fixed-size-kit-8.9.0.0.0.zip or other version of this file visible when you login to my.rsa.com, notify your sales tep and open a support case to request a copy of this file, or the version of this file that you need for your deployment, e.g., azure-fixed-size-kit-8.8.0.0.0.zip or azure-fixed-size-kit-8.10.0.0.0.zip when that becomes available.

The fixed-size-kit versions of these files, e.g., azure-fixed-size-kit-8.9.0.0.0.zip contains all the needed files to deploy in air-gapped Azure.