Steps

1. From the Security Console select Identity > Users > Manage Existing. 
   1. Using the Identity Source filter on the left select either the internal database or to an external identity source and search for User1.
   2. When the search result is displayed, expand the content next to the user name by clicking the context arrow next to User1 and selecting SecurID Tokens. 

​

3. The page displays the token assigned to User1, which should be token 000xxxxxxxx1.

4. Expand the content by clicking the context arrow next to the serial number and selecting Edit. 
5. The token serial number is listed under Token Basics. Copy the serial number of the token. 

2. Navigate to Authentication > SecurID Tokens > Manage Existing. 
   1. Use the Serial Number filter and paste the token serial number copied above into the search field. then click Search. 
   2. Place a check in the box next to token 000xxxxxxxx1. 
   3. Change the menu option above the Serial Number and Token Type headings to Replace SecurID Tokens and click Go. 

4. From the page of unassigned tokens, choose one of the options by selecting the corresponding checkbox. Going by the requirement made above, it must be Token-n (in this screen shots below the token is 000xxxxxxxx2). Click Next. 

 

5. At this stage, User1 is assigned 000xxxxxxxx2 as a replacement for 000xxxxxxxx1. 
6. On the net page, chose the option to either: 

• To require a new PIN be created, click the option to require assigned user to set up a new SecurID PIN for his or her replacement token. 
• To retain the user's current PIN, do nothing.   

7. Click Save and Finish.​

​

8. To confirm the token is assigned, 

Token 2 will replace Token 1 after Token 2 is distributed by the RSA admin. Once distributed, the end user will no longer be able to use Token1 to authenticate.