Invalid tokencode failures and expired QR code alerts in RSA SecurID Authenticate app
Originally Published: 2019-10-15
Article Number
Applies To
RSA Product/Service Type: Cloud
RSA Version/Condition: Not Applicable
Issue
An end user is encountering one or both of the following problems with the RSA SecurID Authenticate app:
-
Step-up authentications using the RSA SecurID Authenticate app tokencode are failing and the User Event Monitor displays the following error for the attempts
Authenticate Tokencode authentication failed - Invalid tokencode
The above error occurs even when the user is very sure they are entering the correct code displayed on their device.
-
RSA SecurID Authenticate app device registration using a QR code fails. The app displays the following alert:
Expired QR Code. Message: Generate a new QR Code. Then scan the new code in the app .
The user is able to complete registration with a password or registration code however.
Cause
Resolution
For example, if the end user's device region is currently set to India (GMT+5:30), then the date and time in the device must be set to the current date and time in India. Clock drifts of a few minutes or more, or failure to adjust to daylight savings time changes, can cause the errors described in this article to occur. If the date and time appears to be correct, check to make sure the geographical region configured in the device is correct too.
We recommend setting mobile device times using the Auto feature in the device, if available, so that device times are automatically set accurately by the mobile network. Check with your mobile network provider to confirm if automatic clock setting is available. For devices that do not use a mobile network, RSA recommends configuring a reliable NTP server to automatically synchronize your computer's time.
Workaround
Notes
- For additional troubleshooting tips, see Troubleshooting Cloud Authentication Service User Issues .
- For instructions to set the date, time and geographical region, or to set the Auto option for time of day in your device, please refer to the vendor documentation of your device.
Related Articles
How to convert a file-based RSA SecurID software token from .sdtid format to a QR code in Authentication Manager 8.x Number of Views Failed to generate QR Code error when trying to activate software token using QR code in RSA Authentication Manager 8.x Se… Number of Views QR code not displaying in the RSA Authentication Manager Prime Self-Service Portal (SSP) Number of Views RSA SecurID Software Token 4.2.1 for macOS Downloads Number of Views RSA SecurID Software Token Converter 3.1 Release Notes Number of Views
Trending Articles
Passwordless Authentication in Windows MFA Agent for Active Directory – Quick Setup Guide RSA Authentication Manager Upgrade Process RSA Authentication Manager 8.9 Release Notes (January 2026) An example of SSO using SAML and ADFS with RSA Identity Management and Governance 6.9.x RSA Authentication Manager 8.8 Setup and Configuration Guide
Don't see what you're looking for?
