RSA Authentication Manager 8.5 Identity Router enablement did not succeed, fails to download
2 years ago
Originally Published: 2020-09-23
Article Number
000043679
Applies To
RSA Product Set: RSA SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.5.0
Platform: Linux
O/S Version: SUSE Linux 12
Issue
An attempt to download and enable an Identity Router, IDR in the AM Security Console fails at the Downloading Identity router image step, with the error "The identity router enablement did not succeed."
Failed

Performing precheck operations Completed.

Activity Details
Details
Cause
A firewall is blocking the Security Console access to the Cloud service.
Resolution
Specific URLs or IPs must be whitelisted on your organization's firewall for connectivity between RSA Authentication Manager and the RSA Cloud Authentication Service.  To enable and use an embedded identity router, the following URLs must be accessible:
  • RSA Cloud Authentication Service URL.  This will be specific to the region where your organization's RSA Cloud tenant is hosted:
    • US region:*.access.securid.com
    • ANZ region:*.access-anz.securid.com
    • EMEA region:*.access-eu.securid.com
  • Microsoft Azure URL
    • *.blob.core.windows.net
For IP addresses and additional URLs see the references below:
  1. Sections "​What You Need to Know" and "Connectivity Requirements" at  Quick Setup - Connect RSA Authentication Manager to the Cloud Authentication Service with an Embedded Identity Router - Step 1: Plan.
  2. Section "After you finish" on page Edit the Cloud Authentication Service Connection.