RSA Authentication Manager 8.7 SP2 Release Notes (January 2024)

RSA Authentication Manager 8.7 SP2 delivers compelling features that make it faster and easier to take the journey to the Cloud and use modern multifactor authentication. It includes the following new features and enhancements:

• Add Authentication Manager Internal DB Users as an Identity Source in RSA Cloud Authentication Service

• Unified Licensing and Usage Dashboard

• Default RSA SecurID Authentication API

• Authentication Manager 8.7 SP2 Supports 10 Gbps on the A450 Hardware Appliance

• Upgrading RSA Authentication Manager
• Authentication Manager Kit for Air-Gapped Environment
• RSA Authentication Agent Support
• Known Issues
• End of Primary Support (EOPS)

For a complete list of product documentation, see the RSA Authentication Manager Documentation page.

 

New Features and Enhancements

Add Authentication Manager Internal DB Users as an Identity Source in RSA Cloud Authentication Service (CAS)

This new feature allows to synchronize an Authentication Manager internal database to the Cloud Authentication Service unified directory. This synchronization is one-way and preserves users’ data, including passwords and credentials. Once completed, the organizations can then offer the synchronized users more modern MFA authentication methods. For more information, see the User Synchronization section on the RSA Authentication Manager 8.7 SP2 Administrator’s Guide.

 

Unified Licensing and Usage Dashboard

With a hybrid deployment where the Authentication Manager 8.7 SP2 is connected to the Cloud Authentication Service (CAS), the new unified dashboard in CAS provides a consistent view of licenses used across Authentication Manager and CAS.

 

Default RSA SecurID Authentication API

A fresh installation of RSA Authentication Manager 8.7 SP2 enables the RSA SecurID Authentication API by default. It also configures the agent credentials, such as access ID and access key, and sets port 5555 as the default port for communication.

 

Upgrading Authentication Manager from 8.7 SP1 to 8.7 SP2

• If version 8.7 SP1 has Authentication API configured already, the 8.7 SP2 upgrade retains the existing configurations including the agent credential and port number.

• If you had configured Authentication API in version 8.7 SP1 but disabled it, the 8.7 SP2 upgrade enables the Authentication API by default and retains the existing credential and port.

• If you never configured REST authentication, the 8.7 SP2 upgrade enables the Authentication API by default and configures the agent credential and port 5555 as default. The upgrade enables the REST on 5555 port by default, but the admin can change the port as needed.

 

Authentication Manager 8.7 SP2 Supports 10 Gbps on the A450 Hardware Appliance

Starting August 2024, RSA has changed the default network ports used on the A450 appliance from the onboard 1 Gbps ports to the PCI NIC which supports network speeds upto 10Gbps. This change enables customers with 10 Gbps infrastructure to benefit from faster data transmission, enhanced reliability, and reduced latency. For those with 1Gbps infrastructure, the new PCI NIC remains compatible, supporting both 1 Gbps and 10 Gbps environments.

If you purchased the appliance before August 2024 and wish to utilize the new 10 Gbps ports, refer to RSA Authentication Manager 8.7 SP2 Setup and Configuration Guide for instructions on how to update your configuration.

 

Upgrading RSA Authentication Manager

You can apply the Authentication Manager 8.7 SP2 upgrade to only supported hardware appliance or virtual appliance that has Authentication Manager 8.7 SP1 software installed. To upgrade any versions prior to 8.7 SP1, you must first upgrade the earlier versions to 8.7 SP1 and then to 8.7 SP2. Follow the standard steps to apply an Authentication Manager update from your web browser, a Windows shared folder, an NFS share, or a DVD or CD.

Note: The hardware image of 8.7 SP2 and hardware appliance with pre-installed 8.7 SP2 image are scheduled to be released later.

The following hardware appliance models are supported for Authentication Manager 8.7 SP2.

Appliance Model	Hardware
RSA SecurID Appliance 130
	Dell PowerEdge R230
RSA SecurID Appliance 230	Dell PowerEdge R240
RSA SecurID Appliance 250	Dell PowerEdge R630
RSA SecurID Appliance 350	Dell PowerEdge R640 with H740 RAID controller
RSA SecurID Appliance 350	Dell PowerEdge R640 with H750 RAID controller
RSA SecurID A330 Appliance	Dell PowerEdge R250

 

Each virtual appliance must have at least 9.5 GB of free disk space if you are upgrading through your web browser. You must have minimum 6 GB of free disk space if you are upgrading from a Windows shared folder, an NFS share, or a DVD or CD.

Update Source	Minimum Required Disk Space
Web browser	9.5 GB
Windows shared folder	6 GB
NFS share	6 GB
DVD or CD	6 GB

 

Authentication Manager 8.7 SP2 contains the new features and enhancement from version 8.7 SP1 Patch 1 and 8.7 SP1 Patch 1 Hotfix 1. For more information, see RSA Authentication Manager 8.7 SP1 Patch 1 Readme, and Hotfix 1 Readme. The fixes and enhancement from 8.7 SP1 Patch 2 onwards will be included in future 8.7 SP2 patches if they remain applicable beyond AM 8.7 SP2.

For detailed upgrade instructions, see the RSA Authentication Manager 8.7 SP2 Setup and Configuration Guide.

 

Authentication Manager Kit for Air-Gapped Environment

If your deployment environment is air-gapped and disconnected from Cloud environments, you can download the Authentication Manage 8.7 SP2 (rsa-am-c2s-8.7.2.0.0.zip) kit from https://my.rsa.com. This image has special deployment requirements and is not commonly used. If you are unsure whether these are the right kit for your deployment, please contact Technical Support.

For procedures on how to create an air-gapped Authentication Manager Amazon Machine Image (AMI), see the RSA Authentication Manager Amazon Machine Image (AMI) Creation guide.

 

RSA Authentication Agent Support

RSA authentication agent software packages are available on the RSA Documentation & Downloads page. Authentication Manager 8.7 SP2 continues to support your authentication agents that use the UDP protocol.

REST protocol authentication agents, such as RSA Authentication Agent 2.0 or later for Microsoft AD FS, RSA Authentication Agent 8.0 or later for PAM, and RSA MFA Agent 2.0.1 or later for Microsoft Windows can use Authentication Manager 8.7 SP2 as a secure proxy server for the Cloud Authentication Service.

You may also purchase products that contain embedded RSA authentication agent software. The software is embedded in a number of products, such as remote access servers, firewalls, and web servers. For more information, go to the RSA Ready Partner website.

 

Known Issues

See RSA Authentication Manager 8.7 SP2 Known Issues.

 

Upcoming End of Primary Support Details

The following table provides the upcoming End of Primary Support (EOPS) details:

Product	Version	EOPS Date	Extended Support Level 1/ Level 2
RSA Authentication Manager	8.7 SP1	Jun 2026	Jun 2027/ Jun 2028
	8.7	May 2025	May 2026/ May 2027
	8.6	Aug 2024	Aug 2025 / Aug 2026
	8.5	Jul 2022	Jul 2023 / No
	8.4	Dec 2021	Dec 2022 / Jul 2023

 

 

 

© 1994-2024 RSA Security LLC or its affiliates. All Rights Reserved. RSA, and other trademarks are trademarks of RSA Security LLC or its affiliates ("RSA"). Other trademarks are trademarks of their respective owners.

 

Intellectual Property Notice

This software contains the intellectual property of RSA or is licensed to RSA from third parties. Use of this software and the intellectual property contained therein is expressly limited to the terms and conditions of the License Agreement under which it is provided by or on behalf of RSA.

 

Open Source License

This product may be distributed with open source code, licensed to you in accordance with the applicable open source license. If you would like a copy of any such source code, RSA or its affiliates will provide a digital copy of the source code that is required to be made available in accordance with the applicable open source license. Please direct requests in writing to RSA Security LLC, Attn: IP Legal Department - Copyrights, Burlington, MA 01803, and/or send email to RSA Legal, ip@rsa.com.

 

System Data Collection and Usage Policy

In certain circumstances, RSA collects data from customer installations of RSA products for purposes including but not limited to accurate billing of product usage and to maintain and improve RSA products. For details see "RSA’s right to collect System Data" in Product Usage Rights: https://www.rsa.com/content/dam/en/terms/units-of-measure.pdf