RSA Authentication Manager (AM) 8.9 delivers features that make it faster and easier to adopt modern upgrades for today’s enterprise. It includes the following new features and enhancements:

New Features and Enhancements

• Passwordless Authentication Support
• Expanded SDK Compatibility
• Technical Upgrades

Additional Information

• Upgrading RSA Authentication Manager
• Authentication Manager Kit for Air-Gapped Environment
• Technology Stack
• RSA Agent Support
• Known Issues
• Upcoming End of Primary Support Details

For a complete list of product documentation, see the RSA Authentication Manager Documentation page.

New Features and Enhancements

Passwordless Authentication Support

RSA is gradually introducing support for passwordless authentication across its RSA MFA Agents, starting with the RSA MFA Agent for macOS in January 2026. When functioning as a secure proxy for  Cloud Access Service (CAS),  AM supports passwordless capabilities from agents that provide this functionality. Passwordless authentication allows users to sign in to their devices without entering a password—delivering a faster, simpler, and more secure authentication experience.

To determine whether a specific agent supports passwordless authentication, refer to the respective agent's installation and administration guide.

Expanded SDK Compatibility

The RSA Authentication Manager SDK for administrative functions is now qualified for use with JDK 11 and JDK 17. Customers are strongly encouraged to upgrade their deployments to JDK 17 to ensure continued support and future compatibility.
Support for Java 8 with the Admin SDK is deprecated as of Authentication Manager 8.9 and will be removed in a future release.

Technical Upgrades

This release includes core framework upgrades to improve performance, security, and maintainability:

• Dell BSAFE Crypto-J 7
• Hibernate 5
• Spring 5

Additional Information

Upgrading RSA Authentication Manager

You can apply the AM 8.9 upgrade to only supported hardware appliance or virtual appliance that has AM 8.8 software installed. To upgrade any versions prior to 8.8, you must first upgrade the earlier versions to 8.8 and then to 8.9. Follow the standard steps to apply an AM update from your web browser, a Windows shared folder, an NFS share, or a DVD or CD.

Note: The hardware image of 8.9 and hardware appliance with pre-installed 8.9 image are scheduled to be released later.

The following hardware appliance models are supported for AM 8.9.

Each virtual appliance must have at least 9.5 GB of free disk space if you are upgrading through your web browser. You must have minimum 6 GB of free disk space if you are upgrading from a Windows shared folder, an NFS share, or a DVD or CD.

AM 8.9 contains the new features and enhancement from version 8.8 Patches 1, 2, and 3. For more information, see RSA Authentication Manager 8.8 Patches and Hotfixes Readme.

For detailed upgrade instructions, see the RSA Authentication Manager 8.9 Setup and Configuration Guide.

Authentication Manager Kit for Air-Gapped Environment

If your deployment environment is air-gapped and disconnected from Cloud environments, you can download the Authentication Manage 8.9 (rsa-am-c2s-8.9.0.0.0.zip) kit from https://my.rsa.com. This image has special deployment requirements and is not commonly used. If you are unsure whether these are the right kit for your deployment, please contact Technical Support.

For procedures on how to create an air-gapped Authentication Manager Amazon Machine Image (AMI), see the RSA Authentication Manager Amazon Machine Image (AMI) Creation guide.

Technology Stack

Authentication Manager 8.9 leverages the following technologies:

• SUSE Linux Enterprise Server 15 SP4
• Oracle WebLogic Server 14.1.1, October 2025 CPU
• Java 1.8.0.471 and 11.0.29
• PostgreSQL 14.19
• Dell BSAFE Crypto-J 7.0

RSA Agents Support

The latest RSA MFA agent software packages are available on the RSA Documentation & Downloads page.

Please note that while RSA Authentication agents using the UDP may continue to function with AM 8.9, they are no longer supported. For details on the migration path, refer to the Product Version Life Cycle page.

RSA MFA agent software may be embedded in various third-party products such as remote access servers, firewalls, and web servers. To explore supported partner products, visit the RSA Ready Partner website.

Known Issues

See RSA Authentication Manager 8.9 Known Issues.

Upcoming End of Primary Support Details

The following table provides the upcoming End of Primary Support (EOPS) details:

©1994-2026 RSA Security LLC or its affiliates. All Rights Reserved. RSA, and other trademarks are trademarks of RSA Security LLC or its affiliates ("RSA"). Other trademarks are trademarks of their respective owners.
Intellectual Property Notice
This software contains the intellectual property of RSA or is licensed to RSA from third parties. Use of this software and the intellectual property contained therein is expressly limited to the terms and conditions of the License Agreement under which it is provided by or on behalf of RSA.
Open Source License
This product may be distributed with open source code, licensed to you in accordance with the applicable open source license. If you would like a copy of any such source code, RSA or its affiliates will provide a digital copy of the source code that is required to be made available in accordance with the applicable open source license. Please direct requests in writing to RSA Security LLC, Attn: IP Legal Department - Copyrights, Burlington, MA 01803, and/or send email to RSA Legal, ip@rsa.com.
System Data Collection and Usage Policy
In certain circumstances, RSA collects data from customer installations of RSA products for purposes including but not limited to accurate billing of product usage and to maintain and improve RSA products. For details see "RSA’s right to collect System Data" in Product Usage Rights: https://www.rsa.com/content/dam/en/terms/units-of-measure.pdf