1. Setup users in Authentication Manager.

2. Import token records into RSA Authentication Manager.

3. Assign tokens to users.

4. Create software token profiles.

Refer to documentation on how to Add a Software Token Profile.  Note that you must be a super admin in order to create software token profiles.

To make things easier for admins who are assigning tokens to users, create profile names based on profile settings.  For example, a profile for a fob-style Android token with a tokencode duration of 60 seconds with a tokencode of eight digits that is sent via CTF can have a token profile name of Android 1.x 60-8-Fobstyle-CTF.  


Other examples are 

5. Install the RSA SecurID Software Token app.

​

6. During the install the user is required to read and accept the license agreement to continue.

7. On the Welcome page, the Device ID is displayed.  This value will be required during the software token distribution process:

Distribute the software token assigned to a user.

1. Logon to the Security Console and navigate to Identity > Users > Manage Existing.
2. Search for the user by changing the search criteria.  
3. When the user is found, click on the User ID and select SecurID Tokens.
4. Click on the token serial number and click Distribute from the pop up menu.

5. Select the appropriate software token profile from the list.

6. Enter the appropriate device ID captured in step 6 above.  

7. Select a password protection option, entering a password if needed.  
8. Click Save and Distribute.
9. The software token is issued.  In this case, as a CTF string.

​​

10. Use a mail client, such as Microsoft Outlook and send an email to the end user with the CTF URL.  For example, 

From: IT, Department
Sent: <date and time>
To: <end user>
Subject: Distribution of RSA SecurID Software Token

Dear <end user>

The embedded compressed token format URL in this email requires the RSA SecurID Software Token app to be installed.

Having installed the RSA SecurID Software Token app, click the compressed token format URL to import it: http://127.0.0.1/securid/ctf?ctfData=200014645550636755120451124566773404444366217705625245167172125502522514311743420

The default PIN for first time usage is ‘0000’ so please visit the Self Service Console at URL https://am81p.company.com:7004/selfservice-console to logon using the software token and set up your PIN.

Please contact the IT department should you have any technical issues.

Kind Regards,
IT Department

11. Note that some end users will be prompted to complete the import using a browser or the RSA SecurID app.  Have them select RSA SecurID and tap Always.

12. Once the token has been imported the end user has a default PIN of 0000 and needs to perform an authentication to set up a unique PIN.  This can be done through third-party products like the Cisco Any Connect client but we recommend using the RSA Self-Service console.