SecurID Internal Database Password Algorithm
2 years ago
Originally Published: 2021-03-04
Article Number
000064992
Applies To
RSA Product Set: RSA SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x
Platform: null
Platform (Other): null
O/S Version: null
Product Name: null
Product Description: null
Issue

To know RSA SecurID password encryption at rest.

OR

Detailed information about the internal database, external identity source, or both.
 

Tasks

1) Ensure SSH access is enabled on the primary. Check this by logging on to the Operations Console and selecting Administration >
Operating System Access.
2) Open an SSH session on the Authentication Manager primary.
Login to the primary Authentication Manager server as rsaadmin and enter the operating system password.
Note that during Quick Setup another user name may have been selected. Use that user name to login.
Run the commands below to capture the com.rsa.db.dba.password, shown below.

On this server, the value is (asByoqA2vgpQwfYfET17RIWwzIqSaa) but will be different in your deployment of Authentication Manager.
 

Resolution

Password hashing algorithm is SSHA256 as shown from ims_identity_source table output below:

login as: rsaadmin
Keyboard-interactive authentication prompts from server:
| Password:
End of keyboard-interactive prompts from server
Last login: Thu Mar  4 12:15:41 2021 from 192.168.20.1
RSA Authentication Manager Installation Directory: /opt/rsa/am
rsaadmin@amprimary:~> cd /opt/rsa/am/utils
rsaadmin@amprimary:/opt/rsa/am/utils> ./rsautil manage-secrets -a get com.rsa.db.dba.password
Please enter OC Administrator username: ocadmin
Please enter OC Administrator password: *********
com.rsa.db.dba.password: asByoqA2vgpQwfYfET17RIWwzIqSaa
rsaadmin@amprimary:/opt/rsa/am/utils> cd ../pgsql/bin
rsaadmin@amprimary:/opt/rsa/am/pgsql/bin> ./psql -h localhost -p 7050 -d db -U rsa_dba
Password for user rsa_dba:
psql.bin (9.4.1)
SSL connection (protocol: TLSv1.2, cipher: AES256-GCM-SHA384, bits: 256, compression: off)
Type "help" for help.

db=# select NAME,INTERNAL_STORE,SRC_TYPE,SALT_SIZE,PWD_ALGORITHM, DESCRIPTION from ims_identity_source;
       name        | internal_store | src_type | salt_size | pwd_algorithm |      description
-------------------+----------------+----------+-----------+---------------+------------------------
 Internal Database | t              |       10 |         5 | SSHA256       | System Identity Source
 Active Directory  | f              |        0 |         5 | SSHA256       |
 AD test           | f              |        0 |         5 | SSHA256       |
 AD test_2         | f              |        0 |         5 | SSHA256       |
(4 rows)

db=#