Unsuccessful connection to RSA SecurID Access: Authentication token was either missing or invalid
2 months ago
Originally Published: 2023-03-03
Article Number
000068124
Applies To
RSA Product Set: SecurID 
RSA Product/Service Type: RSA MFA Agent for Microsoft Windows
RSA Version/Condition: 2.1.x
Issue
Testing the connection from the MFA Agent test utility fails. The below error in the RsaMfaAgentTestAuthentication.log file can be seen.

ApiException occurred: IO.Swagger.AuthenticationClient.ApiException: Error calling Initialize: Unauthorized: Authentication token was either missing or invalid.

 
Cause
There was a regeneration of the API Access key from the Security Console. Although the Policy RSA SecurID Authentication API Key has the new value, the Registry Key is caching the old one.
Resolution
1. Login to the Windows machine hosting the MFA Agent
2. Run regedit.msc
3. Navigate to the Registry Key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\RSA\RSA Desktop\CAS Authentication Settings\Authentication Server Settings
4. Update the value manually with the correct Access key
5. From the cmd => Run gpupdate /force as an Administrator 


image.png
Workaround
N/A
Notes
N/A