Updating RSA SecurID Access SSL portal certificate can break Authenticate App tokencode - Authentication Manager integration
Originally Published: 2017-07-24
Article Number
Applies To
Issue
When attempting authentication, the Authentication Manager Authentication Activity Monitor shows:
RSA SecurID Access Authenticator Tokencode verification failed for user "<username>" Unexpected return code or unexpected exception occurred.
Cause
The Authenticate App<->Authentication Manager agent integration (both trusted realm for SecurID Access-only users and the Authenticate App integration for Authentication Manager users) depends on the Authentication Manager trusting the IDR root certificate. Changing the IDR root certificate will break either type of existing IDR<->Authentication Manager trust relationship.
Resolution
- If using a trusted realm for Authenticate App integration (SecurID Access-only users), delete the existing trusted realm in the Security Console and then re-run the manage-securid-access-trusts command line utility per Add an SecurID Deployment to RSA Authentication Manager as a Trusted Realm.
- If Authentication Manager users are using the Authenticate App to authenticate through SecurID Agents then load the IDR's new root certificate per step 6 of Configure RSA Authentication Manager to Handle Authenticate Tokencodes.
Notes
Related Articles
Can the Microsoft Integrated Windows Authentication (IWA) icon be hidden in the RSA SecurID Access Application Portal? Number of Views Time to Act: Migration Required from RSA Authenticate App to RSA Authenticator App Number of Views RSA SecurID Authenticate app registration fails on MIUI devices with error "Unsuccessful RSA SecurID Access Setup" Number of Views Envision: error upgrading enVision appliance : backupFiles etc/*.* FATAL ERROR: -2147024773 Number of Views RSA Via Lifecycle and Governance Appliance Updater Number of Views
Trending Articles
Download RSA SecurID Access Cloud User Event audit logs using Cloud Administration REST API CLU RSA Release Notes: Cloud Access Service and Authenticators RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device
Don't see what you're looking for?
