Upgrading the Internal SecurID Authentication Manager 8.6 Certificates to SHA-256
4 years ago
Originally Published: 2021-11-24
Article Number
000044474
Applies To
RSA Product Set: RSA SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.6.0
 
Issue
The procedure for upgrading the internal SecurID Authentication Manager 8.6 certificates to SHA-256 is provided at URL https://community.rsa.com/t5/securid-authentication-manager/upgrade-internal-rsa-authentication-manager-certificates-to-sha/ta-p/630154 however when the procedure is followed an error occurs: Command failed due to an unexpected error. com.rsa.authmgr.radius.exception.RadiusSystemException: Unable to connect to RADIUS server within the given timeout.

Example:
rsaadmin@am86p:~> cd /opt/rsa/am/utils
rsaadmin@am86p:/opt/rsa/am/utils> ./rsautil manage-ssl-cert --regen-internal-ca
Please enter OC Administrator username: ocadmin
Please enter OC Administrator password: *********
Manage SSL Certificate Utility 8.6.0.0.0 (1423103)
(C) 1994-2021 RSA Security LLC or its affiliates.
All rights reserved.
Regenerating internal certificate authority and SSL
certificates...
Created backup of current keystores at:
/opt/rsa/am/server/security/JKS_BACKUP_173446763332069690
Command failed due to an unexpected error.
com.rsa.authmgr.radius.exception.RadiusSystemException: Unable to connect to RADIUS server within the given timeout
rsaadmin@am86p:/opt/rsa/am/utils>


 
Cause
The manage-ssl-cert program was trying to connect to the Steel-Belted RADIUS (SBR) server.

SecurID Authentication Manager 8.6 release notes at URL https://community.rsa.com/t5/securid-authentication-manager/rsa-securid-access-release-notes-for-rsa-authentication-manager/ta-p/640100 mention that SecurID Authentication Manager 8.6 uses FreeRADIUS as the basis for the SecurID RADIUS server, instead of Steel-Belted RADIUS (SBR).
 
Resolution
SecurID Authentication Manager 8.6 Patch 2 will address this issue.

Refer to the SecurID Product Advisories at URL https://community.rsa.com/t5/securid-access-product/tkb-p/securid-access-product-advisories for a notification on the release date of SecurID Authentication Manager 8.6 Patch 2.