HelpDesk – RSA Cloud Token and VPN

Keywords – Token RSA, Token cloud, VPN token. VPN RSA, RSA VPN, PIN creation, cloud RSA

Note: Cloud Emergency tokens will not work for VPN. Please issue a Hardware Token / emergency token in this case.

Step 1: Create the PIN

• After registering the RSA Authenticate app, have the end user click “View Tokencode” (Figure 1).
• They will need to create a PIN that is at least four digits and click Submit (Figure 2).
•  A pop up will then show they have a successful PIN Creation. Click OK. (Figure 3).

(Figure 1)                                (Figure 2)                                            (Figure 3)

Step 2: Using the tokencode with AnyConnect

• The 8-digit code seen after “View Tokencode” goes in the “Password” field with Secure Client (AnyConnect)
  • This code will change every 60 seconds.
• On the first time entering an 8-digit code, AnyConnect will ask the end user to create another PIN.
  • After pin has been created, the connection will fail. Simply provide your pin again or enter the 8-digit code as stated below.
  • This PIN can be used in the “Password” field if the end user would like a green checkmark sent to their phone rather than clicking “View Tokencode”.
  • They just need to enter the PIN they created using Secure Client as the “Password” and it will send the push.

Note: No PIN needs to be used in front of any 8-digit tokencode to sign in.

• Since a PIN is necessary to view the tokencode, there is no additional security required for the 8-digit PIN to work.

CI = RSA

 Escalation Questions:

Service Catalog Values = Access and Accounts > Multi-Factor Authentication > Submit Request

Escalation Tree:

Tier 1: IS – Support – Help Desk

Tier 2: Task – Windows Admin

Tier 3: N/A