The following are common questions when using RSA credentials and RSA tokens within Network Configuration Manager

Note:

The Network Configuration Manager RSA Token Server is the physical windows box on which the Network Configuration Manager RSA Token Service is installed

Question

Answer

What can I do to avoid incorrect passcode tokencode generation and lockout of RSA users?

RSA Tokens are time-bound and RSA tokencode generation and usage is time based.

The RSA Authentication Manager and the Network Configuration Manager RSA Token Server must be time synchronized at all times.

What should I do before making any changes to the Token database on the Network Configuration Manager RSA Token Server?

Follow these steps to make changes to the Network Configuration Manager Token Services.

  • Navigate to Control Panel -> Administrative Tools -> Services.

  • Right-click on the NCM_RSATokenService, and select Stop.

  • Make your changes to the Token database.

  • Right-click on the NCM_RSATokenService under Control Panel -> Administrative Tools -> Services, and select Restart.

How do I ensure consistent token usage?

The Application Server and the Device Servers must be communicating with the same Network Configuration Manager RSA Token Server to ensure consistent token usage.

How can I locate the Network Configuration Manager RSA Token Server using Network Configuration Manager?

To locate the Network Configuration Manager RSA Token Server using Network Configuration Manager, complete the following:

  • Select System Administration from the Tools menu.

  • Navigate to System Administration -> Global -> Access -> RSA Token Server.

I am having multithreading issues when I run the RSA GUI Application and the Network Configuration Manager RSA Token Service at the same time on the Network Configuration Manager RSA Token Server. How can I fix this?

It is advisable to avoid using the RSA GUI Application.

To import or delete RSA Tokens use the vcRSATokenService tool. See the Installing and Configuring the RSA Token Service on Windows Server 2003 document for more information.

How can I view my systems token usage statistics?

To view your systems token usage statistics, do the following:

  • Open a web browser.

  • Navigate to https://<VCTokenServerIPAddress>:< PortNumber>, where <VCTokenServerIPAddress> is the IP Address of your Network Configuration Manager RSA Token Server and <PortNumber> is the port number created during installation.

I received a communication error in Network Configuration Manager for the RSA Token Server. How do I fix this?

Follow these steps to correct communication errors between the RSA Token Server and Network Configuration Manager.

  • Navigate to Control Panel -> Administrative Tools -> Services on the RSA Token Server.

  • Ensure the NCM_RSATokenService is running.

  • Ensure the RSA Token Server parameters match the parameters found in the System Administration -> Global -> Access -> RSA Token Server screen in Network Configuration Manager.

I have imported tokens to the RSA Token Server and communication with the RSA Token Service is established, but no tokens are being retrieved by the RSA Token Server Client. How do I fix this?

Complete the following:

  • Navigate to Control Panel -> Administrative Tools -> Services on the RSA Token Server.

  • Ensure the NCM_RSATokenService is running under the same Windows User Account which was logged into the RSA Token Server when RSA Tokens were imported.