• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4249
  • Last Modified:

Change RSA SecurID lockout policy?

We have a SecurID appliance running Auth Manager 6.1.  It seems as though the account lockout threshold is after 3 failed login attempts.  Is there a way to increase this?  We have found that people will repeatedly key in a wrong password 2-3 times thinking they mistyped it before realizing that they're using the wrong password, at which point they're already locked out.  This is a big inconvenience for us because it requires an administrator to unlock them, and it's getting old having to get out of bed at midnight to do this.  I looked through Auth Manager but could not find a setting to adjust the lockout settings.  Hopefully someone else can offer some insight.
1 Solution
From the RSA Authentication Manager 6.1 Administrator’s Guide:

The RSA Authentication Manager system requires that some false passcode entries be
tolerated. System security demands that intruders be prevented from trying one entry
after another until a lucky guess results in a successful authentication. You can specify
in RSA Authentication Manager the number of incorrect authentication attempts to
accept before taking each of the following actions:
• Putting the token into Next Tokencode mode
• Disabling the token

To configure Agent management of incorrect passcodes on a Windows server:
1. Click Start > Programs > RSA Security > RSA Authentication Manager
Configuration Tools > RSA Authentication Manager Configuration
2. Click Agent.
3. Enter the configuration values for each Agent type.
4. Click OK.
5. Click OK.
6. Repeat these steps on all servers in the realm as this information is not replicated.
For more information, see “Agent Host Passcode Configuration” on page 242.

You can set "incorrect passcodes before next token code" and " incorrect passcodes before disabling token". The default values are 3 for next token code and 10 for disabling.
FWestonAuthor Commented:
Perfect, thanks!
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Python 3 Fundamentals

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now