RSA SecureID

User Guide

VPN Home

What is RSA SecurID?

RSA SecurID two-factor authentication is based on something you know (a password or PIN) and something you have (an authenticator or token)—providing a much more reliable level of user authentication than reusable passwords.

To access resources protected by the RSA SecurID system, users simply combine their secret Personal Identification Number or PIN (something they alone know) with the token codes generated by their authenticators (something they have). The result is a unique, one-time-use passcode that is used to positively identify or authenticate the user. If the passcode is validated by the RSA SecurID system, the user is granted access to the protected resource. If not recognized, the user is denied access.

Services, such as VPN or SSH, that require RSA SecureID for authentication also require that you install and configure the appropriate client software on your computer to connect to the VPN or SSH service. This guide does not provide information on installing or configuring clients; rather you must visit the VPN or SSH web pages for that information.

Token Types

• Hardware Token – Is a small light weight plastic device similar to a car remote with a small numeric digital display. This token can be attached to a lanyard or keychain. With the hardware token no interaction with the user desktop is required—that is, you don't have to install or maintain any software. The RSA SecurID hardware tokens are manufactured and sealed with an integral lifetime battery. No user maintenance or battery replacement is required.
• Software Tokens – Is a small application that can be installed on a wide range of personal devices. Software tokens are available for the BlackBerry Smartphone and Apple iPhone.

Note: All RSA Tokens (hardware & software) have an expiration date. ITD will contact you with replacement instructions before your token expires.

Obtaining Tokens

1. Read the Statement on Proper Use of Strong Authentication Tokens. (pdf)
2. Apply for a RSA SecureID token by filling out the account request form or in person at the Account Management Office.
    
3. Users will receive an email stating when they can pick up their hardware token from the Account Management Office once their account request form has been processed.
   
   For those who are using the BlackBerry Smartphone or Apple iPhone RSA SecureID software token, please refer to the setup instructions for each mobile device.

One of ten national laboratories overseen and primarily funded by the Office of Science of the U.S. Department of Energy (DOE), Brookhaven National Laboratory conducts research in the physical, biomedical, and environmental sciences, as well as in energy technologies and national security. Brookhaven Lab also builds and operates major scientific facilities available to university, industry and government researchers. Brookhaven is operated and managed for DOE's Office of Science by Brookhaven Science Associates, a limited-liability company founded by the Research Foundation for the State University of New York on behalf of Stony Brook University, the largest academic user of Laboratory facilities, and Battelle, a nonprofit, applied science and technology organization.

Privacy and Security Notice  | Contact Web Services for help