RSA SecurID Software Token
About RSA SecurID Software Token
Email Your Device ID
Import a Software Token—E-mail Link
Import a Software Token—Import Token Screen
Set a PIN—Enter PIN Screen
Set a PIN—Tokencode Screen
Authenticate with a PIN-enabled Token
Authenticate with a PINless Token
Respond to the Next Tokencode Prompt
View Token Information
Copy Code Option
RSA SecurID Software Token 1.2 for Android FAQ
Product Documentation

This app, when provided with a software token, generates one-time passwords (OTPs) that you can use to log on securely to your VPN client application and other protected resources.

Before you can use the RSA SecurID app, you must:

• Import a software token
• Set a SecurID PIN (if instructed by your IT or Help Desk administrator)

Return to top

Before issuing you a token, your IT administrator may need to know your Device ID.

To find your device ID in the RSA SecurID app, touch Menu > About.

To send your device ID to your IT administrator using your device's Mail app:

1. On the About screen, touch Menu > Email.
2. Send the e-mail to your IT or Help Desk administrator.

Return to top

Your IT administrator issues you a software token and sends it to your device's Mail app.

1. Open the e-mail, and touch the link in the e-mail message. The link contains token data.
2. If your administrator provided you with a token activation code or token password, enter this information, and touch OK. If a progress indicator is displayed, wait for the import to finish. Do not cancel the import.
3. After you have imported the token, delete the e-mail containing the token data.

Return to top

If you cannot import your token by touching a link in an e-mail sent by your IT or Help Desk administrator, you must enter the token data in the Import Token screen.

1. Open the e-mail.
2. Use a long press to open the device’s Copy function, and touch Copy.
3. Copy the token data from the e-mail. Make sure that you do not omit characters or include extra spaces or characters.
4. Touch the RSA SecurID icon to open the app.
5. Touch Menu > Import Token.
6. Touch Menu > Paste to paste the link into the Enter Token Data field.
7. Touch Import.
8. If your administrator provided you with a token activation code or token password, enter this information, and touch OK. If a progress indicator is displayed, wait for the import to finish. Do not cancel the import.
9. After you have imported the token, delete the e-mail containing the token data.

Return to top

Use this procedure to set your PIN if your device displays an Enter PIN screen when you open RSA SecurID. The following example uses a VPN client application running on your computer.

1. On your computer, connect to your VPN client application. Enter your user name, and leave the logon screen open.
2. On your device, in the Enter PIN screen, enter four zeros (0000), and touch the Enter button, or swipe left.
3. Read the tokencode from your device.
4. On your computer, enter the tokencode in the Passcode field, and click OK. You are prompted to create a PIN. Your PIN must consist of 4 to 8 numbers. It cannot begin with a zero.
5. On your computer, enter and confirm your PIN. Memorize your PIN. You are prompted for a passcode.
6. On your device, wait for the tokencode to change.
7. On your device, swipe right, or press the Back button, to return to the Enter PIN screen.
8. Enter the PIN that you created, and touch the Enter button, or swipe left.
9. Read the passcode from your device.
10. On your computer, enter the passcode in the Passcode field, and click OK.

Note: The Passcode screen displays the seconds remaining before the passcode changes. If the passcode changes before you can submit it, enter the next passcode.

Return to top

Use this procedure to set your PIN if your device displays a Tokencode screen when you open RSA SecurID. The following example uses a VPN client application running on your computer.

1. On your computer, connect to your VPN client application. Enter your user name, and leave the logon screen open.
2. On your computer, enter the tokencode displayed on your device in the Passcode field, and click OK. You are prompted to create a PIN. Your PIN must consist of 4 to 8 digits, or your administrator may instruct you to use a combination of 4 to 8 digits and letters.
3. On your computer, enter and confirm your new PIN. Memorize your PIN. You are prompted for a passcode.
4. Wait for the tokencode to change on your device.
5. Return to your VPN client. In the Passcode field, enter your PIN. Enter the tokencode displayed on your device to the right of the PIN. Click OK.

Note: The Tokencode screen displays the seconds remaining before the tokencode changes. If the tokencode changes before you can submit it, enter the next tokencode.

Return to top

Authentication is an electronic form of identity verification. With RSA SecurID, you authenticate with a one-time password. With a PIN-enabled token, your one-time password is a number (passcode) generated by your software token.  

Use the following procedure to authenticate to a VPN client application on your computer with a token that requires a SecurID PIN.

1. On your computer, connect to your VPN client application, and enter your user name.
2. In the SecurID app on your device, do one of the following:
   • If the app displays a PIN prompt, enter your PIN, and touch the Enter button, or swipe left. Your device displays a passcode. Enter the passcode in the VPN client application.
   • If the app displays a tokencode, enter your PIN in the VPN client application, and then enter the tokencode to the right of your PIN.
3. Click OK.

   Note: The Passcode or Tokencode screen displays the seconds remaining before the code changes. If the code changes before you can submit it, enter the next code.

Return to top

Authentication is an electronic form of identity verification. With RSA SecurID, you authenticate with a one-time password. With a PINless token, your one-time password is a number (tokencode) generated by your software token.

Use the following procedure to authenticate to a VPN client application on your computer with a PINless token.

1. On your computer, connect to your VPN client application. Enter your user name, and leave the logon screen open.
2. In the SecurID app on your device, view the tokencode.
3. In your VPN client application, in the Passcode field, enter the tokencode.
4. Click OK.

   Note: The Tokencode screen displays the seconds remaining before the code changes. If the tokencode changes before you can submit it, enter the next tokencode.

Return to top

If you are prompted to enter the next tokencode, do one of the following:

• From the Tokencode screen, wait for the tokencode to change, and then enter the next tokencode in the protected resource.
• From the Passcode screen, wait for the passcode to change, and then enter the next passcode in the protected resource.
• From the Enter PIN screen, enter your PIN, and touch the Enter button, or swipe left. Enter the next passcode in the protected resource.

  Note: If you are not granted access after correctly entering the next tokencode or passcode, contact your IT or Help Desk administrator.

Return to top

To view information about the RSA SecurID app and your token, touch Menu > About. The About screen displays the following information:

• Application Version. The version of the RSA SecurID app.
• Device ID. The number that uniquely identifies your Android device.
• Token Serial Number. The serial number of your software token.
• Token Expiration Date. The date on which your software token expires.
• GMT. The current time in Greenwich Mean Time.

Return to top

To authenticate to a protected resource that resides on your device, you can use the Copy Code option to copy the tokencode or passcode, and then use the Android Paste function to paste the code into the resource.

To access the Copy Code option, from the Tokencode or Passcode screen, touch Menu > Copy Code.

Return to top

Do I need a Wi-Fi connection to use the app?
No, but you need to turn on Wi-Fi for 3G/4G devices when you first launch the app. After the first launch, the app does not need Wi-Fi, and you can turn it off.

I’m traveling internationally with my Android world phone, and my app no longer works. What do I do?
If you change networks during travel with an Android world phone, the first time you are in that specific new geographic location, you will need to turn Wi-Fi on prior to launching the application.

Why can't I launch the app in Airplane mode?
On HTC devices and certain other devices, you must turn Airplane mode off and reboot your device before you launch the app.

Why can’t I get the app to download or run on my device?
If you can't download the app, Google Play may be down. Try again later. If you can't get the app to run on your device, your device or operating system may not be supported. For more information on system requirements and qualified devices, visit http://www.emc.com/security/rsa-securid/rsa-securid-software-authenticators/android.htm.

What permissions does the app request during installation?
For security purposes, such as obtaining the device's identity, the app requests permissions for full Internet access, to read phone state and identity, and to view the device's network state and Wi-Fi state. The app does not collect any personal data. You must grant the app the requested permissions for successful installation of the app and a token.

I am running Android apps on my BlackBerry. Can I install RSA SecurID Software Token 1.2 for Android?
No. RSA does not offer RSA SecurID Software Token 1.2 for Android on BlackBerry devices.

How do I get a token?
After you install your app, you must install a token so that you can get one-time passwords. Your IT administrator will issue you a token with instructions on how to install it.

Can I transfer my token from my old Android device to my new Android device?
This is not supported. Additionally, if you reinstall the app, your IT administrator must issue you a new token.

Why won’t my token install from an email file attachment?
The app does not support installing a token as a file from an email this way. Your IT administrator must reissue your token as a hyperlink. Touch the Help (?) icon in the app for instructions on installing a token.

The URL link for installing my token doesn't work. What do I do?
The URL link should start with http://127.0.0.1/securid/. If the link does not start with this address, contact your IT administrator. If the link starts with this address, try to copy and paste the link into the Import Token screen on the app. Contact your IT administrator as necessary.

How do I get the password (or activation code) for installing my token?
When IT administrators issue tokens that are password-protected or require a one-time activation code, they must also communicate the necessary information for successful installation. Check your email and voicemail for any missed communications, and follow up as necessary.

How do I authenticate with my token?
Touch the Help (?) icon in the app to get the instructions or ask your IT administrator for a copy of the Quick Start(PDF).

Return to top

Release Notes, Administrator's Guide, and Quick Start Guide
These documents are in the ZIP package android120_doc.zip. The package can be downloaded from http://www.emc.com/security/rsa-securid/rsa-securid-software-authenticators/android.htm.

Help
Help is accessed from the app by touching the Help (?) icon.

Copyright © 2012 EMC Corporation. All Rights Reserved.