New Brunswick Internal Services Agency RSA Self-Service Console User Guide

New Brunswick Internal Services AgencyRSA Self-Service Console User GuideVersion: 1.0Created: November 27, 2013Modified: November 27, 2013Table of ContentsIntroduction.1Logging on to the RSA Self-Service Console.2Creating your PIN.3Step 1 – Login without PIN.3Step 2 – Set a new PIN.4Step 3 – Test your PIN.5Test your RSA Token PIN.7Setup Questions and Answers (Q&A) Authentication.7Change your PIN.10Method 1 – I know my current PIN. 10Method 2 – I do not know my current PIN but have completed my Q&A.12Method 3 – I do not know my current PIN and have not completed my Q&A. 16Common Problems with VPN Authentication. 16I forgot my PIN. 16I’m being prompted for an additional token code.17IntroductionThe RSA Self-Service Console web site https://rsa-web.gnb.ca allows: The creation of a personal PIN when a user first receives an RSA Token A user to test their RSA Token PIN A user to setup personal Questions and Answers (Q&A) A user to reset a lost or forgotten PIN by authenticating with Q&AThe initial screen looks like the following image and the language displayed is automatic based on yourweb browser language settings. English (en, en US) and French (fr, fr CA) are supported.Please note: Internet Explorer is the only web browser supported by GNB.1

Logging on to the RSA Self-Service ConsoleOpen Internet Explorer and go to https://rsa-web.gnb.caEnter your User ID and click “Ok”Enter your Passcode: Hardware Token Users – Enter your PIN Token Code (Your personal PIN followed by the 6digit number displayed on the token) and click “Log On”. Blackberry Software Token Users – Enter your Token Passcode (The 8-digit number obtainedby opening the Blackberry RSA Application, entering your personal PIN, and selecting “GetPasscode”) and click “Log On”. Internet Explorer “RSA SecurID Toolbar” Users – Enter your Token Passcode (The 8 digitnumber obtained by opening Internet Explorer, entering your personal PIN, and clicking thegreen “check” on the “RSA SecurID Toolbar”) and click “Log On”.A successful login will bring you to the “My Account” page and will show any RSA Tokens that areassigned to you.2

To close the session click “Log Off” on the top right hand corner.Creating your PINIf your Token does not have a PIN set (Your token is new or a Token Administrator has reset youraccount to New PIN mode) use this procedure:Step 1 – Login without PINOpen Internet Explorer and go to https://rsa-web.gnb.caEnter your User ID and click “Ok”3

Enter your Passcode based on your token type: Hardware Token Users – Enter only the Token Passcode (Only the 6-digit number displayedon the token) and click “Log On”. Blackberry Software Token Users – Enter your Token Passcode (The 8-digit number obtainedby opening the Blackberry RSA Application, NOT entering a PIN, and selecting “GetPasscode”) and click “Log On”. Internet Explorer “RSA SecurID Toolbar” Users – Enter your Token Passcode (The 8 digitnumber obtained by opening Internet Explorer, NOT entering a PIN, and clicking the green“check” on the “RSA SecurID Toolbar”) and click “Log On”.You will then be presented with a prompt to set a personal PIN.Step 2 – Set a new PIN4

Choose a personal PIN between 4 and 8 numbers long and enter it twice in the text boxes provided.Do not use a zero for the first number and choose something that is easy to remember. This PIN is usedwith your issued RSA token to identify and authenticate you on the GNB network. Your personal PINshould never be written down or given to another user.The “Next Tokencode” is the next token code showing after the one used in “Creating your PIN Step1”. Do not include your newly created personal PIN in the “Next Tokencode” box. If your token codehas not changed since “Creating your PIN Step 1” wait up to 1 minute for the next token code todisplay and enter it in the “Next Tokencode” box. Then press “OK”A successful login will bring you to the “My Account” page and will show any RSA Tokens that areassigned to you.Step 3 – Test your PINUnder the “My Authenticators” section find your token information and click the “test” link5

Test your token with the following information:IMPORTANT note: You cannot use a Passcode more than once. If necessary, wait until the tokendisplays new digits (They change every 60 seconds).User ID – Must match your Active Directory User ID (GNB Employees) or the account name assignedto you when your token was issued (Contractors or Custom Portal users) .Enter your Passcode based on your token type: Hardware Token Users – Enter the Token Passcode (Your PIN the 6-digit number displayedon the token – for example, if your pin is “123456” you would enter “123456XXXXXX” wherethe X’s represent what is displayed on the token) and click “Test”. Blackberry Software Token Users – Enter your Token Passcode (The 8-digit number obtainedby opening the Blackberry RSA Application, entering your PIN, and selecting “Get Passcode”)and click “Test”. Internet Explorer “RSA SecurID Toolbar” Users – Enter your Token Passcode (The 8 digitnumber obtained by opening Internet Explorer, entering your PIN, and clicking the green“check” on the “RSA SecurID Toolbar”) and click “Test”.6

Click “Ok” and you will be redirected to the “My Account page”To close the session click “Log Off” on the top right hand corner.Test your RSA Token PINTo test your RSA Token PIN, login using the “Logging on to the RSA Self-Service Console” procedurelisted above.Your RSA Token PIN is working correctly if you reach the “My Account” page and can see a list of anyRSA Tokens that are assigned to you.Setup Questions and Answers (Q&A) AuthenticationLogin to the RSA Self-Service Console using the “Logging on to the RSA Self-Service Console”procedure listed above.If you do not have personal Questions & Answers associated to your RSA Token account the systemwill display the following warning:7

Below the list of tokens next to “Security Questions” click “set up”8

From the first drop down list choose your language of preference for your Q&A. English and Frenchare supported.From the individual drop boxes 1 through 5 choose your personal security questions. Provide thecorresponding answers and then click “Submit Your Request”.Use questions and answers that are easy to remember. These will be used to identify and authenticateyou in the event you need to reset your PIN. Your personal Q&A information should never bewritten down or given to another user.Successfully registering your personal Questions & Answers results in the following message:9

Should you forget your personal PIN you go can back to the RSA Self-Service Console web page atany time and reset it by correctly answering any 3 of these 5 personal security questions.To close the session click “Log Off” on the top right hand corner.Change your PINYou can change your PIN at any time by first logging into the RSA Self-Service Console. Choose oneof the following three methods:Method 1 – I know my current PINLogin to the “RSA Self-Service Console” using the “Logging on to the RSA Self-Service Console”procedure listed above.A successful authentication will open with the “My Account” page and display a list of any RSATokens that are assigned to you.10

Click the “Change PIN” link next to your token.11

Enter your current PIN in the first text box. Then choose a new personal PIN between 4 and 8 numberslong. Enter it twice in the text boxes provided and click “Save”.Do not use a zero for the first number and choose something that is easy to remember. This PIN is usedwith your issued RSA token to identify and authenticate you on the GNB network. Your personal PINshould never be written down or given to another user.A successful login will bring you to the “My Account” page and will show any RSA Tokens that areassigned to you.This message is displayed upon successful PIN change:To close the session click “Log Off” on the top right hand corner.Method 2 – I do not know my current PIN but have completed my Q&AOpen Internet Explorer and go to https://rsa-web.gnb.caClick the “Troubleshoot SecurID token” link.12

Enter your User ID, and click “Ok”The system will randomly pick 3 of your 5 personal security questions and ask for the correspondinganswersFill in the answers and click “Continue”13

Select “I forgot my PIN” and click “Ok”Create a new personal PIN between 4 and 8 numbers long, and enter it twice in the text boxes provided.Do not use a zero for the first number and choose something that is easy to remember. This PIN is usedwith your issued RSA token to identify and authenticate you on the GNB network. Your personal PINshould never be written down or give out to another user.Then press “OK”.You will be redirected to a “Test Your Token” page.14

Test your token with the following information:IMPORTANT note: You cannot use a Passcode more than once. If necessary, wait until the tokendisplays new digits (They change every 60 seconds).User ID – Must match your Active Directory User ID (GNB Employees) or the account name assignedto you when your token was issued (Contractors or Custom Portal users).Enter your Passcode based on your token type: Hardware Token Users – Enter the Token Passcode (Your PIN the 6-digit number displayedon the token – for example, if your pin is “123456” you would enter “123456XXXXXX” wherethe X’s represent what is displayed on the token) and click “Test”. Blackberry Software Token Users – Enter your Token Passcode (The 8-digit number obtainedby opening the Blackberry RSA Application, entering your PIN, and selecting “Get Passcode”)and click “Test”. Internet Explorer “RSA SecurID Toolbar” Users – Enter your Token Passcode (The 8 digitnumber obtained by opening Internet Explorer, entering your PIN, and clicking the green“check” on the “RSA SecurID Toolbar”) and click “Test”.15

Click “Ok” and you will be redirected to the main “RSA Self-Service Console” sign in page.Close Internet Explorer to end the session.Method 3 – I do not know my current PIN and have not completed my Q&AYou will need to contact your Departmental Service Desk and request an RSA Token PIN reset.Common Problems with VPN AuthenticationI forgot my PINIf you forget your PIN and / or enter an incorrect PIN you will not be allowed to connect to yourapplication. If an incorrect PIN is entered more than 10 times the system will display an “Invalidusername or password” message above the username field as shown:16

Repeated VPN Login Failure ScreenshotIf you have previously setup personal security Questions and Answers (Q&A), you can use theprocedures listed above in this document to reset your PIN.If you have not setup personal security Questions and Answers (Q&A), please contact yourDepartmental Help Desk for further assistance.I’m being prompted for an additional token codeIf you receive the “Token Resync Required” warning, enter the next code as follows based on yourRSA token type: Hardware Token Users – Enter the next Token Code (The next 6-digit number displayed onthe token) into the “SecurID Token Code” text box, and click “Enter”. Blackberry Software Token Users – Enter the next Token Passcode that is displayed on theBlackberry, you do not need to re-enter any information just wait up to a minute for the nextnumber to be displayed, enter that number into the “SecurID Token Code” text box, and click“Enter”. Internet Explorer “RSA SecurID Toolbar” Users – Enter the next Token Passcode that isdisplayed in the Internet Explorer SecurID Toolbar, you do not need to re-enter any informationjust wait up to a minute for the next number to be displayed, enter that number into the17