How to Modify the RSA Token Prompts Displayed by NetScaler Gateway

How to Modify the RSA Token Prompts Displayed by NetScaler Gateway

book

Article ID: CTX124374

calendar_today

Updated On:

Description

This article explains how to modify the RSA token prompts in NetScaler Gateway. It is assumed that you have previously configured RSA authentication via Radius on the NetScaler Gateway.

When authentication is configured to use RSA tokens via Radius, there are occasions where additional prompts are provided to the user in order to continue. Examples of this are when the user is required to enter a new pin, or the token is in “next token” mode.

Example 1 (New Pin Mode prompt):

User-added image

Example 2 (Next Token Mode prompt):

User-added image

It might be desirable to modify the text of these prompts in order to change the language or provide more detailed prompts to the user.


Instructions

The token code prompts provided to the user are generated by the RSA server itself, and not by the NetScaler Gateway. In order to modify these prompts it is necessary to make modifications to the RSA server. No changes are required on the Netscaler Gateway.
  1. On the RSA server, open file C:\Program Files\RSA Security\RSA Radius\Service\securid.ini in a text editor.

  2. Within the file, locate the section titled “Prompts”.

  3. Modify each prompt as required. For example, to modify the “Next Token Mode” prompt, modify the following entry:
    ExtInputNextCode
    Example:
    ExtInputNextCode       = \r\nWait for token to change,\r\nthen enter the new tokencode:
    Becomes
    ExtInputNextCode       = \r\nWait for token to change,\r\nthen enter your new tokencode (do not include your PIN):

  4. After making these changes, restart the “RSA Radius Server” service.
    When authenticating using RSA tokens, the token prompts should now be modified.
    Example 3 (modified Next Token Mode prompt):

    User-added image

Note: These changes apply to all Radius based RSA authentication requests to this RSA server, not only to the requests originating from the NetScaler  Gateway.

Issue/Introduction

This article explains how to modify the RSA token prompts in Access Gateway Enterprise Edition.