This article explains how to modify the RSA token prompts in NetScaler Gateway. It is assumed that you have previously configured RSA authentication via Radius on the NetScaler Gateway.
When authentication is configured to use RSA tokens via Radius, there are occasions where additional prompts are provided to the user in order to continue. Examples of this are when the user is required to enter a new pin, or the token is in “next token” mode.
Example 1 (New Pin Mode prompt):
Example 2 (Next Token Mode prompt):
It might be desirable to modify the text of these prompts in order to change the language or provide more detailed prompts to the user.
On the RSA server, open file C:\Program Files\RSA Security\RSA Radius\Service\securid.ini in a text editor.
Within the file, locate the section titled “Prompts”.
Modify each prompt as required. For example, to modify the “Next Token Mode” prompt, modify the following entry:
ExtInputNextCode
Example:
ExtInputNextCode = \r\nWait for token to change,\r\nthen enter the new tokencode:
Becomes
ExtInputNextCode = \r\nWait for token to change,\r\nthen enter your new tokencode (do not include your PIN):
After making these changes, restart the “RSA Radius Server” service.
When authenticating using RSA tokens, the token prompts should now be modified.
Example 3 (modified Next Token Mode prompt):
Note: These changes apply to all Radius based RSA authentication requests to this RSA server, not only to the requests originating from the NetScaler Gateway.