Reduced Cost of Deployment and Ongoing Administration

Rapid Deployment of RSA SecurID® Hardware and Software Tokens

The RSA® Authentication Deployment Manager workflow automation system speeds the deployment of RSA SecurID® hardware and software tokens to end-users. Before the availability of RSA Authentication Deployment Manager, the tasks of identifying approved users, assigning credentials to each user and populating the RSA® Authentication Manager authentication database with user data had to be performed centrally by security administrators. The RSA Authentication Deployment Manager solution, created to automate the administrative work involved in issuing RSA SecurID hardware and software tokens, enables a fast, cost-effective rollout of the RSA SecurID solution.

User Self-Service PIN Change

Whether due to security policy or as a result of simple forgetfulness, a user may occasionally need to change his PIN. The user self-service PIN change feature allows a user to select a new PIN without requiring help desk or administrative assistance.

• If the end user remembers his PIN, he may change it by simply authenticating to the RSA Authentication Deployment Manager solution with his RSA SecurID passcode and then entering a new PIN.
• If the end user has forgotten his PIN, he may select a new one, but only after first authenticating to the RSA Authentication Deployment Manager solution by correctly answering a number of questions defined by the software administrator. Once authenticated, the user may change his PIN

The entire PIN change process can occur without administrative involvement, which may significantly reduce help desk costs and improve end-user productivity and satisfaction.

Replacement of Expiring Hardware Tokens

The RSA Authentication Deployment Manager solution also facilitates the replacement of expiring hardware tokens. Once notified that a hardware token will soon be expiring, an end user can use the expiring token to authenticate to RSA Authentication Deployment Manager and request a replacement token. The existing RSA Authentication Deployment Manager process can then be used to approve the request and distribute a new token.

Flexible, Compatible and Customizable

RSA Authentication Deployment Manager software can be customized to suit your security and business requirements. User interface screens are HTML-based, and can be enhanced with your organization's own graphics and terminology.

A powerful set of built-in application programming interfaces (API's) are provided to enable integration with existing data and processes. RSA Authentication Deployment Manager API's allow you to verify user data (e.g., prior to approving an end-user or authenticating the user for a PIN change, the user's password could be checked against an external LDAP directory) and import required data into the RSA Authentication Deployment Manager workflow (e.g., user address information).

Additionally, approved data can be exported to applications outside of the RSA Authentication Deployment Manager solution. These API's may also be used to fully automate the manager or distributor functions to further streamline your token deployment process.

Anytime, Anywhere Issuance of RSA SecurID Credentials

Scalable, available around-the-clock and simple to use, RSA Authentication Deployment Manager software is built to improve the end-users' experience while significantly reducing deployment time, deployment cost and administrative burden—all without compromising the security of your credential approval and distribution system.

RSA Authentication Deployment Manager software is available at no extra charge with RSA Authentication Manager Enterprise Edition, and is available as a separate purchase for use with RSA Authentication Manager Base Edition.