Overview

A SecurID token card is required to authenticate to the Rutadmin mainframe system. This includes various IMS applications (such as OFIS, Student Records, Admissions, and Scheduling), TSO, CA-View, and other data hosted on the mainframe.

Obtaining a SecurID Token

SecurID cards can be obtained by completing the General Access Form. A copy of the form can be obtained here. You may also request a printed copy from the ESS Access Management Office.

If you are requesting a SecurID in conjunction with a new Rutadmin account, check off “New Account” on the form. If you already have an active Rutadmin account, check off “Reverified”. Make sure that you have included the proper signature approvals. Also, if you have not already done so, you will need to accept the Online Access Agreement before a new card can be issued.

Submit the completed form to the ESS Access Management Office. The ESS Access Management Office is located at the Administrative Services Building, Room 101, on Busch Campus.

A purchase order will also need to be prepared to cover the cost of the SecurID token. All payments for the SecurID authentication service should be made through RIAS. Our supplier name is OIT Authorization SecurID. The line item is SecurID Card (New or Renewal).  This is item 281.

Activation and Usage

After successful receipt of your completed paperwork and the purchase order release, your SecurID should be available for pickup within 48 hours. You will be notified when your SecurID card is ready. For users on the New Brunswick campus, New SecurID cards are normally issued by ESS Front Desk staff in the Administrative Services Building, Room 101, on Busch Campus. For users in Newark, cards can be picked up in Hill Hall, Room 219. For Camden, cards may be picked up in the Business and Sciences Building, Room 121. A valid photo-identification issued by Rutgers or a State/Federal government agency (drivers license, passport, etc) is required for identity verification when tokens are issued.

After receiving your SecurID card, you must contact ESS Authentication Support to activate your card before using it. This must be done in person or via telephone, as there are some verification questions that need to be asked. Authentication Support can be reached by phone at (732) 445-7544.

After activation, the card can be used as per the Rutadmin signon procedures. The first three pages detail the initial setup process, and the last page describes the normal login process after a successful setup. Be sure to review all four pages!

Once activated, the SecurID card can only be used by the person to whom it is assigned. A SecurID card (that has not yet expired) can be transferred to someone else by deactivating it and reactivating it under the second person’s logonID.

Replacing Tokens

If you have forgotten your SecurID card, you will need to have a temporary one issued to you. Lost or stolen cards can be replaced for the cost of a new card. Defective cards will be replaced at no charge, provided they are still covered under warranty. Examples of defects include, but are not limited to:

• Blank/fading LCD display
• Frozen display (numbers do not change/buttons have no effect)
• Missing segments from display
• Card is showing a small “2” above the flashing diamond in the lower right hand corner of display

The warranty period lasts until 6 months before the cards’ expiration date imprinted on the back of the token (i.e. if the card is listed as having an expiration date of October 31, it is under warranty until April 30 of that year).

The cost to replace broken cards is the responsibility of the user’s department. The manufacturer deems that a card is broken and not covered under the warranty if items like pens, paper clips, fingernails, etc. are used to enter the PIN.

Cards will also be considered broken if there is evidence of physical damage (i.e. cracked LCD screen, exterior dents, etc.) Please read the statement regarding the care of your SecurID that accompanies each card.

Additional information on replacing tokens can be found here. To have a replacement card issued:

Users on the New Brunswick Campuses should contact IP&S Authentication Support at (732) 445-4638.

Users on the Camden Campus should contact OIT-Camden at (856) 225-6307.

Users on the Newark Campus should contact OIT-Newark at (908) 353-1731.

SecurID F.A.Q (Frequently Asked Questions)

Q: How does the SecurID work?

A: The SecurID authenticator token displays a unique code generated by the RSA SecurID or AES industry-standard hash algorithm in combination with the unique symmetric key contained in the token. Augmented by an internal clock, the algorithm generates a new code every 60 seconds for the programmed life of the SecurID Card. The user enters his/her PIN number via a 10-digit numeric keypad that is contained on the card. The code displayed is a hash-encrypted combination of the PIN and the current authenticator code.

To access protected resources, the user simply combines their secret PIN (something they know) with the code generated by their token (something they have). The result of this two factor identification is a unique, one-time-use code that is used to positively identify, or authenticate, them. If the code is validated by the NCPASS authentication software, the user is granted access to the protected resource. If it is not recognized, the user is denied access.

The SecurID cards utilize the industry standard AES algorithm. The Advanced Encryption Standard (AES) is a Federal Information Processing Standard (FIPS), which specifies a cryptographic algorithm for use by U.S. Government organizations (among others) to protect sensitive, unclassified information. AES has the potential to remain secure well beyond twenty years.

Q: I made a mistake while entering my PIN on the card. How do I clear/reset the card?

A: Hit the “P” button on the SecurID.

Q: The system is asking me for a “PRN number”. What is the difference between the PRN number and my PIN number?

A: The PIN number is a number that you selected for yourself at initial activation and setup of your SecurID. Think of it as a password exclusively for your SecurID card. The PRN is the number generated after you punch in your personalized PIN number into your card and hit the diamond button.

Q: What are the rules for SecurID Pin numbers?

A: The Pin Number must be 4 to 6 digits in length, all numeric, and cannot begin with zero.

Q: I’m getting the message “Password Invalid”, “Suspended for Password Violations”, etc. What do I do?

A: Contact ESS Access Management at (732) 445-7544 for assistance with all password/account issues.

Q: I keep getting the message “Invalid SecurID PRN” when I try to log in with my SecurID card. What does this mean?

A: The system is rejecting your PRN because it is not the correct number it expects. Make sure you do the following when attempting to log in:

• If you use the numeric keypad, make sure your Num Lock light is illuminated.
• If you are using the card for the first time, make sure it has already been activated for you by Authentication Support.
• Make sure the PIN number you’re punching in is the correct one.
• Make sure you have the proper PIN number in the display before hitting the diamond on the SecurID.
• Your card may be slightly “out of sync” with the mainframe. Hit the “P” button to reset the card and retry.
• Make sure your card is not expired (look on the back of the SecurID card. The expiry date is engraved on the back).

If none of these work for you, contact Authentication Support for assistance.

Q: On the “Enter PRN” screen I see this message at the bottom that says “To change PIN, enter New PIN.” What is this and do I type here?

These fields show up everytime you log in and are optional. They allow you to change your PIN number. Unless this is your first time logging in, or you actually want to change your PIN, ignore the two fields at the bottom.

Q: What are those small black bars to the left of the 6 digit number in the SecurID display?

A: The bars are a timer indicating when the SecurID’s hash algorithm will generate a new authenticator code. The display counts down from 6 bars to 0 bars, and then resets to 6 bars. Each such cycle takes 60 seconds. Generally, you will only need to worry about counting the bars during the initial setup and not during normal usage of the card. However, in general, if you find that you have little to no bars, you should wait for a full set of 6 before entering your PIN number (otherwise the PRN login entry code may not be generated correctly).