Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

lexus

macrumors 68000
Original poster
Mar 26, 2006
1,569
0
Depends Greatly On The Weather
Ok this may be a little complicated,
I need to set my Mac to be able to use RSA SecurID (token with 10 digit number which changes every minute) to be able to login. I have no idea how to do it but I think it should be possible to do. It is usually used for VPN's and similar but I do not see why it cant be used to login to OS X.

Thank you in advance,
 
It's not a simple process, as SC68Cal said. The only solution I'm aware of is from CRYPTOCard, but it's expensive and may require a separate server.

MAC OS X does have built in support for using smart cards. Have a look at this article for more information.
 
RSA SecurID, if I am correct, needs to have a server at the other end of the line in order to verify your pass card.

It goes hand in hand with my experience of having Directory services, if you're not on the network with the Directory server, you're locked out of your account because you can't authenticate with the Directory.

To make a technical point short, I don't think it's possible to use the RSA SecurID as your authentication method to actually get logged into the OS. Most of the time I've seen SecurID used to log into network resources and VPNs, where a user already has preliminary access (you're logged into a computer).

It's not a stand-alone system, for sure. Lots of back-end stuff.

szark: I'm pretty sure all those other products you mention are competitors to the RSA SecurID system. I also read that same article you provided a link to and states that RSA IDs are only supported for VPN resources currently.

I wonder if Windows supports RSA SecurIDs for OS login. Hmmmmm.
 
Adding as I go along

http://www.securecomputing.net.au/review/3900,rsa-securid-for-microsoft-windows.aspx

This describes an RSA implementation, where RSA does have support to create a local failover system so that laptop users can continue using their RSA card.

OS X does not have this ability at this time. Sadly.

Either way,

lexus What type of computing environment are we discussing here? Are you just a normal user? Is this just for your own personal use? (Though, not many personal users have an RSA SecurID authentication solution sitting in their closet :-\)Are you an IT director, CIO, etc....?
 
If you have an RSA SecurID implementation already at your workplace, talk to your IT manager, they might know more than me.

At this point though, I don't think there is a RSA SecurID implementation that is the equivalent of the Windows solution. VPN only at this point, it seems on the OS X end.
 
szark: I'm pretty sure all those other products you mention are competitors to the RSA SecurID system. I also read that same article you provided a link to and states that RSA IDs are only supported for VPN resources currently.

Well, admittedly I'm not very familiar with it. One of the PDFs on the site implies that you can use RSA tokens with their product, but it may only be for VPN and not the login portion.
 
If you have an RSA SecurID implementation already at your workplace, talk to your IT manager, they might know more than me.

At this point though, I don't think there is a RSA SecurID implementation that is the equivalent of the Windows solution. VPN only at this point, it seems on the OS X end.
We do not use RSA SecurID. I wonder why they dont have a mac solution?
 
We do not use RSA SecurID.

Wait, you don't have a RSA SecurID already set up at work? Why are we discussing using a RSA SecurID for your OS X Login (which is not possible, it's only able to be used for VPN at this point) when you don't even have the system in place?

I'm just confused here.
 
"Wait, you don't have a RSA SecurID already set up at work? Why are we discussing using a RSA SecurID for your OS X Login (which is not possible, it's only able to be used for VPN at this point)..."
______________________________________

Actually, RSA SecurID Token Software can be used with more than just VPN. We use it with Citrix Access Gateway, which is a web-based client, which verifies both Domain credentials and a rolling SecurID PASSCODE. As of right now, I am only able to log in via a Windows Desktop Environment, but I am also interested in trying to get this to work on a Mac environment, although I do not believe RSA provides software for Mac.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.