RSA SecurID Software Token 3.

5 for BlackBerry Smartphones Quick Start

Introduction
Welcome to RSA SecurID Software Token (the SecurID application), authentication software that transforms your BlackBerry smartphone into a SecurID authentication device. The application requires a software-based security token. A software token generates a new 6- or 8-digit random number at regular intervals, typically every 60 seconds. This number is your one-time password (OTP). You enter OTP values, along with other security information, to verify your identity when you log on to a protected resource, for example, a VPN client application. You use a new OTP every time you authenticate to a protected resource. How to Obtain Your OTP if Your Token Requires a PIN Normally, you are issued a token that requires a PIN, and you create your PIN during your first SecurID authentication. See Set a PIN. When you run the SecurID application, it detects that your token requires a PIN and displays the screen associated with your token type. Enter PIN screen. If the Enter PIN screen is displayed, you type your PIN in the Enter PIN field and click OK. The application displays a passcode, which is an OTP formed from your PIN combined with the current tokencode. Tokencode screen. If the Tokencode screen is displayed, you do not type anything into the SecurID application. Instead you type your PIN, followed immediately by the current tokencode, in the logon screen of the protected resource. This combination is your OTP. How to Obtain Your OTP if Your Token Does Not Require a PIN Your administrator may issue you a token that does not require a PIN. When you run the SecurID application, it displays the Tokencode screen. The current tokencode is your OTP.

Verify Installation Requirements

To install the SecurID application, your device must be running RIM BlackBerry OS version 4.5 or later. If your administrator instructs you to install the SecurID application using application files, see Install the Application Using Application Files for additional requirements.

Installation Requirements

You must have BlackBerry Desktop Software (BlackBerry Desktop Manager) installed on your computer. If you need to download this software, go to http://na.blackberry.com/eng/support/downloads/ Your device must be running the version of BlackBerry Device Software that your service provider has authorized. If you need to update the device software, use the instructions in the following section.
Update your BlackBerry Device Software (If Required)

Install the Application

If the SecurID application has been installed onto your device for you, see Start the Application. If your administrator instructs you to install the application from a web server, see Install the Application from a Web Server. If your administrator instructs you to install the application using installation files, see Install the Application Using Application Files.

1. Go to the following URL: http://na.blackberry.com/eng/support/downloads/ download_sites.jsp 2. Click the link to your service provider. 3. If you are redirected to your service providers web site, follow the service providers instructions. Otherwise, go to step 4. 4. Select your product from the drop-down menu, and click Next. 5. Click the Download link for the device software for your BlackBerry model, and continue following the instructions to complete the download and install the updated software.
Download RSA SecurID Installation Files

Install the Application from a Web Server 1. Do one of the following, as instructed by your administrator: In your devices BlackBerry Browser, enter http://www.rsa.com/bb350. In your devices BlackBerry Browser, enter the URL that your administrator provided.

2. Click Download. 3. If prompted to grant RSA SecurID Trusted Application status, click Yes. 4. Read the End User License Agreement. Press the Menu key, and click Accept to accept the license agreement. If your device does not have a software token, a No tokens imported screen is displayed. Contact your administrator to request a token. Install the Application Using Application Files To install the application using application files, you connect your device to a USB port on your computer and use the BlackBerry Desktop Manager Application Loader to install the application.

1. Connect your device to a USB port on your computer. 2. Do one of the following, as instructed by your administrator: Open your web browser, and go to http://www.rsa.com/bb. Complete the registration form. On the next screen, under Download, click bb350.zip, and save the file to a folder on your desktop, for example C:\Temp. From the zip file, extract only the SecurID.alx and SecurID.cod files. If your administrator e-mails the application files to your computer, copy SecurID.alx and SecurID.cod from the e-mail to a folder, such as Desktop.

RSA SecurID Software Token 3.5 for BlackBerry Smartphones Quick Start Quick Start Use the Application Loader to Perform the Installation Import a Software Token from an E-mail Import a Software Token Using the Import Token
1. With your device connected to your computer, start BlackBerry Desktop Manager, and click Application Loader. 2. Under Add/Remove Applications, click Start. 3. In the Device application selection section, click Browse. 4. Navigate to the location of the SecurID.alx file, select the file, and click Open. 5. Verify that SecurID is selected. 6. Click Next. The summary window displays the files to install. 7. Click Finish, and click Close. Attachment Option
Important: The SecurID application must already be

installed on your device. Otherwise, the Import SecurID Token option is not displayed, and you cannot import a token. Your administrator may have given you a password that you need to enter in the SecurID application to complete the token import process. Make note of the password before you begin. 1. Open the e-mail containing the token file attachment. The attachment has the extension .sdtid (for example, Token1.sdtid). 2. Scroll to and select the e-mail attachment.
Important: Do not click the attachment at the top

To import a token using the Import Token option, you must enter a URL and a token activation code provided by your administrator. Make sure that you have the URL and activation code. Your application may be configured to automatically locate the URL. If so, only the Enter Activation Code field is displayed. 1. Make sure that the radio on your device is turned on. 2. Start the SecurID application. 3. Press the Menu key, and click Import Token. 4. In the Enter Activation Code field, enter the assigned activation code.

Start the Application

1. Navigate to the folder to which the SecurID application was installed, either Downloads or Applications, depending on your device. 2. Click the RSA SecurID icon.

of the e-mail or the Open Attachment entry in the menu. 3. In the BlackBerry menu, scroll down, and click Import SecurID Token.

Import a Software Token

Before you can use the SecurID application, you must have a software token installed on your device. If a software token has been imported automatically to your device, no additional steps are required. If your token requires a PIN, see Set a PIN. If your token does not require a PIN, see Log On to a Protected Resource. If your administrator instructs you to import a token file from an e-mail attachment, see Import a Software Token from an E-Mail Attachment. If your administrator instructs you to import a token using the Import Token option, see Import a Software Token Using the Import Token Option. 4. If the token file is password protected, enter the password when prompted. 5. At the success message, click OK. 6. Delete the e-mail containing the token file attachment. 5. If the Enter URL field is displayed, enter the assigned URL, making sure to use the required case. For example, enter a URL similar to the following: https://ourco.net:7004/ctkip/services/CtkipService If the URL starts with http, delete the s so that your entry looks similar to the following: http://ourco.net:7004/ctkip/services/CtkipService The download starts.
CAUTION: Do not interrupt the download until at least two minutes have elapsed. If you still have not received your token, contact your administrator.

6. At the success message, click OK.

RSA SecurID Software Token 3.5 for BlackBerry Smartphones Quick Start
Set a PIN
Note: If you were issued a token that does not require a

3. On the Enter PIN screen, enter four zeros (0000), and click the Enter key.

7. On your device, press the Menu key, and click Re-enter PIN.

PIN, see Log On to a Protected Resource. When you start the SecurID application, the display that you see is determined by the type of token stored on your device. You will see either an Enter PIN prompt or a Tokencode field displaying a tokencode. 1. Start the SecurID application, and leave it open. 2. Do one of the following: If you see an Enter PIN prompt, see Set a PIN if SecurID Displays an Enter PIN Prompt. If you see a tokencode, see Set a PIN if SecurID Displays a Tokencode. A tokencode is displayed. 8. On the Enter PIN screen, enter the PIN that you created. A new passcode is displayed.

Set a PIN if SecurID Displays an Enter PIN Prompt 1. On your computer, open the protected resource, for example, connect to your VPN client. 2. Enter the user name that your administrator assigned you, and leave the logon screen open.

4. On your computer, enter the tokencode from your device in the Passcode field. You are prompted to create a PIN. Your PIN must contain 4 to 7 digits, and it cannot begin with a zero. 5. On your computer, enter and confirm your new PIN. You are prompted for a new passcode. 6. Wait for the tokencode to change on your device before you go to the next step.

9. On your computer, enter the passcode in the Passcode field, and click OK.

RSA SecurID Software Token 3.5 for BlackBerry Smartphones Quick Start Quick Start 6. Return to the protected resource on your computer. In 3. Scroll to the token that you want, and click to select it. Set a PIN if SecurID Displays a Tokencode
1. On your computer, open the protected resource, for example, connect to your VPN client. 2. Enter the user name that your administrator assigned you, and leave the logon screen open. the Passcode field, enter your PIN. Enter the tokencode displayed on your device to the right of the PIN. Click OK. Log On with Your SecurID Software Token 1. On your computer, open the protected resource, for example, connect to your VPN client. 2. Enter the user name that your administrator assigned you, and leave the logon screen open.

Your device displays a tokencode.

Log On To a Protected Resource

Use the following instructions to log on to a protected resource. The resource that you need to access may reside on your computer, or you may be able to access it from your device. In the following example, the resource resides on the computer. Select a Token (If Required) If you have several tokens and you need to use a token other than the one that is currently displayed on the Enter PIN or Tokencode screen, select the token that you need before you start the logon process. 1. On your device, start the SecurID application. 2. In the screen that is displayed (either Enter PIN or Tokencode), change the input focus to the token name displayed at the upper right, and click to display the token list. 3. On your device, start the SecurID application. 4. Do one of the following: If the SecurID application displays a PIN prompt, enter your PIN, and click the Enter key. The device displays a passcode. Enter the code in the Passcode field on your computer. If your token requires a PIN, and the SecurID application displays a tokencode, enter your PIN in the Passcode field on your computer, and then enter the tokencode displayed on your device to the right of your PIN. If your token does not require a PIN, enter the tokencode displayed on your device in the Passcode field on your computer.

3. On your computer, enter the tokencode from your device in the Passcode field. You are prompted to create a PIN. Your PIN must contain 4 to 8 digits, and it cannot begin with a zero. 4. On your computer, enter and confirm your new PIN. You are prompted for a new passcode. 5. Wait for the tokencode to change on your device before you go to the next step.

2010 RSA Security Inc. All rights reserved. All other goods and/or services mentioned are trademarks of their respective companies.