Version updated: 08/02/2018 To install your token, please follow the instructions below carefully. The first 4 steps are one-time actions to install the software token. Once this is done, you only have to follow step 5 each time you want to connect to one of the NM Protected applications. 1. Remove old version of RSA SecurID Software (optional step) If you had already installed an older version of RSA SecurID software, you need to remove this software prior to installing version 5.0.2 of RSA SecurID. Removal of the software can only be done by a user with administrator rights. If you do not have the rights to install/remove software on your PC, contact your local PC administrator. To remove the RSA SecurID Software, use the standard Windows tool to Add or Remove Software: go to Control Panel and double click on Add or Remove Programs. Select RSA SecurID Software Token and click on the Remove button. To ensure that all traces of the RSA SecurID Software are gone, verify if the subfolder \RSA Security\RSA SecurID Software Token\ is removed under C:\Program Files. 2. Download & Install Token Software version 5.0.2 You need administrator rights to install the software. Select the version of the Token Software you need: For Windows 32 Bits (Windows 7, Windows 8 & Windows 10): Surf to the following URL http://www.eurocontrol.int/network-operations/nm-software-download Download Token Software Version 5.0.2-32bit (ZIP file). Unzip the Token software and start the installation by double clicking on the file RSASecurIDToken502.msi. Windows will recognize the file type as a Windows Installer File and will start up the Install Shield Wizard. o create a folder : c:\rsa Execute the following command (all on one line): MSIEXEC /QN /I RSASecurIDToken502.msi /LV C:\RSA\INSTALL.LOG SETCOPYPROTECTION=FALSE SETDATABASEDIR=C:\RSA SETSINGLEDATABASE=TRUE These options will allow using the RSA software token for multiple Windows users (for All Users instead of a Single User) using the same PCs. For Windows 64 Bits (Windows 7, Windows 8 & Windows 10): Surf to the following URL http://www.eurocontrol.int/network-operations/nm-software-download Download Token Software Version 5.0.2-64bit (ZIP file). Unzip the Token software and start the installation by double clicking on the file RSASecurIDToken502x64.msi. Windows will recognize the file type as a Windows Installer File and will start up the Install Shield Wizard. create a folder : c:\rsa Execute the following command (all on one line): MSIEXEC /QN /I RSASecurIDToken502x64.msi /LV C:\RSA\INSTALL.LOG SETCOPYPROTECTION=FALSE SETDATABASEDIR=C:\RSA SETSINGLEDATABASE=TRUE These options will allow using the RSA software token for multiple Windows users (for All Users instead of a Single User) using the same PCs. Page 1/7
By default, token seeds will be installed in c:\rsa directory. The steps to install and use your token are explained briefly here below, but in case you want more detailed information, you can download the Network Manager Connection Guide from http://www.eurocontrol.int/lists/publications/network-operations-library?type=3320&keyword 3. Installation of the Token Record Once the RSA SecurID Software is installed, you need to import your Token record. Your token record is the ZIP file attached to the e-mail you received. When you unzip the file it has the extension.sdtid. Each token record file is associated to a specific Username, therefore the complete filename is username.sdtid. If you have to install more than 1 token, it is important to install the token with the corresponding Username on the involved PC. For security reasons, the installation password which you need to install your token is not included in the e-mail sent to you. To retrieve your installation password, contact Customer technical Service desk & Operations (CSO) at the following number: 0032 2 745 19 97. If you have to install more than 1 token, ask the installation password for every token as every token has a different password. To install the token: Save the *.sdtid file in a temporary folder or on your desktop. The token record will be automatically removed from there once it is installed. Make sure the RSA SecurID Software application is not running. Double click on the *.sdtid file You will be prompted for an installation password (provided to you by calling CSO) Enter the installation password and press OK Please note that this is your token installation password and NOT your PIN code. When you have entered the correct installation password, the following window will appear. Page 2/7
Click on OK to terminate the installation procedure. For more details on how to install the token record, see chapter 6.4.3.2 of the Network Manager Connection Guide. Page 3/7
4. Create your PIN code As you have installed a new token, you need to set a PIN code before you can use it to connect to the NM Protected applications. To create your PIN code: Surf to the NM NOP Portal login page: https://www.nm.eurocontrol.int/portal/gateway/spec/index.html Fill in your UserName. Your UserName or UserID is a login name which has been assigned to you by NM. (For example: p0xxx1). The UserName is not case sensitive. Start the RSA SecurID Software Token Program via Start/Programs/RSA/RSA SecurID Token/RSA SecurID Token Press the blue arrow, without entering a PIN code The RSA SecurID Software will generate a Tokencode Copy the Tokencode which you generated above (press the 'Copy' button) and paste it in the Passcode field on the login page. Press the Sign In button on the NM Protected Applications login page. An error message "user pin has expired..." will be displayed. You can ignore this, it is normal as you did not create a PIN code yet. You are now requested to create your PIN code. This is a number you can choose yourself, but which you have to remember as you will have to use it every time you want to connect to the NM Protected Applications. It must be a number between 4 and 8 digits long and cannot start with a zero. Confirm your PIN code in the second field. If your PIN code has been successfully created, you are redirected again to the NM Protected Applications login page. You will have to use the normal login procedure (see here after) to connect to the NM Protected Application. For more details on how to create your PIN code, see chapter 6.4.5 of the Network Manager Connection Guide. Page 4/7
5. Using the RSA SecurID Software Token version 5.0 Previous chapters described the one-time actions to install the software token. This chapter describes the steps to be followed each time you want to connect to one of the NM Protected applications. To login to one of the NM Protected applications: Start the NM Protected Application you want to access: NOP Portal, NMIR & CCMS Web: open your Web Browser and go to http://www.eurocontrol.int/network-operations At the right-hand side of the screen, select one of the NM Protected Applications. CHMI: Access to the CHMI application is available from the Windows Start menu of your PC by clicking on Start/Programs/NM Applications. Start the RSA SecurID Software Token Program from the Windows Start menu of your PC by clicking on Start/Programs/RSA/RSA SecurID Token/ RSA SecurID Token Generate a Passcode: Enter your PIN code in the RSA SecurID Software Token application via the number keys on your keyboard and press the blue arrow. The RSA SecurID Software will generate a Passcode Copy the Passcode by pressing the 'Copy' button On the NM Protected Applications login page, enter your UserID, paste the Passcode in the Passcode field (key combination CTRL+V) and press the Sign in button. See chapter 9 of the Network Manager Connection Guide for more details on how to use the software token application. Page 5/7
6. Token Expiration Notification The RSA SecurID software token is programmed to expire at a fixed time. The installation of a new token is then required. This is a regular activity which is monitored by the NM technical support group. When your token is about to expire, your site contact person will be informed in due time about the need to install a new token. The notification will include all material, guidelines and support information needed to proceed with this replacement in a smooth way, without any impact to your operations. The expiration date of the software token can be checked on the RSA SecurID Software token application: Click on "Options/Manage Token/Token Information...". If the token is not replaced in due time, the end-user will receive a notification when starting up the RSA SecurID Software as of 30 days before the token expires. The end-user should then take contact with the site contact person (SPOC), who should have received a new token and the installation procedure. If a new token was recently installed and the above warning still pops up, probably the old token was not removed when the new token was installed. To delete the old token: The name of the old token is mentioned in the Token Expiration notification Using the little black arrow next to the token serialnr, select the token to be deleted Using the little red arrow next to Options, select manage token > delete token Pay attention not to delete the wrong token. Page 6/7
7. Technical Support To report any technical problem or if you have questions related to the installation or the use of the RSA Software Token, do not hesitate to contact CSO (Customer technical Service desk & Operations) - available 24 hours/day, 365 days/year: By phone at: 0032 2 745 19 97 By email at: nm.cso.help-desk@eurocontrol.int Page 7/7