Unlock with RSA SecurID PIN or Windows Password

Allows RSA SecurID users to unlock their computers with only an RSA SecurID PIN or a Windows password instead of an RSA SecurID passcode.

You can also change the following settings:

• Specify the number of times users can enter incorrect PINs or Windows passwords before they are prompted for a passcode.

• Specify the number of minutes after the computer locks during which users can enter only their PINs or Windows passwords to unlock their computers.

Note: If you enable unlock with a Windows password and a Windows Account Lockout policy is also enabled which enforces fewer attempts than you specify, the Windows Account Lockout policy will take precedence.

Supported on: Supported on Windows 7 or later.
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\RSA\RSA Desktop\Local Authentication Settings
Value NameEnablePinUnlock
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

Select the unlock method you want to enable.

Unlock computer with:


  1. SecurID PIN
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\RSA\RSA Desktop\Local Authentication Settings
    Value NameUnlockType
    Value TypeREG_DWORD
    Value0
  2. Windows password
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\RSA\RSA Desktop\Local Authentication Settings
    Value NameUnlockType
    Value TypeREG_DWORD
    Value1

Specify the number of attempts allowed to enter an RSA SecurID PIN or Windows password.

Attempts:

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\RSA\RSA Desktop\Local Authentication Settings
Value NamePinAttempts
Value TypeREG_DWORD
Default Value3
Min Value1
Max Value10

Specify the time-out.

Minutes:

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\RSA\RSA Desktop\Local Authentication Settings
Value NamePinLifetime
Value TypeREG_DWORD
Default Value75
Min Value1
Max Value480

rsa_authentication_agent.admx