Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to get a report of all users whose tokens are in "lost status" from RSA. Is this do-able?

share|improve this question
Could you clarify which product you're referring to? There seems to be some confusion. – Scott Pack Feb 15 '10 at 0:43

If you're referring to SecurID tokens, then the RSA Authentication Manager application includes this functionality. From the Token menu, chose "List tokens..." and then in the list section choose "All lost tokens". You can generate the list to screen or to a file.

You can also do this in the web administration interface if you have that set up, by searching on token status.

share|improve this answer

I do not have any tokens marked as lost to test against, but building out the report this way should work.

From the Security Console, create a new report with the following settings:

Select Template -> "Users with Tokens"
Select Output Column -> "Users"
Select Input Parameter -> "Identity Source" = your_ID_source
Select Input Parameter -> "Lost Token" = "true"

share|improve this answer

In a Public Key Infrastructure when a key is lost or stolen then it is placed on a black list which everyone has to check to make sure that the certificate is still valid. OCSP is the protocol that is commonly used to support a Recovation List

This is how you query an OCSP server from the command-line using the OpenSSL tool chain.

openssl ocsp -index demoCA/index.txt -rsigner rcert.pem -CA demoCA/cacert.pem
     -issuer demoCA/cacert.pem -serial 1
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.