Allows RSA SecurID users to unlock their computers with only an RSA SecurID PIN or a Windows password instead of an RSA SecurID passcode.
You can also change the following settings:
• Specify the number of times users can enter incorrect PINs or Windows passwords before they are prompted for a passcode.
• Specify the number of minutes after the computer locks during which users can enter only their PINs or Windows passwords to unlock their computers.
Note: If you enable unlock with a Windows password and a Windows Account Lockout policy is also enabled which enforces fewer attempts than you specify, the Windows Account Lockout policy will take precedence.
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | SOFTWARE\Policies\RSA\RSA Desktop\Local Authentication Settings |
Value Name | EnablePinUnlock |
Value Type | REG_DWORD |
Enabled Value | 1 |
Disabled Value | 0 |
Select the unlock method you want to enable.
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | SOFTWARE\Policies\RSA\RSA Desktop\Local Authentication Settings |
Value Name | UnlockType |
Value Type | REG_DWORD |
Value | 0 |
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | SOFTWARE\Policies\RSA\RSA Desktop\Local Authentication Settings |
Value Name | UnlockType |
Value Type | REG_DWORD |
Value | 1 |
Specify the number of attempts allowed to enter an RSA SecurID PIN or Windows password.
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | SOFTWARE\Policies\RSA\RSA Desktop\Local Authentication Settings |
Value Name | PinAttempts |
Value Type | REG_DWORD |
Default Value | 3 |
Min Value | 1 |
Max Value | 10 |
Specify the time-out.
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | SOFTWARE\Policies\RSA\RSA Desktop\Local Authentication Settings |
Value Name | PinLifetime |
Value Type | REG_DWORD |
Default Value | 75 |
Min Value | 1 |
Max Value | 480 |