
RSA SecurID Software Token 4.1 Administrator’s Guide
84 A: Customizing the Application
DisableSetDevicePassword DWORD 0x00000000
(default)
0x00000001
Prevents users from setting a device
password on tokens stored on the local hard
drive. Removes the Change Device
Password option from the Token Storage
Devices screen.
OnlyOneToken DWORD 0x00000000
(default)
0x00000001
Prevents users from having more than one
token.
TokenExpirationNotification DWORD 0x0000001e
(default)
Maximum of
0x0000003c (60)
or 0x000000000
Changes the number of days before the
application displays a notification informing
the user that a token is nearing its expiration
date. If you do not set this policy, the
notification is displayed 30 days before the
token expires.
If used with TokenRenewalURL, adds a link
in the notification to a URL where the user
can request a replacement token.
TokenRenewalURL REG_SZ URL link. Default
is empty string.
Used with TokenExpirationNotification.
Displays a URL link in the Token Expiration
Notification dialog box. For example, this
could be the URL of the RSA Credential
Manager portal where the user can request a
replacement token.
ValidDevices REG_MU
LTI_SZ
Comma-separated
string list of valid
device GUIDs.
Default is empty
string.
Specifies a whitelist of devices to which
tokens can be imported.
VpnMode DWORD 0x00000000
0x00000001
(default)
Sets the VPN mode to ensure that the Cisco
VPN Client can function properly on
Windows XP when users log on to the VPN
client application with tokens stored on a
TPM or biometric device. Must be set to 0
(disabled) if you use Cisco VPN client.
Registry Location: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\RSA\Software Token
Name Type Values Description
Kommentare zu diesen Handbüchern