// RSA Tokens

RSA Tokens (or NASA PIV Smartcards) are required for all users in order to comply with NASA’s requirement for two-factor authentication. You may choose a hardware or software token, and passcodes will vary depending upon the option you choose.

// Hardware Token

REQUESTING AN NCCS HARDWARE TOKEN

Note: Hardware Token is only available ONLY if they do not have PIV-Card and can not use/install RSA Software Token Apps.

Reply to the e-mail message that directed you to this Web-page that you will be requesting the hardware token with explanation.

HARDWARE TOKEN PASSCODE

• You will be asked to set up your Personal Identification Number (PIN) when you receive your RSA hardware token.
• PASSCODES for the hardware token are 14 characters long. The PASSCODE is a combination of your PIN, and the changing Tokencode displayed on your hardware token.
• For example: XXXXXXXX999999
• Here XXXXXXXX represents your PIN, and 999999 represents the Tokencode number that is currently displayed on your RSA token.
• The RSA Tokencode number will change in either 30 or 60 seconds.
• Note: You can only use a Tokencode successfully once. If the Tokencode becomes locked after multiple failed attempts, you will need to open a ticket with the NCCS User Services Group, or call the NASA Enterprise Service Desk to unlock your RSA token – (301) 286-3100; National Toll Free: 1(877) 677-2123.

// NCCS Software Token

NCCS software tokens can be used on either Android or iPhone smartphones.
Note: If you're a PI submitting a NAMS request for the Agency RSA SecureID Token (ID227034), please use the values provided below.
*Fund - Funded by NCCS.
*WBS - Funded by NCCS.
*Cost Center - Funded by NCCS.

REQUESTING AN NCCS SOFTWARE TOKEN

To receive an activation code URL for your token import, send an e-mail with the subject "Token Request" to support@nccs.nasa.gov with the following information:

• Your NCCS userid.
• Your Phone Type (iPhone or Android).
• Your Phone binding ID from the RSA SecurID app on your smartphone.
• An e-mail address that can be accessed through your phone.

The following instructions will help you obtain this information:

• Requires IOS 16.0 or higher with RSA SecurID Software Token app 2.X and up.
• Requires Android OS 9 or higher with RSA SecurID Software Token app 2.X and up.

1. Download the "SecurID" app from your phone app store (search for "SecurID", Cloud image).
2. Run the app.
3. Ignore the blue "Get Started" button. In the bottom right-hand corner of this screen there are three dots and the word "More"; click that. Then click on "About" to obtain the Binding ID/Device ID.
4. In the Binding ID field, tap the share icon. An e-mail will open that contains your Binding ID.
5. Enter the NCCS Support e-mail address: support@nccs.nasa.gov.
6. Send the e-mail.

SOFTWARE TOKEN PASSCODE

Users with a software token will open the Android/iOS RSA app on their smartphones and enter their PIN on the "Enter PIN" screen to obtain an 8-digit Tokencode. Make certain that on the computer you are entering ONLY the 8-digit Tokencode that is produced on your phone and not the PIN. For a software token, the PIN is only entered on the "Enter PIN" screen on your phone, not the computer.

Note: You can only use a Tokencode successfully once. If the Tokencode becomes locked after multiple failed attempts, you will need to open a ticket with the NCCS User Services Group, or call the NASA Enterprise Service Desk to unlock your RSA token – (301) 286-3100; National Toll Free: 1(877) 677-2123.