Accessing RSA SecurID's Security Console

Since we migrates the existing appliances to RSA SecurID Appliances 3.0, we have been accessing the Security Console via https://<ipaddress>:7004/console-ims. After logging on to the Security Console, we will be shown with the error message:

The server encountered an unexpected condition which prevented it from fulfilling the request.

The error will disappear after clicking on other tabs. The URL link will be redirected to FQDN after that (i.e. https://<FQDN>:7004/console-ims) and everything is back to normal.

This was escalated to RSA Support. We were informed that:

1. Neither IP address nor short-name is supported for Security Console’s access.

2. IP address is supported for Operations Console’s access though.

We tried accessing the Security Console via https://<FQDN>:7004/console-ims and the error message does not appear anymore.

Disable Administration Shares & Auto-Generation of 8.3 Filenames for Servers

When hardening a server, both the Administrative Shares and Auto Generation of 8.3 Filenames are usually disabled.

To disable Administrative Shares for Windows servers:

1.     Open Registry Editor (Start > Run > regedit).

2.     Navigate to

               HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters\AutoShareServer.
              
               AutoShareServer must be set as type REG_DWORD

3.     On the Edit menu, click Modify.  In the Value data box, type 0 and then click OK.

4.     Exit Registry Editor.

5.     Stop and then start the Server service by issuing the below commands at the command prompt:

               Net stop server
               Net start server

The abovementioned steps will remove the administrative shares and prevent them from being automatically created in Windows.

To disable Auto Generation of 8.3 Filenames for Windows servers:

1.     Open Registry Editor (Start > Run > regedit).

2.     Navigate to

               HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NTFSDisable8dot3NameCreation.

3.     On the Edit menu, click DWORD.  In the Value data box, type 1 and then click OK.

              
               0 - Enable 8dot3 name creation on all volumes on the system
               1 - Disable 8dot3 name creation on all volumes on the system
               2 - Set 8dot3 name creation on a per volume basis
               3 - Disable 8dot3 name creation on all volumes except the system volume

4.     Exit Registry Editor.

5.     Reboot the server.