Unlock an Entrust Soft Token app
If an end user enters an incorrect PIN for an Entrust Soft Token in the Entrust Soft Token app too many times, that token is locked in the app. This procedure describes the administrator-managed unlock flow. The administrator uses the PIN Unlock action to generate an Unlock code, then shares it with the end user. The end user enters the Unlock code in the app and sets a new PIN for that token.
This operation unlocks the soft token PIN. It does not unlock the user account.
If User Portal self-service is enabled for your account, users can also perform PIN unlock from the User Portal. For configuration, see Configure the authenticators users can see and manage in the User Portal.
When to use this procedure
Use this procedure when
- A user's Entrust Soft Token is locked in the Entrust Soft Token app because they entered that token's PIN incorrectly too many times.
- The user can open the app and see a PIN Reset Code for the locked token.
Do not use this procedure for account sign-in failures or password reset issues. For account lockout and sign-in recovery, see Edit, delete, unlock, and disable users. For password reset, see Manage password reset.
How to unlock the Entrust Soft Token app
To unlock a user's Entrust Soft Token in the app, there are tasks that must first be completed by the administrator followed by actions required of the end user.
Administrator actions
Before you start, ask the end user for the 9-digit PIN Reset Code shown in the Entrust Soft Token app. You need this value later in this procedure.
- Click > Members > Users. The Users List page appears.
- Click the User ID name of the user you want to unlock. The User Details page appears.
- Click the Authenticators tab. The Authenticators page appears.
- Click to the right of the soft token authenticator that you want to unlock. A drop-down list appears.
- Click PIN Unlock. The PIN Unlock dialog box appears.
- Enter the 9-digit PIN Reset Code shown on the Entrust Soft Token app.
- Click Unlock. The PIN Unlock dialog box displays an Unlock code.
- Share the Unlock code with the end user.
End user actions
After the administrator shares the Unlock code, complete these steps in the Entrust Soft Token app.
- Enter the Unlock code in the Entrust Soft Token mobile app.
- Click Unlock to complete soft token PIN unlock. You are prompted to enter a new PIN.
- Enter and confirm a new PIN.
Expected result
After the end user completes the steps, the locked Entrust Soft Token is unlocked in the app and the user can use the new PIN for that token.
Troubleshooting
If unlock fails, confirm the following before retrying:
- The PIN Reset Code entered by the administrator matches the current code shown in the app.
- The Unlock code entered in the app is the latest value generated in IDaaS.
- The user entered and confirmed the same new PIN value.