Users Mobile OTP credentials expiring in CA Mobile Authenticator app

Products

• CA Risk Authentication

Issue/Introduction

CA Mobile OTP ( ArcotOTP) profile was created for 5 years when the implementation was done, users who registered the credentials that time are receiving the messages on their CA Mobile Authenticator app that the credential is going to expire. Extending the Validity end date of the credential does not have an impact on the CA Mobile Authenticator app credential validity.

Environment

CA Mobile Authenticator

Cause

Once the credential is enrolled in the Mobile device, the expiry date of the credential is synched from the data received from server. After that the app works in offline mode and it does not need the server connectivity so updating the database column to increase the validity of end date will not work in this case.

Resolution

Increase the validity end date in the ARWFARCOTOTP table. In case of the OOTB CA Mobile Authenticator Mobile app, the only way is for the user to re-enroll the Mobile OTP credential and the new validity end date will be in place. If you are using the CA Mobile Authenticator SDK in your existing application then there are ways to increase the validity of the credential on the Mobile device, please reach out to support if you need help how to do it.