Once you enable your RSA SecurID soft token, you can log into the secure NAS enclave to set up a personal identification number (PIN) and change your default NAS password.

Note: If you have a NAS-provided hard token (fob), see Enabling Your RSA SecurID Hard Token.

Before You Begin

If you do not already have an RSA SecurID token for two-factor authentication, you will receive instructions for setting up the RSA mobile app as part of your account enablement. Please follow those instructions to install the app, import your software token, and set your PIN. If you need assistance at any point, please contact the NAS Control Room at (800) 331‑8737 or (650) 604‑4444.

Steps for Logging into the Secure Enclave and Changing Your Default NAS Password

If you are a new NAS user, you must complete these steps to log into NAS systems for the first time and change your default password. (If you do not have a default NAS password, contact the NAS Control Room at (800) 331‑8737 or (650) 604‑4444.

Your local system must be configured to log in using the Secure Shell (SSH) protocol.

1. On your local system, open a command-line interface (CLI) terminal.
2. Use SSH to log into a secure front-end system (SFE), as follows:

   your_local_system% ssh sfeX.nas.nasa.gov 

   where sfeX is sfe[6-8].

   Note: If you use different usernames on your local system and NAS systems, add your NAS username before specifying the SFE. For example:

   your_local_system% ssh zsmith@sfe6.nas.nasa.gov 

3. In the RSA SecurID app on your mobile device, enter your PIN to obtain a passcode.
4. At the Enter PASSCODE prompt in the CLI terminal, enter the RSA SecurID passcode displayed in the app.
5. At the next prompt, enter your default NAS password.

6. Change your default NAS password. (See Password Creation Rules.) It may take up to 15 minutes for the new password to propagate to all systems.

   Note: If you are not prompted to update your password after logging into the SFE, you can trigger a prompt by logging into a Lou front-end system (LFE) with the command ssh lou. You will be prompted to input your default NAS password, then asked to create and confirm a new password.

You have now completed your first-time authentication to NAS systems using your NAS password and your RSA SecurID token. For information about subsequent logins, see Logging into NAS Systems.