Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry 2FA
  3. BlackBerry 2FA - Administration Guide
  4. Steps to manage One-Time Password hardware tokens
  5. Use the BlackBerry 2FA Token Conversion Tool

Use the
BlackBerry 2FA
 Token Conversion Tool

This tool is only available and required for
BlackBerry UEM
 12.7. For
BlackBerry UEM
 12.8 and later and
BlackBerry UEM Cloud
, the token information files can be imported directly into
UEM
 without using the tool.
Use the
BlackBerry 2FA
 Token Conversion Tool to convert a token information file from a .xml file in PSKC format to a .csv file that you can import into
BlackBerry UEM
. When the file conversion is successful, the generated file is automatically saved in the same folder as the tool.
For
Vasco
 and
Feitian
 tokens, you must use the
BlackBerry 2FA
 Token Conversion Tool to convert the token information files that the token manufacturer provides to a format that
BlackBerry UEM
 can read.
The
BlackBerry 2FA
 Token Conversion Tool only supports token information files in the Portable Symmetric Key Container (PSKC) format. For more information about PSKC, see rfc6030.
The generated file contains token information in unencrypted form. It is highly recommended that you only run the
BlackBerry 2FA
 Token Conversion Tool in a secure computer environment, and delete the generated file immediately after it is imported into
BlackBerry UEM
.
  1. Open the command line.
  2. Browse to the directory of the
    BlackBerry 2FA
     Token Conversion Tool.
  3. Run
    tokenConversionTool-
    <version>
    .jar
     with the following parameters:
    Parameter
    Description
    -h
    To display the help usage message.
    -v
    Optionally, enable verbose mode. If you enable verbose mode, the token information in the specified file is displayed in the command line.
    -f
    Optionally, specify the format that you want to convert to (‘basic’ or ‘rcdevs’). The default is ‘rcdevs.’
    -p
    If necessary, specify the token key that is required to decrypt the token information file. The password is a sequence of bytes in hexadecimal format (e.g. A12BC34D).
    filename
    Specify the file that you want to convert. The file must be in the same folder as the tool. This parameter is required.
    For example, type one of the following:
    • java -jar
      <toolName>
      .jar -f basic -p
      <password>
       ./
      <tokenFileName>
      .xml
    • java -jar tokenConversionTool-1.0.4.jar ./vasco.xml
    The output file path appears when the file is successfully generated.
Import the generated token information file to the
BlackBerry UEM
 management console. For more information, see Import OTP tokens into BlackBerry UEM.