Use the
BlackBerry 2FA
Token Conversion Tool

This tool is only available and required for
BlackBerry UEM
12.7. For
BlackBerry UEM
12.8 and later and
BlackBerry UEM Cloud
, the token information files can be imported directly into
UEM
without using the tool.
Use the
BlackBerry 2FA
Token Conversion Tool to convert a token information file from a .xml file in PSKC format to a .csv file that you can import into
BlackBerry UEM
. When the file conversion is successful, the generated file is automatically saved in the same folder as the tool.
For
Vasco
and
Feitian
tokens, you must use the
BlackBerry 2FA
Token Conversion Tool to convert the token information files that the token manufacturer provides to a format that
BlackBerry UEM
can read.
The
BlackBerry 2FA
Token Conversion Tool only supports token information files in the Portable Symmetric Key Container (PSKC) format. For more information about PSKC, see rfc6030.
The generated file contains token information in unencrypted form. It is highly recommended that you only run the
BlackBerry 2FA
Token Conversion Tool in a secure computer environment, and delete the generated file immediately after it is imported into
BlackBerry UEM
.
  1. Open the command line.
  2. Browse to the directory of the
    BlackBerry 2FA
    Token Conversion Tool.
  3. Run
    tokenConversionTool-
    <version>
    .jar
    with the following parameters:
    Parameter
    Description
    -h
    To display the help usage message.
    -v
    Optionally, enable verbose mode. If you enable verbose mode, the token information in the specified file is displayed in the command line.
    -f
    Optionally, specify the format that you want to convert to (‘basic’ or ‘rcdevs’). The default is ‘rcdevs.’
    -p
    If necessary, specify the token key that is required to decrypt the token information file. The password is a sequence of bytes in hexadecimal format (e.g. A12BC34D).
    filename
    Specify the file that you want to convert. The file must be in the same folder as the tool. This parameter is required.
    For example, type one of the following:
    • java -jar
      <toolName>
      .jar -f basic -p
      <password>
      ./
      <tokenFileName>
      .xml
    • java -jar tokenConversionTool-1.0.4.jar ./vasco.xml
    The output file path appears when the file is successfully generated.
Import the generated token information file to the
BlackBerry UEM
management console. For more information, see Import OTP tokens into BlackBerry UEM.