Error during a reset operation on the 3SKey portal

Error message during a reset, or token detection issue on the Setup for Reset screen

When you are logged in with an administrator token on the 3SKey portal and you prepare a token for reset, you may get an error message if you are using an outdated version of the 3SKey software or if your token is not one of the latest model. If a previous reset operation was interrupted it's also possible that the token cannot be selected for reset on your next attempt.

Specific error messages:

Error 00842: Token Initialization failed

This error during a setup for reset operation by an administrator can result from a PIN policy configured on the token that is higher than the PIN policy currently defined on the group. As a workaround, select a password that complies with the PIN policy level 12 (twelve characters password minimum with lower and upper case letters, at least one number, and at least one special character) during the setup for reset operation. After the reset is finalized you will be able to change the token password to a password that is compliant with the current group PIN policy.

Error 00057: Please update the 3SKey software to the latest version, and ask your administrator to setup the token for reset again.

This error can show when a token was activated or reset previously using a non supported version of the 3SKey software. To resolve proceed as follows:

  • Verify with help of your system administrator that there are no pqOwner or pqModifiable values in the Windows registry, under the keys [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\SafeNet\Authentication\SAC\PQ] and [HKEY_CURRENT_USER\SOFTWARE\SafeNet\Authentication\SAC\PQ]. Delete pqOwner and pqModifiable if present.
  • Verify in the list of installed programs that you have SWIFT Token Client 4.1 or higher and Safenet Authentication Client 10.7 or higher. If that is not the case Update the 3SKey software. Then ask your administrator to setup the token for reset again.

Troubleshooting procedure:

For any other issue during a reset please follow this procedure to cleanup the token before you reset it again on the 3SKey portal. The procedure will empty the token content. The reset operation on the portal will then recreate the token certificate. Note that a same token can be reset a maximum of 5 times.


Check that you are using a recent version of the Safenet software

Right-click the icon in the notification area at the bottom right of your display, and click About.

Check that the version is 10.7 or higher.

If you have an older version you need to update the software as indicated on How to update your token software?.


Cleanup the token

Follow exactly all steps below. You must use version 10.7 or higher of the Safenet software. Ensure you have an administrator token available to reset the token after it has been cleaned up.
  1. Insert only the token that you need to reset. Make sure you remove the administrator token
  2. Open Safenet Authentication Client Tools from the main menu of Windows
  3. Click Advanced View
  4. Click Initialize Token
  5. Select « Configure all initialization settings and policies » and click Next
  6. Uncheck « Token password must be changed on first logon » and enter the password Abcd1234 in all 4 password fields, then click Next
  7. Change Must meet complexity requirements to « At least 2 types » then click Next
  8. Select « Enforce FIPS settings » if applicable and/or click Finish
  9. If you see the option « Enforce FIPS settings » then you must select it, then click Finish. If the token is of a recent model (smaller with a blue led) then you’ll get a different screen, simply click Finish. Do not modify any setting past this page.

  10. Click Ok in the warning message to start the Initialization

Reset the token again on the 3SKey portal

Plug the administrator token back in and login to the 3SKey portal. Follow the reset procedure again.

SWIFT © 2020