Skip to main content

HOTP

The eToken PASS standalone one-time password generator can be used for authentication in any applications and services that support the RADIUS authentication protocol: VPN, Microsoft ISA, Microsoft IIS, Outlook Web Access, and others.

eToken PASS implements the One-Time Password (OTP) generation algorithm. This algorithm is based on the HMAC algorithm and the SHA-1 hash function. Two input parameters are used to calculate the OTP value — the secret key (the initial value for the generator) and the current counter value (the number of generation cycles required). The initial value is stored both in the device itself and on the server in Axidian Access. The counter in the device is incremented at every OTP generation, and on the server — at every successful OTP authentication.

Hardware OTP can be used for authentication in the following modules:

Provider ID
{AD3FBA95-AE99-4773-93A3-6530A29C7556}

Install the provider​

  1. Run the installation file located at Axidian Access <version number>/Axidian Providers/Axidian HOTP Provider/Server/<version number> and follow the steps of the installation wizard.
  2. After the installation is complete, a system restart may be required. If the installation wizard prompts you to restart the system, confirm this action.
  3. To remove or restore the product, open the Control panel menu and use the standard procedure for the supported operating systems.

Add a device​

Information

A device can be registered for one user only.

To add a device:

  1. Open the Management Console.

  2. Go to the Devices tab.

  3. Click Add or Add from file.

    Note

    You can add a device either by selecting a file with the device parameters (Add from file) or by specifying the parameters manually (Add).

Add from a file

  1. Click Add from file.

  2. Select the XML file with the device parameters and click Add.

An example of the device configuration
            <Tokens xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                <Token serial="000200071927">
                        <CaseModel>5</CaseModel>
                        <Model>109</Model>
                        <ProductionDate>11/4/2008</ProductionDate>
                        <ProductName>Aladdin OTPO v1.0</ProductName>
                    <Applications>
                        <Application ConnectorID="{a61c4073-2fc8-4170-99d1-9f5b70a2cec6}">
                        <Seed>884f20ce4b2c406e0b6199338990bb6cc3fabac403eaa7f8</Seed>
                        <MovingFactor>1</MovingFactor>
                        </Application>
                    </Applications>
                </Token>
            </Tokens>

Add manually

  1. Click Add.
  2. In the Serial number field, specify the device serial number.
  3. In the Secret key field, specify the device seed.
  4. The Comment field is an optional parameter.
  5. Click Add.

Edit a device​

To edit a device:

  1. Open the Management Console.

  2. Go to the Devices tab.

  3. Click the device serial number.

    Information

    If required, you can search using the filters at the top of the page.

  4. In the editing window, you can change the comment, block the device, or synchronize it.

  5. After you make the changes, click Save.

Delete a device​

To delete a device:

  1. Open the Management Console.

  2. Go to the Devices tab.

  3. Select the device and click Delete.

Information

If required, you can search using the filters at the top of the page.

Delete from a file

  1. To delete a device using the information from a file, click Delete from file.
  2. Select the device configuration file.
  3. Click Delete.

Synchronize a device​

To synchronize a device:

  1. Open the Management Console.
  2. Go to the Devices tab.
  3. Click the device serial number.
  4. Select Synchronize OTP.
  5. In the One-time password 1 and One-time password 2 fields, enter the passwords from the device and click Synchronize.