Page History

About the Indeed AM HOTP Provider component

The autonomous one-time password generator eToken PASS can be used for authentication in any applications and services that support RADIUS protocol – VPN, Microsoft ISA, Microsoft IIS, Outlook Web Access etc. eToken PASS has an algorithm of one-time password generation (One-Time Password – OTP) implemented. This algorithm is based on HMAC and SHA-1 hash function. The OTP value calculation uses two input parameters: private key (initial value for the generator) and current value of the counter (the number of generation cycles required).

Initial value is stored both in the device itself, and on the server in Indeed system. Device counter is incremented with every OTP generation, and server counter increments with every successful authentication with OTP.

Provider installation

1. Install the Indeed HOTP Provider by running

1. IndeedAM.AuthProviders.HOTP-x64.msi installer.
2. After the installation is complete, system restart might be necessary. If the installation wizard prompts to restart the system - confirm this action.
3. The product removal/ restoring is carried out using the standard procedure for the supported operating systems, via Control panel menu.

Device adding

To add a device, proceed as follows:

1. Open the

1. Admin Console management console.
2. Switch to

1. “Devices” tab.
2. Click "Add device".Image Added

1. Adding a device from file.
   1. Click

1. 1. “Select file” at the

1. 1. “From file” tab.

   2. Select an XML file with device parameters.

      Code Block
      title Example
      <Tokens xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <Token serial="000200071927"> <CaseModel>5</CaseModel> <Model>109</Model> <ProductionDate>11/4/2008</ProductionDate> <ProductName>Aladdin OTPO v1.0</ProductName> <Applications> <Application ConnectorID="{a61c4073-2fc8-4170-99d1-9f5b70a2cec6}"> <Seed>884f20ce4b2c406e0b6199338990bb6cc3fabac403eaa7f8</Seed> <MovingFactor>1</MovingFactor> </Application> </Applications> </Token> </Tokens>

      
      

   3. Click "Add".Image Added
2. Adding a device manually.

1. 1. Select "

1. 1. Manual” tab.
   2. Specify the device serial number in the

1. 1. “Serial number” field.
   2. Specify the private key generated by the device in the

1. 1. “Private key” field.
   2. The

1. 1. “Comment” field is optional. Click

1. 1. “Add”. Image Added

Modifying a device.

To edit a device, proceed as follows:

1. Open the

1. Admin Console management console.
2. Switch to

1. “Devices” tab.
2. Select "Hardware

1. OTP” in “Authentication provider” field. Specify the device serial number (if available) in the

1. “Serial number” field and perform searching for the device.Image Added
2. Select the found device and click edit icon.Image Added
3. In the edit window, you can change the device serial number, its comment or deactivate the device. To save the changes made, click Save. Image Added

Device removal.

To remove a device, proceed as follows:

1. Open the

1. Admin Console management console.
2. Switch to

1. “Devices” tab.
2. Select "Hardware

1. OTP” in “Authentication provider” field. Specify the device serial number (if available) in the

1. “Serial number” field and perform searching for the device.Image Added
2. Select the found device and click

1. “Delete devices”.Image Added
2. Confirm removal in the popup window that appears.Image Added

Device synchronization.

To synchronize a device, proceed as follows: 

1. Open the

1. Admin Console management console.
2. Open the user card with registered device.
3. Click

1. “Device settings” and select

1. “Sync” item.Image Added
2. Specify the one-time passwords from the device in the

1. “One-time password

1. 1” and

1. “One-time password

1. 2” respectively and click

1. “Sync”.Image Added
2. You should return to the user page after synchronization is completed successfully. 

“Settings of synchronization and one-time password verification” policy

This defines the counter value range for synchronization and one-time password verification. Default value:

• “Sync interval" - 1000

• “One-time password verification

• interval” - 50

Image Added