1.2.7. Managing OTP devices

1.2.7.1. 1. OTP devices overview

To manage OTP devices, go to the “OTP devices” section in the sidebar. This page provides an overview of all registered OTP devices, displaying key details such as:

  • Device ID

  • Description

1.2.7.2. 2. Adding an OTP device

To add a new OTP device, follow these steps:

  1. Click the “+” button in the top-right corner of the page.

  2. Fill out the form with the required details:

    • ID (required): A URL-friendly, internal system identifier for the device.

    • Description (required): A brief label to help you identify the device physically.

    • Verification Algorithm (required): The algorithm used to verify transactions in offline mode. Choose from:

      • 30s 8d TOTP-SHA1: Time-based OTP with 30-second intervals and 8 digits (e.g., Google Authenticator, FreeOTP+).

      • 30s 8d eTOTP-SHA1: Time-based OTP with 30-second intervals, 8 digits, and hashing over transaction amounts (requires custom generators and currently only prototypes are available from BFH).

    • Device Key (required): Automatically shown after selecting the algorithm. Ensure your device uses the exact same key.

  3. Click “Confirm” to add the device.

After confirming, a QR code will be displayed. Scan this code using your OTP device to complete the setup.

1.2.7.3. 3. Editing an OTP device

To edit an existing OTP device:

  1. Click on the device you want to edit from the list.

  2. Update the form fields as needed (except for the Device ID, which is fixed).

  3. Click “Confirm” to save your changes.

1.2.7.4. 4. Deleting an OTP device

To delete an OTP device, click on the “Delete” button next to the device you want to remove.