Managing OTP device

2.1.7. Managing OTP device#

2.1.7.1. OTP devices overview#

To manage OTP devices, go to the “OTP devices” section in the sidebar. This page provides an overview of all registered OTP devices, displaying key details such as:

  • Device ID

  • Description

2.1.7.2. Adding an OTP device#

To add a new OTP device, follow these steps:

  1. Click the “+” button in the top-right corner of the page.

  2. Fill out the form with the required details:

    • Device ID (required): A URL-friendly, internal system identifier for the device.

    • Description (required): A brief label to help you identify the device physically.

    • Verification Algorithm (required): The algorithm used to verify transactions in offline mode. Choose from:

      • 30s 8d TOTP-SHA1: Time-based OTP with 30-second intervals and 8 digits (e.g., Google Authenticator, FreeOTP+).

      • 30s 8d eTOTP-SHA1: Time-based OTP with 30-second intervals, 8 digits, and hashing over transaction amounts (requires custom generators and currently only prototypes are available from BFH).

    • Device Key (required): Automatically shown after selecting the algorithm. Ensure your device uses the exact same key. Additionally, you can use button to generate a new key, to use in your programmable OTP device.

  3. Click “Confirm” to add the device.

After confirming, a QR code will be displayed. Scan this code using your programmable OTP device to input the device key.

2.1.7.3. Editing an OTP device#

To edit an existing OTP device:

  1. Click on the device you want to edit from the list.

  2. Update the form fields as needed (except for the Device ID, which is fixed).

  3. Click “Confirm” to save your changes.

2.1.7.4. Deleting an OTP device#

To delete an OTP device, click on the “Delete” button next to the device you want to remove.