Configuring Slot 2 with a TOTP Algorithm

To configure a TOTP-based OTP configuration on Slot 2, follow the steps below.

Note: Only Slot 2 and Slot 3 can be configured for either TOTP or HOTP; Slot 1 can only be configured for HOTP.
  1. From the Applications screen, locate the OTP section and click the Slot 2 link:

  1. From the Slot 2 configuration screen, locate the Configure section and click the Continue button:

  1. Enter your PSKC transport key:

    Note: You are only asked to enter a transport key the first time a slot is configured. This transport key is then used to encrypt all the OATH slots of a device. If you want to use another transport key for a different device, you must exit the software and run it again.
  1. On the Slot 2 Configure screen, enter the following configuration information as illustrated:

    1. OTP Type: TOTP or HOTP

    2. Friendly Name: a human-readable name for the configured slot
    3. Algorithm: the encryption algorithm used to generate the Secret Key. The following values are available from the pull-down menu:
      1. SHA-1
      2. SHA-256
      3. SHA-512
    4. Encoding: the encoding format used to generate the Secret Key. The following values are available from the pull-down menu:
      1. Base32
      2. Base64
      3. HEX
    5. Digits: the number of OTP digits desired for the OTP display. The following values are available from the pull-down menu:
      1. 6
      2. 8
      3. 10
    6. Time: the amount of time that the OTP will be valid before another OTP can be generated. The following values are available in the field, and from the pull-down menu:
      1. Time field: enter the desired numerical value (for example, 30) then choose the unit of time from the pull-down menu:
        1. seconds
        2. minutes
        3. hours

  2. In the example below, we have configured the following values. Once entered, click the Generate button to generate the Secret Key:

    1. OTP Type: TOTP

    2. Friendly Name: Test OTP Configuration
    3. Algorithm: SHA-256
    4. Encoding: Base64
    5. Digits: 8
    6. Time: 30 seconds

  3. After entering the desired values and generating the Secret Key, click the Configure button. Enter your configured PIN value if prompted and click Submit.

    Note: Both Numeric and Alphanumeric PINs are supported.

  4. When the configuration completes, a success message appears in the upper-right corner of the Crescendo Management Tool window: