Configure Slot 2 or 3 with a TOTP Algorithm

To configure a TOTP-based OTP configuration on Slot 2 or 3, follow the steps below.

Note: Slot 1 can only be configured with HOTP, while Slots 2 and 3 can be configured with either an HOTP or TOTP algorithm.
  1. From the Applications screen, locate the OTP section and click the Slot 2 or Slot 3 link:

  1. From the Slot configuration screen, locate the Configure section and click the Continue button:

  1. Enter your PSKC transport key:

    Note: You are only asked to enter a transport key the first time a slot is configured. This transport key is then used to encrypt all the OATH slots of a device. If you want to use another transport key for a different device, you must exit the software and run it again.
  1. On the Slot Configure screen, enter the following configuration information as illustrated:
    1. OTP Type: TOTP or HOTP

    2. Friendly Name: a human-readable name for the configured slot
    3. Algorithm: the encryption algorithm used to generate the Secret Key. The following values are available from the pull-down menu:
      1. SHA-1
      2. SHA-256
      3. SHA-512
    4. Encoding: the encoding format used to generate the Secret Key. The following values are available from the pull-down menu:
      1. Base32
      2. Base64
      3. HEX
    5. Digits: the number of OTP digits desired for the OTP display. The following values are available from the pull-down menu:
      1. 6
      2. 8
      3. 10
    6. Time: the amount of time that the OTP will be valid before another OTP can be generated. The following values are available in the field, and from the pull-down menu:
      1. Time field: enter the desired numerical value (for example, 30) then choose the unit of time from the pull-down menu:
        1. seconds
        2. minutes
        3. hours
  2. Once entered, click the Generate button to generate the Secret Key.

    In the example below, the following values are configured:

    1. OTP Type: TOTP

    2. Friendly Name: Test OTP Configuration
    3. Algorithm: SHA-256
    4. Encoding: Base64
    5. Digits: 8
    6. Time: 30 seconds

  3. After entering the desired values and generating the Secret Key, click the Configure button.

  4. Enter your configured PIN value if prompted and click Submit.

    Note: Both Numeric and Alphanumeric PINs are supported.

    When the configuration completes, a success message appears in the upper-right corner of the Crescendo Management Tool window: