Configuring OTP Token Login Authentication

An OTP token is a security hardware device that generates one-time passwords. You can use event-based OTP tokens for CBH. In OTP token authentication method, both your static login password and a 6-digit one-time password generated by your hardware are required for login.

Constraints

Currently, CBH only supports Jansh ETZ201/ETZ203 OTP tokens.
A hardware OTP token can be issued only to one user.

Prerequisites

You have obtained a hardware token.

Step 1: Configure OTP Token Authentication

Log in to a CBH system as the administrator.
Choose User > User to go to the User management page.
Select a user and click its LoginName.
In the User Setting area, click Edit.

Figure 1 Editing user setting
In the displayed Edit user setting dialog box, select OTP token for Multifactor Verification.
Click OK.

Step 2: Issue an OTP Token

Log in to a CBH system as the administrator.
Choose User > OTP token in the navigation pane.
Click Issue to issue an OTP token.

Figure 2 New OTP token

Enter the required token information.

Figure 3 Issuing an OTP Token

**Table 1** Parameters for issuing an OTP token
Parameter	Description
Token ID	Specifies the OTP token ID.
Key	Specifies the key uniquely corresponding to the OTP token. It is provided by the OTP token vendor.
Relate User	User who the OTP token is related to.

Click OK. You can view the newly issued OTP token in the OTP token list.
In the OTP token authentication method, the login name, static password, and the dynamic password on the OTP token are required for login.