Configuring OTP Token Login Verification

Notes and Constraints

• Currently, bastion hosts support only Jansh ETZ201/ETZ203 and Feitian OTP tokens.
• A hardware OTP token can be issued only to one user.

Prerequisites

You have purchased Jansh ETZ201/ETZ203 or Feitian OTP tokens.

Step 1: Configure OTP Token Authentication

1. Log in to your bastion host as the administrator. For details, see Logging In to Your CBH System.
2. Choose User > User to go to the User management page.
3. Select a user and click its LoginName.
4. In the User Setting area, click Edit.
5. In the displayed Edit user setting dialog box, select OTP token for Multifactor Verification.
6. Click OK.

Step 2: Issue an OTP Token

1. Log in to your bastion host as the administrator. For details, see Logging In to Your CBH System.
2. Choose User > OTP token in the navigation pane.
3. Click Issue to issue an OTP token.
   Figure 1 Issuing an OTP token
   

4. Enter the required token information.
   Figure 2 Issue Token ID
   

   Table 1 Parameters for issuing an OTP token

   Parameter	Description
   Token ID	OTP token ID.
   Key	Unique key corresponding to the OTP token. It is also provided by the OTP token vendor.
   Relate User	User to whom the OTP token is associated with.

5. Click OK. You can view the newly issued OTP token in the OTP token list.

   In the OTP token authentication method, the login page requires the login name, static password, and the dynamic OTP issued by your hardware token.