BPIA – User OATH Token Activation Instructions March, 2016

Go to the following link: BP User OATH Token Page Go to the following link: https://g1t6099.austin.hp.com/OATH BP/client/bpeu_token_home.php This page contains the various links needed to activate and test your OATH token

Registering Your OATH Token An OATH token will be ordered for you by your Approver. Once you receive it you must first register it before it can be used Click the “Start Registration” button

Registering Your OATH Token Cont. Click the “Accept agreement and begin registration” button to continue

Registering Your OATH Token Cont. Enter the token serial number from the back of your token. This is an 8 digit number next to the “ESN:” field Enter the Pickup code. Please Note: If you do not yet have your pickup code, click the blue “here” link to request it from your Approver first (See slide 8) Click “Click here to register your token” to continue

Registering Your OATH Token Cont. Your serial number should be pre-populated Choose a 6 digit PIN and confirm the PIN Next press the button on the OATH token to generate the first Passcode and enter this in the “Token Passcode 1” field. After the window clears, press the button on the OATH token a second time to generate the second Passcode and enter this in the “Token Passcode 2” field. Click “Continue” to complete the registration

Registering Your OATH Token Cont. Once successful you can test your token by clicking the “test your token” link or click the “Finish” button to exit

Request a Pickup Code You must request a pickup code from an Approver in order to activate your token Choose an Approver from the drop down menu. PLEASE NOTE: If you are an Approver, you cannot choose yourself to deliver the pickup code and you will not appear as an option here. You must have 2 active Approvers in your BPIA relationship to perform this operation.

Request a Pickup Code Cont. Click the “Finish” button and contact your selected Approver for the pickup code

Testing a Token Click the “Test Token” button

Testing a Token Cont. Enter you login ID if it is not pre-populated for you (your login ID is the WR number shown to you during registration) Enter the 12 digit Pin+Passcode. This is the combination of your 6 digit pin + the 6 digit number generated on the token by pressing the grey button Click the “Test” button

Testing a Token Cont. “Test Successfully” indicates your token is working If not successful, follow the steps to re-register your token

Synchronizing a Token Your OATH token can sometimes become “out of sync” with the radius server and should be done when: The OATH token is not working You hit the OATH token button too many times consecutively One-Time-Passcode (OTP) generated was not used

Synchronizing a Token Cont. Enter your Login ID if it is not already pre- populated Generate 2 passcodes and enter them into the boxes Press the “Sync” button A “Sync Successfully” message will indicate the token is re-synced

Change a Token PIN If you wish to change your current PIN click the “Change Pin” button. PLEASE NOTE: You must know your current PIN in order to change it. If you do not know your PIN, request a new pickup code from your Approver and re-register your token (see slides 5 and 8).

Change a Token PIN Cont. Enter your Login ID if not already pre-populated Enter your current Pin Enter the new Pin Confirm the new Pin and click the “Click here to change PIN” button

Change a Token PIN Cont. A “Change your pin successfully” message will indicate your PIN has been changed

Unregistering a Token You may need to unregister a token in order to give it to a new user or if you need to reinitialize it. Click the “Unregister Token” button

Unregistering a Token Cont. You may need to unregister a token in order to give it to a new user or if you need to reinitialize it. Enter the Login ID and Token Serial Number (S/N) is not already pre-populated Enter the PIN and generate 2 passcodes Click the “Unregister” button

Unregistering a Token Cont. Confirm you want to unregister the token by clicking “OK” in the popup box

Unregistering a Token Cont. The “Unregister Successful” message will indicate the token is now disabled and ready to be reused

Unlocking a Token Your token can become locked if you attempt to use an invalid pickup code 5 times during registration. You will need to contact your Approver and they can unlock your token for you. PLEASE NOTE: If you are an Approver, you cannot unlock your own token. You must have another active Approvers in your BPIA relationship to perform this operation.

Unlocking a Token Cont. If you click the “Unlock Token” button and you token is not locked, you will see the following message: