1. BPIA – User OATH Token Activation Instructions
March, 2016

2. Go to the following link:
BP User OATH Token Page
Go to the following link:
BP/client/bpeu_token_home.php
This page contains the various links needed to activate and test your OATH token

3. Registering Your OATH Token
An OATH token will be ordered for you by your Approver. Once you receive it you must first register it before it can be used
Click the “Start Registration” button

4. Registering Your OATH Token Cont.
Click the “Accept agreement and begin registration” button to continue

5. Registering Your OATH Token Cont.
Enter the token serial number from the back of your token. This is an 8 digit number next to the “ESN:” field
Enter the Pickup code. Please Note: If you do not yet have your pickup code, click the blue “here” link to request it from your Approver first (See slide 8)
Click “Click here to register your token” to continue

6. Registering Your OATH Token Cont.
Your serial number should be pre-populated
Choose a 6 digit PIN and confirm the PIN
Next press the button on the OATH token to generate the first Passcode and enter this in the “Token Passcode 1” field.
After the window clears, press the button on the OATH token a second time to generate the second Passcode and enter this in the “Token Passcode 2” field.
Click “Continue” to complete the registration

7. Registering Your OATH Token Cont.
Once successful you can test your token by clicking the “test your token” link or click the “Finish” button to exit

8. Request a Pickup Code
You must request a pickup code from an Approver in order to activate your token
Choose an Approver from the drop down menu. PLEASE NOTE: If you are an Approver, you cannot choose yourself to deliver the pickup code and you will not appear as an option here. You must have 2 active Approvers in your BPIA relationship to perform this operation.

9. Request a Pickup Code Cont.
Click the “Finish” button and contact your selected Approver for the pickup code

10. Testing a Token
Click the “Test Token” button

11. Testing a Token Cont.
Enter you login ID if it is not pre-populated for you (your login ID is the WR number shown to you during registration)
Enter the 12 digit Pin+Passcode. This is the combination of your 6 digit pin + the 6 digit number generated on the token by pressing the grey button
Click the “Test” button

12. Testing a Token Cont.
“Test Successfully” indicates your token is working
If not successful, follow the steps to re-register your token

13. Synchronizing a Token
Your OATH token can sometimes become “out of sync” with the radius server and should be done when:
The OATH token is not working
You hit the OATH token button too many times consecutively
One-Time-Passcode (OTP) generated was not used

14. Synchronizing a Token Cont.
Enter your Login ID if it is not already pre- populated
Generate 2 passcodes and enter them into the boxes
Press the “Sync” button
A “Sync Successfully” message will indicate the token is re-synced

15. Change a Token PIN
If you wish to change your current PIN click the “Change Pin” button. PLEASE NOTE: You must know your current PIN in order to change it. If you do not know your PIN, request a new pickup code from your Approver and re-register your token (see slides 5 and 8).

16. Change a Token PIN Cont.
Enter your Login ID if not already pre-populated
Enter your current Pin
Enter the new Pin
Confirm the new Pin and click the “Click here to change PIN” button

17. Change a Token PIN Cont.
A “Change your pin successfully” message will indicate your PIN has been changed

18. Unregistering a Token
You may need to unregister a token in order to give it to a new user or if you need to reinitialize it.
Click the “Unregister Token” button

19. Unregistering a Token Cont.
You may need to unregister a token in order to give it to a new user or if you need to reinitialize it.
Enter the Login ID and Token Serial Number (S/N) is not already pre-populated
Enter the PIN and generate 2 passcodes
Click the “Unregister” button

20. Unregistering a Token Cont.
Confirm you want to unregister the token by clicking “OK” in the popup box

21. Unregistering a Token Cont.
The “Unregister Successful” message will indicate the token is now disabled and ready to be reused

22. Unlocking a Token
Your token can become locked if you attempt to use an invalid pickup code 5 times during registration. You will need to contact your Approver and they can unlock your token for you. PLEASE NOTE: If you are an Approver, you cannot unlock your own token. You must have another active Approvers in your BPIA relationship to perform this operation.

23. Unlocking a Token Cont.
If you click the “Unlock Token” button and you token is not locked, you will see the following message: