Configuring OTP (OATH)

OTP is a one-time use password generated for an authentication event, sometimes communicated between the client and the server through a secure channel. Configure OTP settings so that users can use OTP as their authentication factor.

1. Upload the OATH files to the IMS Server.
   1. Copy the OATH Seed file to the IMS Server.
   2. Put the OATH seed file in <IMS Installation Folder>\ims\WEBINF\ lib.
   3. Navigate to <IMS install directory> bin.
   4. Edit setupcmdline.bat and point it to the right WebSphere Application Server profile.
   5. Save and exit the application.
   6. Run the uploadoath.bat file by following this format: uploadoath <was admin> <was password> --in <path of oath.txt> --out <log file>.
   7. Restart the IMS Server.
2. Configure the OTP user in AccessAdmin.
   1. Log on to AccessAdmin.
      
   2. Search for your OTP user and select it.
   3. Click OTP Token Assignment.
   4. Click the OTP token.
   5. Click Assign Token.
   6. Reset the OTP token by getting three values.
3. Configure AccessAssistant.
   1. Log on to AccessAdmin.
      
   2. Click Authentication service policies under System.
   3. Select AccessAssistant.
   4. Click Move to enterprise authentication services.
   5. Click AccessAssistant under Enterprise authentication services.
   6. Click Authentication Policies.
   7. Under Authentication modes to be supported, select Password, MAC, OTP (OATH), and OTP (time-based).
   8. Click Update.
   9. Scroll up the page and click Authentication Services.
   10. Under ActiveCode-enabled Authentication Services, select AccessAssistant.
   11. Type the user name in the text box at the right.
   12. Click Add Account.
   13. Navigate to User Policy Templates > New template > Create new policy template > Authentication Policies.
   14. Set Enable Mobile ActiveCode authentication to Yes.
4. Configure the system policy.
   1. In AccessAdmin, navigate to System and click System Policies.
   2. Click AccessAssistant and Web Workplace Policies.
   3. Under Default second authentication factor forAccessAssistant and Web Workplace, select OTP.
   4. Click Update.