Operation: | Configure OTP
Description: | Configure global OTP parameters.

Sample Configuration
    	<OTPSettings>
    		<otp />
    		<allUsers />
    		<otpUsers>
    			<user />
    		</otpUsers>
    		<tokenAutoCreation />
    		<otpUserPortal />
    		<otpSSLVPN />
    		<otpWebAdmin />
    		<otpIPsec />
    		<defaultTimeStep />
    		<maxTimeStepsInterval />
    		<maxInitialTimeStepDiff />
    	</OTPSettings>

Attribute/Parameter Information :

Parameter | Mandatory | Default | Description
--- | --- | --- | ---
OTP | No |  | Description: Switch OTP on or off. OTP confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '0', '1' are allowed.
OTP for all users | No |  | Description: Require all users to provide One Time Passwords. Otherwise OTP has to be enabled for users or groups explicitly. OTP for all users confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '0', '1' are allowed.
OTP auto creation | No |  | Description: User specific OTP tokens may be generated automatically when a user is created. This feature can be switched on or off. OTP auto creation confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '0', '1' are allowed.
userportal | No |  | Description: Access to selected facilities may require One Time Passwords. Those facilities can be selected here. userportal confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '0', '1' are allowed.
sslvpn | No |  | Description: Access to selected facilities may require One Time Passwords. Those facilities can be selected here. sslvpn confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '0', '1' are allowed.
webadmin | No |  | Description: Access to selected facilities may require One Time Passwords. Those facilities can be selected here. webadmin confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '0', '1' are allowed.
waf | No |  | Description: Access to selected facilities may require One Time Passwords. Those facilities can be selected here. waf confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '0', '1' are allowed.
ipsec | No |  | Description: Access to selected facilities may require One Time Passwords. Those facilities can be selected here. ipsec confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '0', '1' are allowed.
hotspot | No |  | Description: Access to selected facilities may require One Time Passwords. Those facilities can be selected here. hotspot confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '0', '1' are allowed.
default time step | No |  | Description: The One Time Password can only be used once within a certain time interval. The length of that interval can be selected here. default time step confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Range 10 to 300 is allowed. Maximum digits allowed are 3.
Max Time Steps Interval | No |  | Description: Due to clock drift the matching One Time Passwords is looked for max time steps back and forward in time, respectively. Max Time Steps Interval confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Range 0 to 10 is allowed. Maximum digits allowed are 2.
Initial Max Time Steps Interval | No |  | Description: Due to missing clock synchronization, at the very first utilization of an OTP token the matching One Time Password is looked for max time steps back and forward in time, respectively. Initial Max Time Steps Interval confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Range 0 to 600 is allowed. Maximum digits allowed are 3.

Status Message Information :

Operation | Status | Message
--- | --- | ---
Configure OTP | 200 |
Configure OTP | 500 |

) Copyright 2015 Sophos Limited. All rights reserved.
Sophos is registered trademarks of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.