mardi 27 janvier 2015

Usability of a found OTP Token for my own system



I found a one-time-password token and am unable to find out who it belongs to or where it has been used.


It seems to be manufactured by a company called "ActivIdentity" (now "HID") and called the "keychain"-model. This is what it looks like:


ActivIdentity Keychain-model


It requested a PIN (which I obviously not know), and after I tried several random numbers it locked completely. Looking at the online manual for users of the token, the token must be given to the user's company's IT-administrator to be reinitialized, which I of course don't have. As far as I could find out, one possibility for the administrator would be to initialize it with the "ActivIdentity AAA-Server", which I also don't have.


Now I hope to be able to use it for my own systems (e.g. authentication for my ssh-access on my own server). In order to do this, I need to initialize it.



  • Is there any known way to initialize the key with software available to private users?

  • Is there any know possibility to use this for already available online services?





Aucun commentaire:

Enregistrer un commentaire