Introduction

As with pre-programmed hardware tokens, programmable tokens have an internal clock that is reliant on an internal quartz crystal to maintain time accuracy, but over time is still subject to a degree of time drift, but unlink pre-programmed hardware tokens it is possible to correct the internal clock on a programmable hardware token.

Preparation for correcting the clock on a programmable token

Before you are able to correct the clock on a programmable token you will need to make the following preparations;

  • Install and run the SafeID diamond programming app (available for Windows, Android and iOS versions),
  • If you are are using a windows based programming app you will need to ensure that the clock on your PC is set as accurately as possible.

    • Introduction

      On windows based PC's, laptops and tablets the time is normally obtained from a quartz crystal based clock that is maintained by a lithium ion battery on the motherboard of your computer.

      In general you can expect time drift of 2 or more seconds per day (compared to about 1 second every 3 days from a typical hardware token), but can be greatly improved if the PC is automatically synchronised with an external source (either an internet time server or the clock on the local domain controller). 

      Correcting the time on a windows computer

      It is possible to identify the correct time (accurate to the second) by opening a windows browser to an online timer server (see examples below); 

       

      Once you have accessed the external time source you can then use this resource to check the accuracy of the clock on your local computer.

      Launch the control panel by (press , type "control panel" then click )


      From the control panel click on the icon


      Select the "Date and Time" tab to display the date and time, then compare this time with the time shown from the external time server;


      Ideally the two times should be within a second or two of each other but if there is significant drift you can correct the time by either using the button, or by selecting the "Internet Time" tab, and synchronising with an internet time server (example below);

  • You will need to obtain the the seed details that were originally used to program the token (a security provision requires that seed details are sent whenever the token clock is updated).

Synchronising the token's clock

Once the necessary preparations have been performed you should launch the SafeID Diamond Programming tool and select the option for token clock synchronisation.

  • If you are running the windows version of the app, then the option will be labelled "Sync Token Clock";


  • If you are running the Android or iOS versions of the app, then the option will be labelled "Synchronise Token Clock";


Once you have selected the synchronise token clock option you will need to manually enter the token details (seed/secret, time window settings etc.) prior to reburning your token.

Specific instructions for manual entry of the seed details and the steps necessary for burning the programmable tokens can be found in the following guide;


Related Articles


  • No labels