Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Section


Column
width75%

Introduction

Deepnet SafeID/Diamond is a programmable TOTP token. It can be used to in the place where an OTP authenticator app is being used, such as Google Authenticator or Microsoft Authenticator.

...

It can be used in parallel to OTP app as an additional token, or as a replacement or replica of an OTP app.

...


Column
width20%

Image Added



Column
width20%


Image Added


Preparation

To program a SafeID/Diamond token from your PC or laptop, you need a NFC reader and the SafeID/Diamond programming tool. 

...

...

Image Added


Column
width25%

Image Added


Burning Seed data onto the Programmable Tokens using the NFC Token Reader/Programmer

...

To program a token, follow 5 simple steps below:

  • Obtain Seed
  • Connect Reader
  • Place Token
  • Burn Seed
  • Test Token


Step 1: Obtain Seed

Image Modified

There are 4 ways you can obtain the seed data or secret key:

...

...


  • Expand
    titleScan QR Code

    Before you scan the QR code please ensure that the clock on your computer is displaying the correct date and time.

    You can scan the screen for a QR code, or load from a file.

    Image Modified

    If you are scanning the barcode on the screen please ensure that the QR code is not obscured by other windows, and if you have more than one monitor please ensure that both the app and the QR code are displayed on the main display (display 1).

    If you still have difficulty in scanning the QR code double check you only have the one instance of the app running, and that it is the latest version of the app.  In most cases when there are issues with scanning of the QR code the most likely cause is the QR code contains the wrong data and may need to be regenerated.  To test the QR code you could check that the code works correctly with the authenticator app it is intended for (e.g microsoft authenticator), and if this fails then you know that the QR code will need to be regenerated.



  • Expand
    titleLoad Seed File

    You can also load seed data directly from a file. The seed file must be in CSV format, containing 2 columns of data, i.e. Serial Number and Based32 encoded Secret Key. 

    Image Modified


  • Randomly Generated
  • Manually Copied





Step 2: Connect Reader

Plug in the reader to the USB port of your computer, and the prompt headed "Reader:" should update to indicate the reader is available to be connected;

Image Modified

Select the NFC reader from the drop list, then click "Connect"

...

The tool will now display the token's serial number and time details:

Image Modified


Step 4: Burn Seed

Before burning the seed into the token, you might want to select the options below:

  • Sync Token Clock
  • Export Seed Data

If you would like to export the seed data to be used with Azure MFA, then you can also optionally enter the User's Principle Name (UPN) to whom the token will be assigned. 

Image Modified

To burn the seed into the token, click "Burn"

Image Modified


Step 5: Test Token

To test the token, click the "Test" button

Image ModifiedImage Removed

Image Added

(Please note you may need to use the scroll bar at the bottom of this window to view the OTP codes)


Seed Files

If you selected to export the seed, then you will find that seed files will have been created in a sub-folder from where app was launched (the sub-folder is called "data" and contains seed files of various formats).

Image Modified

|


Image Modified


Related Articles

Expand
titleEntered seed using the Random and Edit features

It is also possible to manually enter the seed data (either using data obtained from a source, or by generating a random seed.

Random Seeds

You can generate randomised 32 and 64 character seeds by using the dropdown "Random" feature;

Image Added


After selecting this option the 

Image Added

Manually Entered Seeds

Seed data may also by manually entered by clicking on the Image Added button.

(Before using this button it is recommended that you initially populate this field using the Image Added  (described earlier) as this ensures the Image Added button will be properly enabled when the reader is connected)

Next click on the Image Added button, and replace the random generated seed with the seed that is to be sent to the token.

Image Added

The seed data can now be manually entered (prompted seed (base32) on the windows app, and seed (hex) on the mobile apps)

Image AddedImage AddedImage Added

f the programmable token needs 30 second time windows apply the following settings;

Image Added

If the programmable token needs 60 second time windows apply the following settings;

Image Added

Once these settings have been made you will be ready to continue with programming the token.