Introduction

There are circumstance where you may want to replace a mobile phone based authentication app (such as google authenticator) with a programmable hardware token (such as the SafeID/Diamond or SafeID/Pro programmable tokens).

Before you can produce OTP codes using a programmable token you will need  to obtain the seed data in the form of a compatible QR code.







Preparation

Before you can use an NFC enabled phone to burn programmable tokens you will need to perform the following preparatory steps;



  1. Make sure you’re running the latest version of Android (the majority of new Android smartphones have an NFC chip in the phone).

    Turn on your device and slide from the top down to access the android settings.

    Maximise the displayed icons then ensure the "NFC" icon is enabled;


    If asked if you want to turn on  "Android Beam",  confirm that you want the feature enabled.






  2. If your mobile device runs android you will need to visit the Google play store and search for the app "Deepnet SafeID Programmer"

    Download, Install and run this app.






  3. There are 2 ways you can obtain the seed data or secret key:


    • When scanning a QR Code on an Android (or IOS) SafeID programming App you first need to make ensure that the QR code is ready for scanning using the camera on your smartphone.

      Display the QR Code ready for scanning (the QR code below is just an example);


      Next launch the app on your mobile device, and use the following instructions to burn the programmable token

      Launch the app, point the camera at your QR code, then click on the button;


      After clicking on the the button point the camera the QR code and the code will be automatically scanned;

      Screenshot_20230518-235748.png


      The token's seed/secret is extracted from the QR code, and displayed in the "Seed" box;


      You are now ready to burn the seed details onto the token.




    • Before you manually enter you seed data you need to ensure the seed is hex encoded (Hexadecimal encoded seeds are formed as a mixture of the letters " "A" to "F", together with any numerical digits (e.g. "0A9FBED34E0E504161F83B08BF000D3CF3418EDA").). 

      If the seed is Base32 encoded, then you will need to convert the seed to hex format (example tool provided below);


      • To convert Base32 encoded seed data to hexadecimal we suggest using the following online conversion tool:


        In the field "Base32 string" copy the seed data you received in hex format then click the

        The base32 version of the seed will be displayed in the "Output (base32)" field (see example below);



      The field prompted "Seed (hex)" is not locked, so you will be able to directly enter your hex encoded seed into the app;


      Ensure the time and algorithm settings are set as follows;


      You are now ready to burn the seed details onto the token.





Burning Seed data onto the Programmable Tokens using an NFC enabled smartphone

Whilst the token can be programmed using the  button, we suggest you enable the option "Program Token Automatically";



Once this option has been enabled. programming of the token  may be performed by simply turning on the token and placing it at the back of your mobile phone.

When you hear a beep, do not move the token until you hear the second beep, and the message "Token programmed successfully" will be displayed (indicating that the token has been programmed).



Related Articles