MultiOTP Authentication Server

From SecuTech Wiki
Revision as of 16:59, 12 June 2018 by Mapril (talk | contribs)
Jump to navigationJump to search

MultiOTP Authentication server installation and integration guide

Guide Version: 1.0 MultiOTP package at time of writing: 5.1.1.2

Introduction

MultiOTP is a 3rd party, OATH certified, open source authentication server for HOTP (UniOTP300 and UniOTP310) and TOTP (UniOTP500 and UniOTP510) with both free and paid versions.

The free version supports unlimited users but the paid version has a variety of additional features.

Download free MultiOTP here: https://download.multiotp.net/multiotp.zip For the paid version of MultiOTP please go here: https://www.multiotp.com/ For more information about paid vs free versions and source code, go here: https://github.com/multiOTP/multiotp/wiki

You must use the administrator account on the computer to install MultiOTP.

Please see UniOTP seed portal for downloading UniOTP secret key files.

Installation on Windows

After downloading the zip package from https://download.multiotp.net/multiotp.zip, extract the content to a location with no spaces. It is recommended to be extract in the root directory of the hard drive, eg. "C:\multiotp". This is to eliminate the possibility of a filename error, all future references to the install location will follow this location.

After extracting the package, please navigate to "C:\multiotp\windows".

Right click on "radius_install.cmd" and run as administrator. Command prompt will appear and a message with "Please run this script as administrator ... Press any key to continue". Press enter and it will disappear after a few seconds.

Right click on "webservice_install.cmd" and run as administrator. Command prompt will appear and a message with "Please run this script as administrator ..." Press any key to continue. It will disappear almost immediately, then your default web browser will open to the default page: http://127.0.0.1:8112/.

Additional: To check if both services installed correctly, open the run window (windows button + r), type: services.msc and press ok. Sort alphabetically and look for "multiOTP Radius Server" and "multiOTP Web Server", if both appear then installation was successful.

For versions of Windows newer then Windows 7

The in-built Radius server provided by MultiOTP has an issue starting with versions of Windows newer then Windows 7, and must be run in compatibility mode.

To correct this, first open the run window (windows buttno + r), type: "services.msc". In the list of services, please sort by name then scroll down to "multiOTP Radius server". It should have the status "Started". Please right click on this and "Stop" the service, after a few seconds the "Started" status should be blank. Please minimize this, do not close.

Radius server in compatibility mode

In the folder "C:\multiotp\windows\radius\sbin" (note "sbin", not "bin"), please right click on "radiusd.exe" and select "Properties". In the "Compatibility" tab, enable "run in compatibility mode" and select "Windows 7" in the drop down, then click apply and ok.

Back in Windows services, right click on "multiOTP Radius server" and start the service.

Integration

In your web browser, on the multiOTP web admin page (default: http://127.0.0.1:8112/) log in with the default credentials: Username: admin Password: 1234

MultiOTP web server login screen


Token Synchronization

Testing Authentication