TOTP hardware tokens are keychain devices that display a 6 digit code (one time password). They must be pre-registered with your account by WSU.

WSU Recommendation

WSU does not recommend use of c200 TOTP hardware tokens to protect your WSU Account.

c200 tokens have a limited lifespan because they have a limited battery life and may lose synchronization with Okta. At the end of the device lifespan, they must be thrown away and replaced.

  • (tick) MFA does not use any network
  • (tick) Good Phishing Resistance
  • (error) Requires hardware token
  • (error) No self-service registration option
  • (error) Limited lifespan of device

How to Get a c200 TOTP token

WSU ITS purchased a limited number of c200 TOTP tokens. While supplies last, they can be requested by contacting the Crimson Service Desk

How to Set Up hardware TOTP

c200 TOTP tokens cannot be set up using self-service. Your token must be activated by ITS staff before delivery to you.

How to Use your TOTP hardware token

  1. Enter your username to login in to login.wsu.edu
  2. Enter your password when prompted*
  3. When prompted to select a security option, select "OTP c200"
  4. Press the power button on your TOTP token to display the next code
  5. Type the code displayed on the token into the Okta login widget

Hardware Recommendations

Further Reading

https://its.wsu.edu/documents/2023/10/mfa-otp-c200-user-guide.pdf
https://www.nytimes.com/wirecutter/reviews/best-security-keys/

  • No labels