We recently received a new batch of TOTP token from Vasco Go6 TOTP Type, noticed that we need to tune the Window Period into a bigger value to authenticate successfully. Token vendor suggest to have some time shifting method to compensate the Time Drifting issues, which is quite a standard features out there who support TOTP token.

Comments

  • Please provide more information around your statement that this "is quite a standard features out there who support TOTP token".

    One the surface it would seem that the hardware vendor suggests we provide a fix for their faulty tokens? Is this correct?

    Is the suggested "time shift" specified in the RFC for TOTP?

    We need more information to consider this idea.