Re: Free MFA for IBM i

We sync the passwords on all lpars of IBM i (and Windows, etc) with IBM
Security Verify Governance - Identity Manager. Can the TOTP match on all
LPARs also?

On Tue, Apr 8, 2025 at 12:30 PM cesco via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

TOTP devices and just pass it around. But what if

TOTP is only dependent from a stored password seed (that you control) and
time.

So you can have say 5 different hardware tokens distributed to restricted
group of tech, all programmed to the same seed if they need to use the same
important userid in the system (so it will produce the same number
pattern). Basically, you clone them if needed with the same seed.

p.s. of course you can emulate it easily with software TOTP, there are
quick command lines around, not advisable of course because it will
obviously require to paste the original password around invalidating a
little the overall benefits of MFA... but being the seed base32 usually you
can print it on paper if one so desire...

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.