Configure Device Access One-Time Password

At the console of the remote, offline device, log in with

menu

as the username and

digital>morgueS!

as the password.

Once logged in, the console menu will present command options.



Select the

Status

option.

This verifies that the device is offline.

Once the device is offline and has a Claim certificate installed, select

Device offline Access

.

This generates the

Challenge phrase

.

Note down the

Challenge phrase

.



Log in to the

Prisma SD-WAN

web interface as a

Super

user and select

Workflows

Devices

.

Select a device, click the ellipsis menu, and select

Generate one-time password

.



Enter the

Challenge Phrase

provided earlier by the device console, and click

Submit

.



If successful, a one-time password response will be generated.



Enter this one-time password on the device console for access to the Device Toolkit.



Note the following:

Challenge requests and incorrect entries in both forms will be logged.
The Challenge Phrase and subsequent response is only valid for the configured number of attempts.
Exiting from the Challenge prompt or logging out will automatically invalidate the Challenge string.
You can modify the maximum number of one-time password attempts and expiration timeframes from
Manage
System
Access Management
Device Access
Device Offline Access Policy
on the
Prisma SD-WAN
web interface.