Do Excelsecu hardware OTP tokens require network connectivity or smartphones?
No. Excelsecu TOTP (Time-based) and HOTP (Event-based) tokens operate entirely offline. They generate 6-digit or 8-digit dynamic passwords locally on the device screen. This makes them strictly compliant for air-gapped environments, manufacturing floors, and secure facilities where mobile phones are prohibited.
How does Excelsecu help with OTP token provisioning and lifecycle management?
Excelsecu provides standards-based provisioning by supplying OATH-compliant seed files (optional in XML or CSV formats) via secure channels. These seeds are natively compatible with the Excelsecu OTP Server and third-party IAM (Identity and Access Management) platforms. Administrators can easily perform batch imports to provision tokens, track token assignments, and manage time-drift synchronization directly through the management console.
What should users do if an Excelsecu OTP token is lost or replaced?
If a token is lost, IT administrators must immediately revoke or unbind the token's unique serial number in the authentication server to prevent unauthorized access. Upon issuing a replacement token, the administrator links the new device's hardware seed to the user's existing account profile. Because the authentication logic is server-side, no user data is compromised from the lost hardware.
Can a malicious actor extract the private key from an Excelsecu PKI token?
No. All cryptographic key pairs are generated directly inside the token’s built-in secure smart card chip. Cryptographic signing operations are processed locally on the hardware, ensuring the private key never leaves the physical boundary of the token.
Do Excelsecu PKI tokens require middleware?
Yes. To interface with computer operating systems and cryptographic applications, Excelsecu provides standard middleware and drivers for Windows, macOS, and Linux environments.
粤公网安备44030002005151号 
Consult now
Contacting via phone