How to set up one-time password (TOTP)（WinAuth）
TUT Information media centerAt our university, we have introduced two-factor authentication (hereinafter referred to as TOTPauthentication) using a one-time password based on the time of day in order to ensure identity
verification and prevent unauthorized use when using important systems. In this authentication, inaddition to the user name and password that the user remembers, a one-time password that can begenerated only by the smartphone owned by the user is used to achieve strong authentication.
Therefore, it is necessary to install an application for using TOTP authentication on a smartphone
etc. in advance and register it with the University's user authentication system. This section
describes the procedure for registering the one-time password application WinAuth running on
Windows in the authentication infrastructure system.
In some systems, the authentication method is switched depending on the type of access source
network (on-campus or off-campus). For example, on-campus networks can be authenticated onlywith a user name and password, but off-campus networks require TOTP authentication in addition
to that. In this judgment, the following networks are classified as "off-campus".
Connection from off-campus by VPNWired guest network (Village Tenpaku etc.)

Wireless network SSID: eduroamWireless network SSID: tutguest

One-time password application installation and registration procedure1.

Connect the Windows PC used for the setting work to the campus network.

2.

Make sure the date and time on your Windows PC are correct.

3.

Install WinAuth on your Windows PC. Go to the homepage below and download the latest
version of "Download Latest Stable Version". Unzip the downloaded ZIP file and copy it toan appropriate folder (such as the folder where the free software is located or the desktop).

1 WinAuth
https://github.com/winauth/winauth

4.

Display the "User Profile Maintenance" page in the browser of the PC.
To display the "User Profile Maintenance" page, click "Change password" in the quick menu
on the homepage of the Information Media Center (https://imc.tut.ac.jp/).

5.

Click Register One-Time Password App on the User Profile Maintenance page.

※The "Register One Time Password App" page cannot be accessed from outside theuniversity.
6.

The QR code and key will be displayed in the browser. Then, in step 8, enter the value of"key" in the WinAuth input field.

2

※Even if you have not registered the one-time password application, "Registered" may bedisplayed. In that case, click the "Reissue" button.
7.

Start "WinAuth". When it starts up, the following message will be displayed. Click "Details".

8.

Click “Details” and the following message will be displayed. Click the “Execute” button.

9.

Click 「Add」、select「Google」

310. The following dialog will be displayed. Enter the value of the “key” described on the QR
code page in the input field of “1” and click the “OK” button.

11. Click the "OK" button to display the following dialog. Set the password for starting"WinAuth" and click the "OK" button.
※This procedure is not mandatory, but it is included in the procedure because of
information security considerations. If you do not want to enter a password when starting
WinAuth, uncheck "protect with my own password". If you uncheck it, you will not be able4

to enter in the password field.

12. If the setting is successful, a 6-digit number will be displayed. Enter the number in the input
field of the browser and click the "Register" button.

6-digit number displayed by the one-time password app

513. If the 6 digit number is not displayed as shown below, click the arrow button.

14. Registration is completed when the message "Process completed successfully" is displayedon the browser. Click the "OK" button.

6