How to set up one-time password(TOTP)（From off-campus・WinAuth）
TUT Information media center
Our university has introduced two-factor authentication (TOTP authentication) using
one-time passwords which based on time to ensure identity and prevent unauthorized using ofimportant systems. This authentication requires one-time passwords in addition to the username
and password which user remembered to achieve strong authentication. A one-time password canbe generated only on the smartphone which user owns.
Therefore, it is necessary to install an application for using TOTP authentication on yoursmartphone in advance and register it with University's user authentication system. This section
describes the procedure for registering the one-time password application for Windows PC ‘Win
Auth’ in the authentication infrastructure system.
This document describes the procedure for setting from off-campus network. Please see
https://imc.tut.ac.jp/totp for the procedure of setting from on-campus network.

The authentication method is switched depending on the type of access source network (on-campus or offcampus). For example, on-campus networks can be authenticated only with a username and password, but
off-campus networks require TOTP authentication in addition to that. In this classification, thefollowing networks are classified as "off-campus".
Connection from off campus byVPN
Wired guest network (e.g., The Village Tempaku network)
Wireless network SSID: eduroam
Wireless network SSID SSID: tutguest

What to prepare
Account Information Notification (This procedure requires your own username andpassword)
Matrix code (From the document "Notification of Your Matrix Code")
Environment which you can receive the password recovery email address
Please refer to https://imc.tut.ac.jp/passwordreset if you have not acquired the authentication
matrix code or have not registered the password recovery email address.
1Procedure of registering the one-time password App

1. Connect your PC and smartphone for the setting to the network.

2. Check the date and time on your PC and smartphone are correct.
3. Install 'WinAuth' on your Windows PC. Access the homepage below and download thelatest version of "Download Latest Stable Version". Unzip the downloaded ZIP file and copy itto an apposite folder (e.g. the folder where the free software is located, the desktop).

●WinAuthhttps://github.com/winauth/winauth

4. Display the "User Profile Maintenance" page in the browser of the PC.

To display the "User Profile Maintenance" page, click "Change password" in the quick menu on
the homepage of the Information Media Center (https://imc.tut.ac.jp/).

5. On the "Password Authentication" screen, entry username and password listed on"Account Information Notification".

2

6. Click “Register the one-time password generator” on the User Profile Maintenance page.

7. “Matrix authentication” screen will be displayed. Entry the value which corresponding to thecoordinates on PC browser by referring to the authentication matrix code.

For example, if the value in row F and column 5 of "Notification of Your Matrix Code" is "12"and the value in row F and column 3 is 55, enter 12585… and so on. Repeat this for the numberof coordinates shown.

8. Select 'Agree'

9. The QR code and key will be displayed in the browser. Then, in step 13, enter the 「キー」(Key) in the WinAuth entry field.

※ There issome possibilityof being displayed "Registered" sign,even if youhave notregistered the one-time password application. In that case, click the "Reissue" button.

410. Start "WinAuth". The following will be displayed. Click 「詳細情報」(Details).

11. Click 「詳細情報」(Details) and the following will be displayed. Click 「実行」

(Execute) button.

12. Click 「Add」、select「Google」

513. The following will be displayed. Enter 「キー」(Key) in step 6 for 1st entry field andclick “OK” button.

14. Click "OK" button, then display the following. Set the password for starting "WinAuth"and click the "OK" button.
※ Although this procedure is not indispensable, it is included in the procedure because of
information security considerations. If you do not want to enter a password every time
WinAuth starts, uncheck "protect with my own password". If you uncheck it, you will not haveto enter in the password field.

615. If the setting is successful, a 6-digit number will be displayed. Enter the number in theentry field of the browser and click the "Register" button.

6-digit number displayed by the one-time password app
Click the "Register" button. Return key is invalid

16. If the 6-digit number is not displayed as shown below, click the arrow button.

17. Registration is completed when PC browser displayed "Process completed successfully".

Click the "OK" button.

7