Configure Device Access One-Time Password

1. At the console of the remote, offline device, log in with menu as the username and digital>morgueS! as the password.

   Once logged in, the console menu will present command options.

2. Select the Status option.

   This verifies that the device is offline.
3. Once the device is offline and has a Claim certificate installed, select Device offline Access.

   This generates the Challenge phrase.
4. Note down the Challenge phrase.
5. Log in to the Prisma SD-WAN web interface as a Super user and select WorkflowsDevices.
6. Select a device, click the ellipsis menu, and select Generate one-time password.

7. Enter the Challenge Phrase provided earlier by the device console, and click Submit.

   If successful, a one-time password response will be generated.

8. Enter this one-time password on the device console for access to the Device Toolkit.

   Note the following:

   • Challenge requests and incorrect entries in both forms will be logged.
   • The Challenge Phrase and subsequent response is only valid for the configured number of attempts.
   • Exiting from the Challenge prompt or logging out will automatically invalidate the Challenge string.
   • You can modify the maximum number of one-time password attempts and expiration timeframes from ManageSystemAccess ManagementDevice AccessDevice Offline Access Policy on the Prisma SD-WAN web interface.