Release Notes
Click here to view the latest release notes – SOTP 3.0
Exostar offers a One-Time Password (OTP) Hardware Token credentialing technology, providing users with a physical token which allows them to access an application using Two-Factor Authentication (2FA).
Using a OTP Hardware token along with your email address or username + password (2FA) mitigates security risks by providing a stronger assurance level and better identity protections than conventional username/password technologies that are vulnerable to theft. The OTP Hardware Token generates single-use digital passwords on a physical token.
Step 1. Purchase
Please note, you can purchase a Hardware One Time Password (OTP) Token With Proofing – 1 Year, as well as a Hardware One Time Password (OTP) Token Without Proofing – 1 Year.
To complete an OTP Hardware purchase:
1. Login to your MAG account. In the My 2FA Credentials section on the dashboard, click the Get 2FA button to open Exostar’s Web Store.
2. From the Partner drop down menu, select All Credentials and Subscriptions OR the desired Partner to list acceptable credentials.
3. Select the radio button for the desired Hardware OTP product. Click Next.
4. Review and complete any missing information in the Primary Information and Billing Address sections. Click Next.
5. Select your Payment Method and input payment details. Click Submit to complete your purchase.
NOTE: If you select the Invoice option, Exostar must receive full payment before you receive your license key to activate your credential.
On the purchase confirmation screen, you are provided the option to activate your license key directly from the web store. Otherwise, you can activate via your MAG account using the license key provided in the confirmation email. You will receive your OTP Hardware Token within 3-5 business days.
2. From the Partner drop down menu, select All Credentials and Subscriptions OR the desired Partner to list acceptable credentials.
3. Select the radio button for the desired Hardware OTP product. Click Next.
4. Review and complete any missing information in the Primary Information and Billing Address sections. Click Next.
5. Select your Payment Method and input payment details. Click Submit to complete your purchase.
NOTE: If you select the Invoice option, Exostar must receive full payment before you receive your license key to activate your credential.
On the purchase confirmation screen, you are provided the option to activate your license key directly from the web store. Otherwise, you can activate via your MAG account using the license key provided in the confirmation email. You will receive your OTP Hardware Token within 3-5 business days.
Step 2. Activate License Key
Once you successfully complete your purchase, you can activate your credential directly from the web store or through your MAG account.
To activate your license key in MAG:
1. Login to your MAG account. Locate the purchase confirmation email containing the license key.
2. In the My 2FA Credentials section on the dashboard, under Have a license key? click the Enter it here link.
3. Input the license key. Click Next.
4. Select the country you will be proofed in from the drop-down provided.
– If you DO require proofing, continue to Step 3. Complete Proofing below. You are prompted to complete the proofing process in MAG once you activate your credential.
– If you DO NOT require proofing, skip to Step 5. Register to complete the Hardware OTP token setup process.
2. In the My 2FA Credentials section on the dashboard, under Have a license key? click the Enter it here link.
3. Input the license key. Click Next.
4. Select the country you will be proofed in from the drop-down provided.
– If you DO require proofing, continue to Step 3. Complete Proofing below. You are prompted to complete the proofing process in MAG once you activate your credential.
– If you DO NOT require proofing, skip to Step 5. Register to complete the Hardware OTP token setup process.
Step 3. Complete Proofing
Once you activate your license key, you are prompted to select your proofing method:
- Self-Service Mobile Proofing (US-based Users): If you are located in the United States, you can complete the self-service proofing process using your smartphone’s camera by providing your Social Security Number (SSN), driver’s license or passport.
- Live Video Proofing (International-based Users): Users located outside of United States must schedule a live video proofing session with an agent.
NOTE: US-based users may select live video proofing if they are unable to complete the Experian proofing. Please review the Identity Proofing Resource page for additional information prior to your proofing appointment.
To complete the Self-Service Mobile Proofing:
1. In the proofing application, after you provide your license key, select the desired proofing country. Click Next.
NOTE: Experian Self-service proofing is only available in the US. You will need a passport or a driver’s license to complete the process successfully.
2. On the Select identity proofing method screen, click the PROCEED WITH MOBILE PHONE button.
3. Confirm your Full Name. Click Next.
4. Review the proofing instructions. Click the START PROOFING button.
5. Review the Self-Service Proofing Terms and Conditions. Click the AGREE AND CONTINUE button.
6. Complete all required fields including all nine digits of your Social Security Number, to verify your identity. Click Next.
NOTE: If your name is listed incorrectly, click the MY NAME IS INCORRECT button.
7. Enter your Mobile Number. Click Next.
NOTE: If further evidence is needed, you are prompted to answer Knowledge-Based Authentication (KBA) Questions. Once you complete the questions, click Next.
8. You receive a proofing link on your mobile phone. Open the link.
9. Click the Let’s get started button.
10. Capture a photo of the back and front sides of your ID. This is required.
11. Capture a photo of yourself. This is required.
NOTE: Once completed, a confirmation page displays.
12. Once you successfully complete your instant proofing on your mobile phone, return to the proofing application.
13. Click on the ID PROOFING COMPLETED button in the proofing application.
IMPORTANT: Once you successfully complete your proofing, you must register your credential. Please see the steps outlined in Step 5. Register Credential below.
NOTE: Experian Self-service proofing is only available in the US. You will need a passport or a driver’s license to complete the process successfully.
2. On the Select identity proofing method screen, click the PROCEED WITH MOBILE PHONE button.
3. Confirm your Full Name. Click Next.
4. Review the proofing instructions. Click the START PROOFING button.
5. Review the Self-Service Proofing Terms and Conditions. Click the AGREE AND CONTINUE button.
6. Complete all required fields including all nine digits of your Social Security Number, to verify your identity. Click Next.
NOTE: If your name is listed incorrectly, click the MY NAME IS INCORRECT button.
7. Enter your Mobile Number. Click Next.
NOTE: If further evidence is needed, you are prompted to answer Knowledge-Based Authentication (KBA) Questions. Once you complete the questions, click Next.
8. You receive a proofing link on your mobile phone. Open the link.
9. Click the Let’s get started button.
10. Capture a photo of the back and front sides of your ID. This is required.
11. Capture a photo of yourself. This is required.
NOTE: Once completed, a confirmation page displays.
12. Once you successfully complete your instant proofing on your mobile phone, return to the proofing application.
13. Click on the ID PROOFING COMPLETED button in the proofing application.
IMPORTANT: Once you successfully complete your proofing, you must register your credential. Please see the steps outlined in Step 5. Register Credential below.
To complete the Live Video Proofing:
1. Review the information on the screen, verify your name and desired proofing country. Click Next.
2. Select Verify my identity by meeting with an agent later as the Proofing Service.
3. Click Schedule an Appointment. Review the information. Click Continue.
4. Select an appointment date and time from the calendar. Click Continue.
5. Enter required fields. Click Confirm.
NOTE: You will receive a confirmation email. Shortly before your proofing interview, you receive a WebEx invite via email. On your scheduled appointment date, an Exostar Proofing Agent will contact you.
6. Launch WebEx via the link provided in the email. Select your webcam for video, but do not connect to the audio.
NOTE: There is limited time to complete troubleshooting during your appointment. Failure to appear for your scheduled appointment will require you to reschedule via your MAG account.
7. You must present approved identity documents and answer a series of yes or no questions to an Exostar Proofing Agent.
After a successful proofing, the agent provides an activation code, which is required to complete the credentialing process. Once your proofing is complete, the code cannot be retrieved by anyone, including Exostar Customer Support. The activation code expires 30 days from the issue date. If your activation code is lost or expired, it may result in additional cost to you or your company to repeat the identity verification process. If you fail the webcam proofing, the proofing agent provides further instructions.
2. Select Verify my identity by meeting with an agent later as the Proofing Service.
3. Click Schedule an Appointment. Review the information. Click Continue.
4. Select an appointment date and time from the calendar. Click Continue.
5. Enter required fields. Click Confirm.
NOTE: You will receive a confirmation email. Shortly before your proofing interview, you receive a WebEx invite via email. On your scheduled appointment date, an Exostar Proofing Agent will contact you.
6. Launch WebEx via the link provided in the email. Select your webcam for video, but do not connect to the audio.
NOTE: There is limited time to complete troubleshooting during your appointment. Failure to appear for your scheduled appointment will require you to reschedule via your MAG account.
7. You must present approved identity documents and answer a series of yes or no questions to an Exostar Proofing Agent.
After a successful proofing, the agent provides an activation code, which is required to complete the credentialing process. Once your proofing is complete, the code cannot be retrieved by anyone, including Exostar Customer Support. The activation code expires 30 days from the issue date. If your activation code is lost or expired, it may result in additional cost to you or your company to repeat the identity verification process. If you fail the webcam proofing, the proofing agent provides further instructions.
Step 4. Activate Proofing Code
Please note, this section is only applicable to user who complete the Live Video Proofing process. Once you successfully complete your proofing appointment, you must activate your proofing code. IMPORTANT! This code comes from the Trusted Agent who completed your proofing.
To activate your proofing code:
1. Once you successfully complete your proofing, click the Activate button.
2. Enter the activation code provided to you by the Proofing Agent. Click Continue.
3. Click Activate to complete the credential activation.
2. Enter the activation code provided to you by the Proofing Agent. Click Continue.
3. Click Activate to complete the credential activation.
Step 5. Register Credential
Once you successfully complete your proofing and activate your code, you are prompted to register your hardware token. You must have the hardware token in your possession.
To Register your OTP Hardware Token:
1. Enter the token serial number found on the back of your OTP Hardware Token.
2. Press the button on the front of your token to generate the first password. Enter this number into the One-Time Password One field.
3. Wait 30 seconds and press the button on your token to generate the second password. Enter the number into the One-Time Password Two field. Click Submit.
IMPORTANT: You have the option to register a phone number to receive OTP codes via SMS text message. It is highly recommend you register a phone at this point, because if you lose your OTP token, you will not be able to register a new token without repeating the identity proofing process.
2. Press the button on the front of your token to generate the first password. Enter this number into the One-Time Password One field.
3. Wait 30 seconds and press the button on your token to generate the second password. Enter the number into the One-Time Password Two field. Click Submit.
IMPORTANT: You have the option to register a phone number to receive OTP codes via SMS text message. It is highly recommend you register a phone at this point, because if you lose your OTP token, you will not be able to register a new token without repeating the identity proofing process.
Common Issues
Locked Token (Resync Token)
Your token might get locked due to repeated login failures. If this happens, follow the steps below to unlock your token.
To unlock (or resync) your token:
1. Go to https://portal.exostar.com.
2. Login to your Exostar MAG account using Email Address/User ID and Password only.
3. Select My Account. Select Manage OTP.
4. Click View Details.
5. Click Resync.
6. Press the button on the front of the token to generate a digital password. Enter this number into the One-Time Password One field. Wait 30 seconds.
7. Press the button on the token to generate a second digital password. Enter this number into the One-Time Password Two field.
8. Click the Resync button.
2. Login to your Exostar MAG account using Email Address/User ID and Password only.
3. Select My Account. Select Manage OTP.
4. Click View Details.
5. Click Resync.
6. Press the button on the front of the token to generate a digital password. Enter this number into the One-Time Password One field. Wait 30 seconds.
7. Press the button on the token to generate a second digital password. Enter this number into the One-Time Password Two field.
8. Click the Resync button.
Renew Token
To renew your token, follow the steps below. Please also see the OTP Renewal page for more information.
To Renew your Token:
1. Login to MAG with your User ID/Email and Password.
2. Select the Manage & Renew button in the My 2FA Credentials section on the MAG Dashboard.
3. On the Manage OTP page, select the Renew button to open Exostar’s Web Store.
4. Select the appropriate credential type from the drop-down to display a list of available renewal options.
5. Select the desired credential row.Click the Add to Cart button.
6. Click the Proceed to Checkout button.
7. On the Payment Information page, select to pay via credit card or invoice. Fill out all required information. Click Continue.
8. On the Review and Submit Your Order page, click the Disclaimer link and review the information. Once you complete your review, select the checkbox next to I have read and acknowledged the following Disclaimer prior to purchase.
9. Click Submit Order.
2. Select the Manage & Renew button in the My 2FA Credentials section on the MAG Dashboard.
3. On the Manage OTP page, select the Renew button to open Exostar’s Web Store.
4. Select the appropriate credential type from the drop-down to display a list of available renewal options.
5. Select the desired credential row.Click the Add to Cart button.
6. Click the Proceed to Checkout button.
7. On the Payment Information page, select to pay via credit card or invoice. Fill out all required information. Click Continue.
8. On the Review and Submit Your Order page, click the Disclaimer link and review the information. Once you complete your review, select the checkbox next to I have read and acknowledged the following Disclaimer prior to purchase.
9. Click Submit Order.