For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

One Time Passwords via an SMS Gateway with BIG-IP Access Policy Manager

One time passwords, or OTP, are used (as the name indicates) for a single session or transaction.  The plus side is a more secure deployment, the downside is two-fold—first, most solutions involve a ...
Published Feb 08, 2011
Version 1.0
adn
automation
BIG-IP
BIG-IP Access Policy Manager (APM)
dev
industry
management
monitoring
news
security
JRahm's avatar
Icon for Admin rankAdmin
Christ Follower, Husband, Father, Technologist. I love community and I especially love THIS community. My background is networking, but I've dabbled in all the F5 iStuff, I'm a recovering Perl guy, and am very much a python enthusiast. Learning alongside all of you in this accelerating industry toward modern apps and architectures.
View Profile
JRahm's avatar
Icon for Admin rankAdmin
Christ Follower, Husband, Father, Technologist. I love community and I especially love THIS community. My background is networking, but I've dabbled in all the F5 iStuff, I'm a recovering Perl guy, and am very much a python enthusiast. Learning alongside all of you in this accelerating industry toward modern apps and architectures.
View Profile
Aung_Thurein_72's avatar
Aung_Thurein_72
Icon for Nimbostratus rankNimbostratus
Apr 11, 2012
There are views that tcl rand() srand() functions are not secure enough to use it for OTP generation.

 

 

In that case, [AES::key ] can be used for random number generation.

 

 

set otp [string range [expr 0x[string range [AES::key 128] 24 end]] 3 end]

 

 

Regards,

 

- Aung