ootp/doc/otp-sct.sgml

<!DOCTYPE refentry PUBLIC "-//Davenport//DTD DocBook V3.0//EN">

<!-- $Id: otp-sct.sgml 62 2009-12-18 17:26:31Z maf $ -->

<refentry>

<refmeta>
<refentrytitle>
<application>otp-sct</application>
</refentrytitle>
<manvolnum>1</manvolnum>
</refmeta>

<refnamediv>
<refname>
<application>otp-sct</application>
</refname>
<refpurpose>
Smart Card Terminal for One Time Password package.
</refpurpose>
</refnamediv>

<refsynopsisdiv>
<cmdsynopsis>
<command>otp-sct</command>
<arg>-1hlpv?</arg>
<arg>-c<replaceable> count</replaceable></arg>
<arg>-d<replaceable> debug_level</replaceable></arg>
<arg>-i<replaceable> index</replaceable></arg>
<arg>-r<replaceable> reader</replaceable></arg>
<arg>-v<replaceable> firmware_api_version</replaceable></arg>
</cmdsynopsis>
</refsynopsisdiv>


<refsect1>
<title>DESCRIPTION</title>
<para>
The <command>otp-sct</command> command is a user interface to generating
One Time Passwords with a Smart Card loaded with OTP software.
</para>
</refsect1>

<refsect1>
<title>OPTIONS</title>
<variablelist>

<varlistentry>
<term>-c<replaceable> count</replaceable></term>
<listitem>
<para>
Configure the optional count parameter to sync a Smart Card to a challenge.
</para>
</listitem>
</varlistentry>

<varlistentry>
<term>-d<replaceable> debug_level</replaceable></term>
<listitem>
<para>
Set debug level.
</para>
</listitem>
</varlistentry>

<varlistentry>
<term>-h</term>
<listitem>
<para>
Help.
</para>
</listitem>
</varlistentry>

<varlistentry>
<term>-i<replaceable> index</replaceable></term>
<listitem>
<para>
Set the 8 bit index.  The Smart Card contains numerically indexed records
for each host system.  Use the -l option to list hostnames associated with
the index.  The default index is 0.
</para>
</listitem>

<varlistentry>
<term>-l</term>
<listitem>
<para>
List SC Readers
</para>
</listitem>
</varlistentry>

<varlistentry>
<term>-L</term>
<listitem>
<para>
List host systems configured on the Smart Card.  The index is used with the -i option.
</para>
</listitem>
</varlistentry>

<varlistentry>
<term>-o</term>
<listitem>
<para>
Set new PIN.
</para>
</listitem>
</varlistentry>

<varlistentry>
<term>-r<replaceable> reader</replaceable></term>
<listitem>
<para>
Set Smart Card reader.  Use -l to list available readers.  A reader
is defined as class:reader:<optional>option</optional>.  PCSC and embedded
are the two available classes.  The embedded class contains the acr30s driver
which is specified as embedded:acr30s:<optional>serial_port</optional>.
If pcscd is running the first PC/SC reader will be the default followed by
the embedded acr30s driver.  Use PCSC: for the first available PC/SC
reader.  Use embedded:acr30s:/dev/cuaU0 for the embedded acr30s driver
with serial port /dev/cuaU0.
</para>
</listitem>
</varlistentry>

<varlistentry>
<term>-v<replaceable> card_api_version</replaceable></term>
<listitem>
<para>
Set the Smart Card API version.  The binary API between the terminal
and Smart Card changed between version 2 and 3.  See command mode notes
above.  The default version is 3.  Configuring version 2 will allow
maintenance of Smart Card with version 2 firmware.
</para>
</listitem>
</varlistentry>

<varlistentry>
<term>-V</term>
<listitem>
<para>
List the Smart Card firmware version.
</para>
</listitem>
</varlistentry>

<varlistentry>
<term>-1</term>
<listitem>
<para>
Use the version 1 GetHOTP command instead of the default GetHOTPHostCount32.
The latter is not available on firmware revision 1.  GetHOTP may be conditionally
compiled out of newer firmware.
</para>
</listitem>
</varlistentry>

</variablelist>
</refsect1>

<refsect1>
<title>EXAMPLES</title>

<informalexample>
<para>
Generate a HOTP for the first system on the first PCSC reader found.
</para>
<screen>
<command>otp-sct -r PCSC:</command>

<computeroutput>Enter PIN: 12345
HOTP: dev1.eng 2A5AB4B78D</computeroutput>

</screen>
</informalexample>

<informalexample>
<para>
List systems configured on Smart Card in default reader.  Generate HOTP
for dev3.eng with count 32.
</para>
<screen>
<command>otp-sct -L</command>

<computeroutput>Enter PIN: 12345
00:dev1.eng
01:dev2.eng
02:dev3.eng
03:vpn1.eng</computeroutput>

<command>otp-sct -i 2 -c 32</command>

<computeroutput>Enter PIN: 12345
HOTP: dev3.eng 2A9BE3F142</computeroutput>

</screen>
</informalexample>

<para>
Note that hosts with the READERKEY flag set will not be displayed.
<command>otp-sct</command> can not set the reader key.
</para>

</refsect1>

<refsect1>
<title>AUTHOR</title>
<para>
<author>
<firstname>Mark</firstname>
<surname>Fullmer</surname>
</author>
<email>maf@splintered.net</email>
</para>
</refsect1>

<refsect1>
<title>SEE ALSO</title>
<para>
<application>otp-sca</application>(1)
<application>otp-control</application>(1)
<application>pam_otp</application>(1)
<application>htsoft-downloader</application>(1)
<application>otp-ov-plugin</application>(1)
<application>bcload</application>(1)
<application>urd</application>(1)
<hardware>spyrus-par2</hardware>(7)
</para>
</refsect1>

</refentry>