Hanzo
PlatformHanzo KMSPlatformDynamic Secrets

TOTP

Learn how to dynamically generate time-based one-time passwords.

The Hanzo KMS TOTP dynamic secret allows you to generate time-based one-time passwords on demand.

Prerequisite

  • Hanzo KMS requires either an OTP url or a secret key from a TOTP provider.

Set up Dynamic Secrets with TOTP

Open the Secret Overview dashboard and select the environment in which you would like to add a dynamic secret.

Add Dynamic Secret Button

Dynamic Secret Modal

Name by which you want the secret to be referenced

There are two supported configuration types - url and manual.

When url is selected, you can configure the TOTP generator using the OTP URL.

When manual is selected, you can configure the TOTP generator using the secret key along with other configurations like period, number of digits, and algorithm.

OTP URL in otpauth:// format used to generate TOTP codes.

Base32 encoded secret used to generate TOTP codes.

Time interval in seconds between generating new TOTP codes.

Number of digits to generate in each TOTP code.

Hash algorithm to use when generating TOTP codes. The supported algorithms are sha1, sha256, and sha512.

Dynamic Secret Setup Modal Dynamic Secret Setup Modal

After submitting the form, you will see a dynamic secret created in the dashboard.

Once you've successfully configured the dynamic secret, you're ready to generate on-demand TOTPs. To do this, simply click on the 'Generate' button which appears when hovering over the dynamic secret item.

Dynamic Secret

Once you click the Generate button, a new secret lease will be generated and the TOTP will be shown to you.

Provision Lease

How is this guide?

Last updated on

On this page