How to use SecuriToken with Amazon Web Services

&nbsp

From version 1.3 onwards you can use SecuriToken with your Amazon Web Services (AWS) account. Previous versions did not support this because users were unable to enter an arbitrary length seed/secret. AWS uses an arbitrary length base 32 seed with a TOTP, 6 digit, 30 second one time password.

The process is described below:

Enable MFA on your account

Amazon allows you to enable multi-factor authentication on your account here... and pressing Enable MFA AWS Device.

When prompted select Virtual MFA Device and press Continue.

Click Manage MFA Device, this is located in the lower right of the web page.

When you are presented with the QR Code for the device you need to press 'Show secret for MFA Device'. This allows you to copy the secret/seed that can now be pasted into SecuriToken.

Finally, press 'Click here to enable your device'.

You are now ready to use SecuriToken to enable the device.

Set up SecuriToken

Add a new token in SecuriToken by pressing the plus + button at the bottom of the application window. Configuration is very simple. Paste the seed/secret that you copied from the AWS website into the seed text box, ensuring that you specify the seed as base 32 encoded.

It is also very important to ensure that you select a OTP passcode length of 6 digits and a time step of 30 seconds.

Back in Amazon Web Services setup

To enable your virtual device Amazon asks that you enter two consecutive OTP passwords. Simply generate a one time password in SecuriToken by double clicking your new token entry. Enter this as your first password on the AWS website.

Wait for 30 seconds and then generate the second password (make sure it is not the same as the first password, if it is wait another few seconds and generate the next password). Once you have both passwords entered, press 'Activate Authentication Device' on the Amazon Web Services website and you are done!

You can now use your SecuriToken to authenticate with Amazon Web Services. SecuriToken can be purchased on the Mac App Store (Click the link below).