eToken Password Reset

eToken Password Reset

A number of our staff/faculty use a two-factor authentication technology called e-token to access sensitive applications.

Step-by-step guide

Please direct any password reset inquiries to an IT Team member.

  1. Password reset documentation can be found here:  T:\IT\Knowledge Base\InstructionManual_eTokenUsers.docx
  2. NOTE: When resetting a password the temp password is:  tp70ml2ajk0c


When setting up a new user, specific software needs to be installed. You can find the process here:  https://isea.utoronto.ca/services/etoken/information-for-department-administrators-2/

NOTE:  There is an issue setting up users on Macs as the OS asks for a PIN.  

The way this manifests itself is that when smart cards are paired, then users are asked to provide a PIN (personal identification number) instead of a password for common tasks, e.g.:

  • while the eToken is plugged in:
    • unlock screen if screensaver kicks in
    • escalation of user privileges

Users might not know that the PIN is not the same as their macOS password and might accidentally type in their macOS password too many times (instead of the eToken PIN), causing the eToken to be locked. This will undoubtedly lead to more user frustration.

To disable already existing pairing, issue in macOS Terminal, the following command:

sc_auth unpair -u haroon
where haroon my macOS username


If you have a brand new eToken and you have never paired before, to disable pairing UI to appear every time an unpaired SmartCard is inserted, issue the following command:

sc_auth pairing_ui -v -s disable

At this point, the Terminal might ask for you to Allow the administration of your device.

For setting up an e-token administrator, please see instructions here:  S:\IT\Working Documents\eToken Instructions




Feedback

If you have questions or suggestions about this content, contact us!