Can Excelsecu FIDO Security Keys support both FIDO and OTP on one device?
Yes. Excelsecu manufactures multi-protocol hardware authenticators. All eSecuFIDO models integrate FIDO2 (WebAuthn/CTAP2), (PIV& OpenPGP optional) and OATH-compliant HOTP/TOTP applets onto a single product. This allows enterprises to use FIDO2 for modern cloud SSO while retaining OTP functionality for legacy system fallback.
Do Excelsecu hardware OTP tokens require network connectivity or smartphones?
No. Excelsecu TOTP (Time-based) and HOTP (Event-based) tokens operate entirely offline. They generate 6-digit or 8-digit dynamic passwords locally on the device screen. This makes them strictly compliant for air-gapped environments, manufacturing floors, and secure facilities where mobile phones are prohibited.
How does Excelsecu help with OTP token provisioning and lifecycle management?
Excelsecu provides standards-based provisioning by supplying OATH-compliant seed files (optional in XML or CSV formats) via secure channels. These seeds are natively compatible with the Excelsecu OTP Server and third-party IAM (Identity and Access Management) platforms. Administrators can easily perform batch imports to provision tokens, track token assignments, and manage time-drift synchronization directly through the management console.
What should users do if an Excelsecu OTP token is lost or replaced?
If a token is lost, IT administrators must immediately revoke or unbind the token's unique serial number in the authentication server to prevent unauthorized access. Upon issuing a replacement token, the administrator links the new device's hardware seed to the user's existing account profile. Because the authentication logic is server-side, no user data is compromised from the lost hardware.
Can a malicious actor extract the private key from an Excelsecu PKI token?
No. All cryptographic key pairs are generated directly inside the token’s built-in secure smart card chip. Cryptographic signing operations are processed locally on the hardware, ensuring the private key never leaves the physical boundary of the token.
粤公网安备44030002005151号 
Consult now
Contacting via phone