Authenticator licensing: multi-device licensing and multi-device activation

OneSpan Authentication Server supports multi-device licensing and multi-device activation.

Multi-device licensing

With the multi-device licensing model, each authenticator serial number corresponds to a unique authenticator license; consequently, for each authenticator device complaint with the multi-device licensing model, the corresponding DIGIPASS export file (DPX) contains one authenticator master application for each authenticator license. These authenticator instances are represented in OneSpan Authentication Server as authenticators with a single authenticator master activation application.

Multi-device activation

In the multi-device activation process, a two-step activation process, two separate activation messages are used for activating the device(s). This serves to guarantee that only the intended end user, and not an adversary who has intercepted one of the messages, can perform the activation. This multi-device activation is a different process from the standard software authenticator activation and requires authenticator devices and DPX files compliant with the multi-device licensing model. When a compliant authenticator is activated, settings and secrets are written into the device.