Using Feitian C200 Hardware Tokens for Microsoft MFA
Departments may purchase Feitian C200 OATH‑TOTP hardware tokens for employees who cannot use mobile‑based authentication. This article explains how departments should purchase, store, issue, and request activation of these tokens.
Approved Token Model
Purdue currently supports only the following hardware token models for Microsoft MFA:
Feitian OTP c200 (OATH‑TOTP Token)
This model is compatible with Microsoft Entra ID MFA and meets Purdue’s requirements.
How to Order
Departments can follow the ordering instructions here:
Article - How do I obtain a physical ...
Please note that either of the two tokens listed in the article can be purchased.
Overview of Department Responsibilities
Departments that purchase Feitian C200 tokens must:
- Store tokens securely
- Track which token serials belong to which users
- Submit assignment information to the Identity and Access Management Office (IAMO)
- Ensure the employee schedules an activation meeting
- Report when a token is lost, damaged, returned, or needs to be reassigned
IAMO cannot register or activate a token until departmental information is submitted.
New Departments: Getting Started
Before a department can begin issuing Feitian C200 tokens, the Identity and Access Management Office (IAMO) must set up the department in the MFA token tracking system. This information must come from a manager, director, or technical coordinator.
Departments must provide the following information to IAMO:
| Required Information |
Description |
| Department Name |
Full department or unit name as it should appear in the tracking system |
| Primary Contact |
Person responsible for managing tokens within the department |
| Email for Notifications |
Where IAMO should send activation or tracking‑related messages |
| Authorized Requesters |
List of staff who are permitted to issue tokens and submit assignment forms |
| Estimated Initial Token Count |
Expected number of tokens to be purchased/managed |
Departments may fill out the following form to submit this information:
New Department Setup for MFA Hardware Token
Once IAMO receives the form, the department will be added to the tracking system and may begin purchasing and issuing tokens. IAMO will notify the requester when this is ready.
Seed File
Please do not submit the Seed File with the rest of the information to IAMO. When the order is placed for the hardware tokens, an email will be sent to the email address used to place the order containing a seed file. The user will receive two emails from Feitian. The first email contains instructions and the PDF file that contains the seed information. The second email sent from Feitian will contain the Password.
Once IAMO receives the initial information form, IAMO will reply with instructions for sending the Seed File and Password.
Information Required When Issuing a Token
When a token is assigned to a user, departments must provide:
| Field |
Description |
| Department |
Department or unit name |
| Serial Number |
The Feitian C200’s printed serial number
|
| Authorized Requester |
Staff member issuing the token |
| Recipient Username |
Employee’s Purdue Career Account username |
| Date Assigned |
Date the token was given to the employee |
This information ensures accurate tracking and allows IAMO to activate the token.
How to Find the Serial Number?
Locate the serial number on the back of the OTP c200 token.
Submitting Token Assignment Information
Departments must supply token assignment information using the official submission form:
Once the form is submitted, IAMO is notified that the user needs token activation.
Scheduling the Activation Meeting
After IAMO receives the token assignment form:
-
The employee will receive an email from purdueitreplies@purdue.edu requesting a time to schedule an activation time.
-
The employee meets briefly (typically 5–10 minutes) with IAMO.
During the activation meeting IAMO will:
- Verify the user's identity
- Validate the Hardware Token the user has at the time of the call matches the information we have received.
- Activate the token in Microsoft Entra ID
- Confirm the user can log in with the token.
Tokens cannot be activated without this meeting. The recipient of the hardware token must have their ID with them during the call (Purdue ID/Driver's license/passport are acceptable forms).
Returning, Reassigning, or Retiring Tokens
If a token is returned, reassigned, or no longer functional, please submit a ticket by emailing accounts@purdue.edu to report its status.
Support and Questions
For help with Microsoft MFA hardware tokens or departmental processes, contact:
Identity and Access Management Office (IAMO)
Email: accounts@purdue.edu