Sophos SG UTM: OTP QR Code doesn't work

Hi Fabio

Have a look at this post: Change OTP tokens from SHA-1 to SHA-256 - General Discussion - UTM Firewall - Sophos Community

Maybe it helps you through the SHA-Jungle with authenticators.

Janbo

Olá Fabio,

If going through the procedure recommended by Janbo doesn't fix this for you, please copy the relevant lines here from the User authentication log when the login fails.

Cheers - Bob
PS my lab is on 9.707 and this works fine with the Sophos Authenticator app on my iPhone.

Hi Janbo,

I checked the post you suggested and that was it. I had not tested SHA1 before, but I simulated the three apps with SHA1 and worked in all. Below is a summary of the tests:

Google Authenticator
- Using SHA1 > Worked
- Using SHA256 > Failed
- Using SHA512 > Failed

Microsoft Authenticator
- Using SHA1 > Worked
- Using SHA256 > Failed
- Using SHA512 > Failed

Sophos Authenticator*
- Using SHA1 > Worked
- Using SHA256 > Worked
- Using SHA512 > Worked

*I believe I got something wrong when I tested Sophos Authenticator with SHA256 at the first time, it didn't work, but now is OK.

Thanks a lot for the help!

Hello BAlfson,

The procedure recommended by Janbo worked, really the Google and Microsoft Authenticator apps doesn't works fine with SHA256 or SHA512.

Thanks a lot!