Disabling OTP authentication

Question

<sigh> I made the dumb mistake of enabling OTP and now find myself unable to login to WebAdmin, on the mistaken assumption that the auto-creation would take place when I logged into WebAdmin. IIRC, SSH was disabled. Plus, to add to my misery, I was in the process of troubleshooting why the User Portal wasn't working (which, presumably, is where the auto-creation for OTP takes place). Would anyone happen to have any suggestions on the easiest way to fix this? I of course have access to the box on which Sophos is installed. I only enabled OTP for WebAdmin and User Portal.

This thread was automatically locked due to age.

Ry Guy · Accepted Answer

Hi dma0, 
 
Are you using a virtual machine or hardware? As long as you can get access to the console shell you are not out of luck (serial cable or monitor/keyboard directly - or VM console). Once you get access to the Firewall Console Interface as root you can disable otp. 
 
Here is a KB on resetting passwords: www.sophos.com/.../115346.aspx 
 
For specific steps on how to disable otp someone has actually already written a very helpful article (third party) which will fix your predicament: 
 matavesi.com/.../