Before you can use SafeNet MobilePASS+ to generate passcodes, you must enroll a token on your device. The token can be either a SafeNet MobilePASS+ token or a third-party token.

You can enroll a SafeNet MobilePASS+ token using one of the following methods:

• Self-enrollment – (STA only) Enroll a token from the user portal, and then use it immediately to log in.

• Automatic enrollment – Automatically copy and paste the activation code into the Auto Enrollment window by clicking the Enroll your SafeNet MobilePASS+ token link on the notification email.

• QR code enrollment – Scan a QR code to enroll your SafeNet MobilePASS+ token. This is recommended when you cannot receive email or open the self-enrollment URL from the target device.

• Copy-paste enrollment – Manually copy and paste the activation string into the activation string field if you have difficulties with automatic enrollment.

As a security best practice Thales Group recommends that users do not use the copy and paste function for the OTP or enrollment strings because the clipboard is shared among all applications running on a device.

A Secure Sockets Layer (SSL) connection with the SafeNet Trusted Access (STA) or SafeNet Authentication Service Private Cloud Edition (SAS PCE) server is required for all SafeNet MobilePASS+ token activation methods.

Self-enrollment

(STA only) You can enroll SafeNet MobilePASS+ tokens using either of the following methods:

• Perform all enrollment steps (from initiation to completion) on the same mobile device

• Initiate enrollment on a Windows or Macintosh desktop device and complete the process on a mobile device or the initial desktop device

If you don't already have a token, the self-enrollment process guides you through the steps to install the SafeNet MobilePASS+ authenticator app on your mobile device, enroll a token on your mobile device, and then log in to the user portal.

To follow the self-enrollment steps, you need the following:

• A device, such as a laptop, where you can connect to the user portal

• A mobile device where you can install the SafeNet MobilePASS+ app

To self-enroll:

1. From your device, open the user portal using the link provided by your system administrator.

2. On the user portal start window, select Start.

   

3. Enter your Username and then select Login.

   

4. Select Add Authenticator.

   

   The system sends you an email that contains a verification code.

5. Enter the verification code from the email into the text box on the Confirm Your Identity screen.

6. Select Continue.

   

7. To confirm your identity, enter your password and then select Submit.

   

8. Select Authenticator App and then select Submit.

   

9. Select Android Phone or Tablet.

   

   The Set Up MobilePASS+ on Android screen displays.

   The easiest way to install the MobilePASS+ app and to enroll a token is to scan a QR code image with your mobile device. To use QR codes, allow MobilePASS+ to access the camera on your mobile device. Go to Settings > MobilePASS+ and enable Camera permission.

10. Follow the instructions on the screen:

    1. Download the SafeNet MobilePASS+ app from Google Play.

    2. Open SafeNet MobilePASS+ and then select Activate to scan the QR code.

    

    After successful activation, if push is enabled, a notification is sent to the device.

11. Either approve the push notification or enter an OTP from your new token.

    

    After you approve the login request or enter a passcode, your token is enrolled.

Automatic enrollment

After your system administrator assigns you a token, you will receive a notification email.

To enroll a SafeNet MobilePASS+ token automatically:

1. Select the https:// link in the email.

   

   The SafeNet Authentication Service Private Cloud Edition Self-Enrollment web page displays.

2. Select Enroll your SafeNet MobilePASS+ token.

   

3. Select Open to launch the SafeNet MobilePASS+ app.

4. Go to Activating your token.

QR code enrollment

QR code enrollment is available only if your system administrator has configured your token to support it.

After your system administrator assigns you a token, you will receive a notification email.

To enroll a SafeNet MobilePASS+ token by scanning the QR code:

1. Open the enrollment email.

2. Select the https:// link in the email.

   

   The SafeNet Authentication Service Private Cloud Edition Self-Enrollment web page displays.

3. Select Android from the list of supported devices.

   The QR code displays.

   

4. On your mobile device, open the SafeNet MobilePASS+ app.

   The SafeNet MobilePASS+ app displays the welcome screens that briefly describe the advantages of using the SafeNet MobilePASS+ app.

5. On the Welcome to MobilePASS+ screen, click Next.

   

6. On the Protect Multiple Accounts screen, select Next.

   

7. Use your mobile device to scan the QR code.

8. On the Quick Setup screen, select Activate Now.

   

9. Go to Activating your token.

Copy-paste enrollment

As a security best practice Thales Group recommends that you do not use the copy and paste function for the OTP or enrollment strings because the clipboard is shared among all applications running on a device.

To enroll SafeNet MobilePASS+ by copying and pasting the activation string:

1. Copy the activation string from the web page to your clipboard.

   

   To copy the activation string:
   - Long-tap on the activation string.
   - Drag the set of bounding handles to include the whole activation string.
   - Tap the selected text again to copy the activation string to the clipboard.

2. Open the SafeNet MobilePASS+ app.

3. On the Welcome screen and the Protect Multiple Accounts screen, select Next.

   

4. On the Quick Setup screen, select Activate Now.

   

5. Select No QR Code?.

   

6. Paste the activation string that you copied from the email into the text box and then select Continue.

   

7. Go to Activating your token.

Activating your token

The SafeNet MobilePASS+ app guides you through the steps to set up the authenticator and activate your token.

Some features are available only if your system administrators allows or requires them, such as push notifications, PINs, and fingerprint access.

1. Start token activation by either of the following methods:

   • QR code enrollment

   • Copy-paste enrollment

2. On the One-Time Passcode screen, select Continue.

   

3. On the Push Authentication screen, select Continue.

   

4. Select Allow for any permissions that are requested, such as access to the camera or push notifications.

   

5. Enter a PIN code and then select Continue.

   The type and number of characters required is indicated on the screen.

   

   Your system administratorYour can configure your token to work with a token PIN, server PIN, or no PIN. If configured for no PIN, you will not be prompted to enter a PIN.

6. Enter the code again and then select Continue.

   

7. Select Done.

   

   Your new SafeNet MobilePASS+ token displays.

   

   You can now use your token when you log in.

Creating a token

1. Open the SafeNet MobilePASS+ app.

2. Select the Add icon.