Configuration of Activation Recovery
PowerAuth Server supports activation recovery in case user loses mobile device or it gets stolen. Activation recovery can be enabled using PowerAuth Admin.
Enabling Activation Recovery
By default activation recovery is disabled, which means that if the user loses the mobile device a new activation needs to be created.
Activation recovery allows recovering the activation using a recovery code and recovery PUK without going through the complicated activation process.
The activation recovery is described in details in Activation Recovery documentation.
There are two types of activation recovery:
Enabling Activation Recovery for Activations
You can enable Activation Recovery for Activations using following steps in PowerAuth Admin:
- Find the Application you want to configure using
Applicationstab. - Navigate to the
Recovery Settingstab. - Enable the
Activation Recovery Enabledcheckbox
From now on the PowerAuth Server will generate recovery codes and PUKs for new activations. Users will be asked to write down the recovery code and PUK during an activation and they can use these details to recover an activation later on.
Enabling Activation Recovery using Recovery Postcard
You can enable Activation Recovery using Recovery Postcard using following steps in PowerAuth Admin:
- Find the Application you want to configure using
Applicationstab. - Navigate to the
Recovery Settingstab. - Enable the
Activation Recovery Enabledcheckbox (should be already enabled, see chapter Enabling Activation Recovery for Activations) - Enabled the
Recovery Postcard Enabledcheckbox
The Recovery Postcard Public Key value contains public key for key exchange with Recovery Postcard printing center which represents PowerAuth server.
This key needs to be entered into the Recovery Postcard Printing Center application and it enables secure sharing of recovery code and PUK data.
You need to configure the Recovery Postcard Printing Center Public Key which represents the Recovery Postcard printing center.
This key is provided by the Recovery Postcard Printing Center application and is also required for secure sharing of recovery code and PUK data.
The checkbox Allow Multiple Recovery Codes for User is used to configure whether existing recovery codes for the user need to be revoked before
creating another recovery code. In case the checkbox is enabled, it is not necessary to revoke existing codes and multiple recovery postcards can exist.
Otherwise revoking recovery code is necessary before creating a new recovery code.
Once activation recovery using recovery postcard is configured it is possible to create recovery postcards with recovery codes and PUKs and distribute them securely to users.