Manage your Hardware Token

Prescribers order a Hardware Token as part of the EPCS Registration process. The Hardware Token is a One-Time Password (OTP) device that can be used to authenticate a transmission for a controlled substance prescription. It typically takes 3-5 business days to receive the hardware token.

Before you Begin: Complete EPCS Registration Part 1: Verify Prescriber Information 

Jump to Section: [Add & Activate the Hardware Token] [Deactivate the Hardware Token]

NOTE: Although it is not required, we strongly suggest you activate your Hardware Token. If you do not, and are unable to use your phone to authenticate a transmission for a controlled substance, your EPCS account will be deleted. You will need to pay for a new license and go through the EPCS Registration Process again. Most providers Use the Authy App on their phone as their preferred OTP device and have the Hardware Token as a backup.

Add and Activate the Hardware Token

1. Click the EPCS Device Management link from the EPCS User Controls section of the Admin tab.
   
   
2. Click the Authenticate button in the Manage Phones section, then enter the One-Time Password Code and click Submit. You can Authenticate using an OTP device, or via text message or phone call. 
   
   • If the Authenticate button is grayed out, you can skip this step.
     
     
     
     
3. Click the Add Token button in the Manage Token section.
   
   
   
   
4. Enter the Token Serial Number from the back of the Hardware Token.
   
   • The Serial Number is the largest identifier on the back and contains both letters and numbers. 
     
     
     
     
5. Click the White Button on the front of the Hardware Token to receive a One-Time Password, then Enter this number in the One-Time Password 1 field. Repeat this process for the One-Time Password 2 field.
6. Click the Submit button.
   
   
   
   
7. Your Exostar Account indicates that Token Status is Active. Click Cancel to return to NewCrop.
   
   

[Back to Top]

Deactivate the Hardware Token

A Hardware Token should only be deactivated if it is lost or broken. Once a Hardware Token is deactivated, it can not be used again.

NOTE: Never click the Revoke Account button in the EPCS Device Management section. Once an account has been revoked, if a provider needs to transmit a controlled substance via NewCrop, they will need to pay for a new license and go through the EPCS Registration Process again.

1. Click the EPCS Device Management link from the EPCS User Controls section of the Admin tab.
   
   
   
   
2. Click the Deactivate Token button in the Manage Token section. A pop up window asks you to confirm the action. 
   
   
   
   
3. Select a Reason for deactivating the token and click the Deactivate Token button.
   
   

[Back to Top]