Please note

Only use the one-time security code received from the IT-ServiceDesk to log in to the Token Manager, as the code is only valid once.

If you do not have access to your tokens (e.g. token lost or used up), we must reset your multifactor authentication. This requires an identity check.

You have the following options for an identity check:

1. In person
2. Via power of attorney
3. Via post
4. Via in-house mail (RWTH employees only)

After the identity check, the IT-ServiceDesk will issue a one-time security code.

Please use this security code to log in to the Token Manager and create new tokens.

We recommend that you create at least two different tokens.

You can find instructions on creating tokens under Next Steps.

Identity check in person

You can visit one of our IT-ServiceDesk in person and present a valid identification document (ID card, passport, German residence permit).

You do not need an appointment.

Via power of attorney

You can grant an informal power of attorney to a third party, who will then be given your one-time security code.

The authorized person must come to the IT-ServiceDesk during opening hours and bring the following documents with them:

• The informal power of attorney clearly stating that the person may collect your one-time security code.
• A copy of your ID (name, date of birth and ID validity must be visible; irrelevant data can be blacked out).
• Their own ID (ID card, passport, German residence permit).

Via post

If you or a third party are unable to come to the IT-ServiceDesk, you can send us a request by post. Please enclose the following documents:

• a written request asking for the one-time security code to be sent to you, dated and signed by hand;
• a copy of your identity card, passport or residence visa;
• a sufficiently stamped and suitably addressed return envelope.

Please send your request to the following address:

IT Center
RWTH Aachen University
IT-ServiceDesk
Seffenter Weg 23
52074 Aachen

Via in-house mail

This option only applies to RWTH employees!

Upon personal request (via telephone or e-mail), the IT-ServiceDesk will send the one-time security code to employees by in-house mail to the business address provided in RWTHcontacts.

Next Steps

• Authenticator App e.g. for Smartphone, Laptop or Desktop (TOTP)
• Hardware Token for VPN and RWTH Single Sign-On (HOTP)
• Hardware Token for RWTH Single Sign-On (WebAuthn/FIDO2)