ePrescribe V2 - How to Activate your Hardware Token

Owned by Dylan Nigh
Dec 05, 2023
3 min read

This article covers how to activate your Hardware Token for use in electronically prescribing controlled substances (EPCS). This information is adapted from NewCrop’s article located here:

TBH Sites

Prescribers order a Hardware Token as part of the EPCS Registration process. The Hardware Token is a One-Time Password (OTP) device that can be used to authenticate a transmission for a controlled substance prescription. It typically takes 3 - 5 business days to receive the hardware token.

Most providers Use the Authy App on their phone as their preferred OTP device and have the Hardware Token as a backup.

Adding and Activating a Hardware Token

  1. In the ePrescribe interface, under the Admin tab, locate the “EPCS User Controls” section and select “EPCS Device Management”, as shown in the image below:

  1. Click the Authenticate button in the Manage Phones section, then enter the One-Time Password Code and click Submit. You can Authenticate using an OTP device, or via text message or phone call. 

    • If the Authenticate button is grayed out, you can skip this step.

  1. Click the Add Token button in the Manage Token section.

  1. Enter the Token Serial Number from the back of the Hardware Token.

  • The Serial Number is the largest identifier on the back and contains both letters and numbers. 

  1. Click the White Button on the front of the Hardware Token to receive a One-Time Password, then Enter this number in the One-Time Password 1 field. Repeat this process for the One-Time Password 2 field.

  2. Click the Submit button.

  1. Your Exostar Account indicates that Token Status is Active. Click Cancel to return to NewCrop.

Deactivating the Hardware Token

A Hardware Token should only be deactivated if it is lost or broken. Once a Hardware Token is deactivated, it can not be used again.

NOTE: Never click the Revoke Account button in the EPCS Device Management section. Once an account has been revoked, if a provider needs to transmit a controlled substance via NewCrop, they will need to pay for a new license and go through the EPCS Registration Process again.

  1. Click the EPCS Device Management link from the EPCS User Controls section of the Admin tab.

  1. Click the Deactivate Token button in the Manage Token section. A pop up window asks you to confirm the action. 

  1. Select a Reason for deactivating the token and click the Deactivate Token button.