I'm trying to secure my firewall machine by enabling OPT for Opnsense. At a glance, it seems straight forward, see https://wiki.opnsense.org/manual/how-tos/two_factor.html. However, it doesn't seem to be working as intended, the authentication fails when the OTP token is included although it works fine using the builtin Tester.
OTP Configuration for root user:
Auth Servers OTP Configuration OTP Configuration for root user
Is there an extra step that I'm missing here?