Creating a CSR via the web interface

The behavior in the default UI appears to be the same as described here:

The OTP PIN field is not visible.