Two Factor Authentication (2FA)

NOTE  2FA is only supported on AlmaLinux 9

NOTE  Unified Bare Metal Restores (UBMR) require two-factor authentication (2FA) to be temporarily disabled.
Upon the completion of the UBMR restore, 2FA should be re-enabled.
This will require re-enrolling users.

Setting up 2FA

  1. Log in to Unitrends as a superuser.
  2. From the left menu, select Configure.
  3. Click Edit.
    2FA reset
  4. Click the Users tab.
  5. Click the Enable 2FA button at the bottom.
    2FA enable
  6. Enter Enable to proceed.
    2FA Requirements
  7. Acknowledge the success message.

NOTE  After upgrading of UB, the browser must be hard-reset.
To hard-reset your browser:
1. Hold down the Shift key and click on the reload icon on your browser's toolbar.
2. Use keyboard shortcuts such as Ctrl+F5 or Ctrl+Shift+R.

NOTE  All devices used in authentication must have their "Set time automatically" options set to true.

First 2FA login

  1. On your first login after 2FA is enabled, you will see the 2FA welcome message.
    2FA Welcome
  2. Click Next.
  3. Click Enable on the two-factor authentication requirements dialog.
  4. Click Set up 2FA to begin setting up 2FA.
  5. Click Next on the two-factor authentication dialog.
  6. See the Set up 2FA screen.
    2FA setup
  7. Scan the QR code with your authentication app.
  8. Enter the code generated by the app.
  9. Click Verify.
  10. Click Continue to UI.

2FA logins after setup

After your first 2FA login, use your authentication app to get an authentication code for each login.

Reset 2FA for a user via the UI

  1. From the left menu, select Configure.
  2. Click Edit.
    2FA reset
  3. Click the Users tab.
  4. From the Username list, select the user to perform 2FA reset.
  5. Click Edit.
    2FA edit
  6. Click on Click to Reset.
    2FA Click
  7. Click the green check mark to confirm.
    2FA Confirm
  8. The success message confirms that 2FA was reset for your user.
    2FA success

Reset 2FA via dpuconfig menu

NOTE  The dpuconfig menu is available via console on both physical appliances and virtual UB's.

  1. Access the console of your virtual UB.
  2. Choose your virtual machine.
  3. From the Console menu, select Open browser console.
    2FA Browser Console
  4. Select Open browser console.
  5. On the Console Interface, enter 5 for Advanced Options.
    2FA Console reset
  6. On the Advanced Options Menu, enter 3 for Reset User 2FA for UI
  7. Enter the id of the user to have their 2FA reset.
    2FA Console Uid
  8. Acknowledge the success message to return to the console menu.