Turn on Two-Step Verification in new Centrestack

For build 12.12.570.53288 and later. For previous builds, check the article here.

Two-Step Verification helps protect your account by adding an extra layer of security. Besides of the Password, the user will need to type in extra security info. Usually, it is a code generated by a third party tool as Google, Microsoft Authenticator or Amazon MFA (Multi-Factor Auth).

This article covers 3 fundamental points: Turning on, Configuring it and Using Two-Step Verification in CentreStack.

1. How Turn on Two-Step Verification?

In clean Centrestack 12.12.570.53288 or later, Two Step Verification is always enabled.

If Centrestack is upgraded from previous releases, can access the cluster setting.  As Cluster Admin, access the Cluster Dashboard and go to Cluster Settings / Cluster Settings. Here enable 'Turn on 2-step Verification' and Save the changes.

2. How to Configure Two-Step Verification?

Once the Two-Step Verification has been turned on, can be configured at multiple levels: Cluster Group Policies (affects the whole Cluster), Tenant Admin Group Policies (affect all Tenant users) and Role (only affects the particular users added to a Role). Always keep in mind that a change in higher level in the Policies overwrite the lowest levels.

For more details about the 2-Step Verification Settings, visit the Administration Guide.

 Cluster Admin

The Cluster Admin scope applies to the whole cluster, all users will follow this policy.

• Login web portal as Cluster Admin
• Go to Settings / User Account & Security / User Account / 2-Step Verification

 Tenant Admin

Tenant scope only affects the users that belong to the Tenant.

• Login web portal as the Tenant Admin
• Go to Settings / User Account & Security / User Account / 2-Step Verification

 Role

The Role scope applies to all the users assigned to a specific Role.

• Login web portal as Tenant Admin
• Go to Dashboards / Roles / Create a new Role / Policies tab / Enforce 2-Step Verification on users

3. How to Use Two-Step Verification?

When Two-Step Verification has been enabled, but it is not forced for the User, once the user logs into the web portal session, can enable it.

• Login web portal as a User
• Go to the User's Menu at the top right  / Two-Step Verification

Once enabled, follow the steps:

Step 1: Do This from Authenticator App. Use your app to scan the barcode, or use the secret key (p)

Step 2: Verify the Security Code. Enter the security code from the authenticator

Step 3: Backup Email. Specify the backup email that will be used when authenticator doesn't work or is not available

Step 4: Enable (if desired) Two-Step Verification for Desktop Clients or Mobile Applications

When Two-Step Verification has been Enabled by the User, after the user enters the password to authenticates, the system will ask for the Security Code

When Two-Step Verification has been Forced by the Admin, and the user hasn't configured from his side, the Two-Step Verification configuration will be prompted (shown above) when the user logs in web portal.