# Two-Factor Authentication for Your CommCell Environment

You can use two-factor authentication (which is a form of multi-factor authentication) to add an extra level of security to the CommCell login requirements. Passwords alone might not provide enough security to protect your CommCell environment from unauthorized access.

#### How Does It Work?

When two-factor authentication is enabled, users must provide a 6-digit PIN (personal identification number) along with their passwords or use a web authenticator (such as Yubikey from Yubico) that uses the Fast Identity Online (FIDO2) authentication protocol in order to access the CommCell environment.

By default, the PIN and the web authenticator methods are enabled as the second verification step. Web authenticator verification takes precedence over PIN verification after users add their authenticator to their CommCell account.

Note

The system or mobile device running the authenticator app must have its time synchronized with the web server. This ensures that the Unix timestamp (epoch time) used by the authenticator app closely matches the server's time. Even a small time drift can lead to two-factor authentication failures.

##### How Do I Get a PIN?

Users can get a PIN by any of the following methods:

- Email: The CommCell server sends a one-time PIN to users every time they log on to the CommCell environment. These PINs are valid for 30 minutes.

- Authenticator Apps: Use the Google Authenticator App and the Microsoft Authenticator App to generate the unique six-digit PIN that is required when two-factor authentication is enabled.

##### How Do I Get a Web Authenticator?

A web authenticator is a physical device that you connect to the USB port on your computer. Your organization will provide a web authenticator if they want to use it as the second step for two-factor authentication.

#### Why Should I Use It?

Two-factor authentication strengthens the security of your CommCell account. A dynamic PIN or a web authenticator in conjunction with your regular password makes your account password very difficult to hack.

Two-factor authentication prevents an unauthorized person from accessing your CommCell account.

##### Interfaces You Can Log On to Using a PIN

- Command Center

- CommCell Console

- Command line

##### Interfaces You Can Log On to Using a Web Authenticator

- Command Center

#### Get Started

If you are an administrator, to get started with two-factor authentication, see the instructions under Administrator.

If you are an end user, to get started with two-factor authentication, see Acquiring a PIN.

×

Loading...