You can use two-factor authentication (which is a form of multi-factor authentication) to add an extra level of security to the CommCell login requirements. Passwords alone might not provide enough security to protect your CommCell environment from unauthorized access.
How Does It Work?
When two-factor authentication is enabled, users must provide a 6-digit PIN (personal identification number) along with their passwords or use a web authenticator (such as Yubikey from Yubico) that uses the Fast Identity Online (FIDO2) authentication protocol in order to access the CommCell environment.
By default, the PIN and the web authenticator methods are enabled as the second verification step. Web authenticator verification takes precedence over PIN verification after users add their authenticator to their CommCell account.
How Do I Get a PIN?
Users can get a PIN by any of the following methods:
-
Email: The CommCell server sends a one-time PIN to users every time they log on to the CommCell environment. These PINs are valid for 30 minutes.
-
Mobile apps: Mobile apps such as CommVault Edge and Commvault NOW generate PINs. These PINs are valid for 30 seconds. After 30 seconds, the apps generate a new PIN. For information about mobile apps, see PIN Generating Mobile Apps.
-
Desktop application: The desktop application generates PINs. These PINs are valid for 30 seconds. After 30 seconds, the application generates a new PIN. For information about setting up the desktop application, see Commvault Token Desktop.
How Do I Get a Web Authenticator?
A web authenticator is a physical device that you connect to the USB port on your computer. Your organization will provide a web authenticator if they want to use it as the second step for two-factor authentication.
Why Should I Use It?
Two-factor authentication strengthens the security of your CommCell account. A dynamic PIN or a web authenticator in conjunction with your regular password makes your account password very difficult to hack.
Two-factor authentication prevents an unauthorized person from accessing your CommCell account.
Interfaces You Can Log On to Using a PIN
-
Command Center
-
CommCell Console
-
Web Console
-
Command line
-
Mobile applications such as CommVault Edge and Commvault NOW
Interfaces You Can Log On to Using a Web Authenticator
-
Command Center
-
Web Console
Get Started
If you are an administrator, to get started with two-factor authentication, see the instructions under Administrator.
If you are an end user, to get started with two-factor authentication, see Acquiring a PIN.