...
Figure 4.7 illustrates the two-factor authentication and authorization process.<place for figure>
| Drawio | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
Only superusers and limited-access users with the correct permissions can configure two-factor authentication. For information about admin roles and permissions, see Managing Admin Groups and Admin Roles. To configure two-factor authentication, consider the following:
...
3. Configure a certificate authentication service and enable it, as described in Configuring Certificate Authentication Services.
4. View certificate authentication services, as described in Viewing Certificate Authentication Services.
5. Modify certificate authentication services, as described in Modifying Certificate Authentication Services.
6. Delete certificate authentication services, as described in Deleting Certificate Authentication Services.
Note that once you save the certificate authentication service configuration, the appliance terminates administrative sessions for all admin users. After you enable the certificate authentication service, you can verify whether two-factor authentication is enabled. Go to the Administration -> Administrators -> Authentication Policy tab, Grid Manager displays the "Two-Factor Authentication Enabled" banner in this tab.
...
- Use Global Search to search for certificate authentication services. For information, see Global Search.
- View audit log entries for the certificate authentication service. For information, see Viewing the Audit Log.
- Select a certificate authentication service and click the Delete icon to delete it. In the Delete Confirmation dialog box, click Yes to confirm deletion.
- Modify a certificate authentication service as mentioned in Modifying Certificate Authentication Services.
- Print the data or export it in .csv format.
...
- From the Administration tab, click the Authentication Server Groups tab -> Certificate Authentication Services subtab -> select a certificate authentication service, and then click the Edit icon.
- The Certificate Authentication Service editor provides the following tabs from which you can modify data:
- General: In this tab, modify certificate authentication service data, as described in Configuring Certificate Authentication Services.
- OCSP: Modify associated OCSP responders. For more information, see Configuring Certificate Authentication Services.
- CA: Add and delete CA certificates that are associated with the certificate authentication service. For more information, see Configuring Certificate Authentication Services.
- Save the configuration.
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
...