Configuring Time-Based One-Time Passwords Settings

To configure authentication servers to use time-based one-time passwords

1. In the AMC, navigate to System Configuration > Authentication Servers.

2. In the Other Servers section, click Edit next to Configure time-based one-time password (TOTP) settings.

3. Click Configure.

   

4. Click Enable time-based one-time passwords.

5. Adjust the value in the Time difference field to adjust the time difference (in minutes) allowed between the clock on the client device and on the SMA appliance.

6. Set the value of the Lock account after _ failed attempts field to specify the number of unsuccessful attempts users can have before their account is locked. (This option is selected by default.)

7. Set the value of the Automatically unlock account after _ minutes field to specify the amount of time (in minutes) before user accounts will be automatically unlocked after being locked from too many unsuccessful login attempts. (This option is selected by default.)

   The user account is not automatically set to an unlocked state. It will be unlocked the next time that the user tries to log in, if the number of minutes specified in this field have passed since their last unsuccessful login attempt.

   If you do not want user accounts automatically unlocked, unselect this option.

8. Click Save.

When you enable the usage of Time-Based One-Time Passwords, it is recommended that you only allow end users to register their devices through the WorkPlace or Connect Tunnel applications.