Skip to main content

Configure local user account for MFA with TOTP

Contributors netapp-aherbin
PDFs

Beginning in ONTAP 9.13.1, user accounts can be configured with multifactor authentication (MFA) using a time-based one-time password (TOTP).

Before you begin

  • The storage administrator must enable MFA with TOTP as a second authentication method for your user account.

  • Your primary user account authentication method should be a user password or public SSH key.

  • You must configure your TOTP app to work with your smartphone and create your TOTP secret key.

    Microsoft Authenticator, Google Authenticator, Authy and any other TOTP-compatible authenticator is supported.

Steps

  1. Log in to your user account with your current authentication method.

    Your current authentication method should be a user password or an SSH public key.

  2. Create the TOTP configuration on your account:

    security login totp create -vserver "<svm_name>" -username "<account_username >"

  3. Verify that the TOTP configuration is enabled on your account:

    security login totp show -vserver "<svm_name>" -username "<account_username>"