NetWorker: Two-Factor Authentication or Multifactor Authentication for AD or LDAP Users

Summary: NetWorker does not support Two-Factor Authentication (2FA) or Multifactor Authentication (MFA).

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Does NetWorker support Two-Factor Authentication (2FA) or Multifactor Authentication (MFA)?

Cause

NetWorker does not support Two-Factor Authentication (2FA) or Multifactor Authentication (MFA) for Active Directory/LDAP Users.

Resolution

Multi-Factor Authentication can be enabled only for local NetWorker User accounts for NetWorker 19.12.x (and later). 
MFA is supported using Google Authenticator 6.0 (and later) application only.

NOTE: A "local NetWorker user" is a user account that is created in the NetWorker authentication (AUTHC) database. For example, this user is created either from the NetWorker Management Console (NMC), under Setup-> Users and Roles -> Users; or in the NetWorker Web User Interface (NWUI), under Authentication Server -> Users. MFA can only be enabled for local accounts that have "User" permissions only. It is not applicable for "Administrator" level users.

The process for configuring MFA for local NetWorker accounts is detailed in the NetWorker Security Configuration Guide, available through: https://www.dell.com/support/home/product-support/product/networker/docs (You must sign in with your Dell support account)

In order to add support for external (AD/LDAP) MFA, a Request For Enhancement (RFE) is required. Contact your Dell sales account representative regarding submitting a RFE.

Additional Information

Google Play Store This hyperlink is taking you to a website outside of Dell Technologies.
Apple App Store This hyperlink is taking you to a website outside of Dell Technologies.

NOTE: Google Authenticator must be 6.0 or later to support NetWorker MFA for local user accounts.

NetWorker 19.11: MFA Integration Requires Setting Up a New Token After Each Login
NetWorker: How to configure "AD over SSL" (LDAPS) from The NetWorker Web User Interface (NWUI)

Affected Products

NetWorker

Products

NetWorker Family, NetWorker Series
Article Properties
Article Number: 000218615
Article Type: Solution
Last Modified: 10 ربيع الآخر 1448
Version:  11
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.