Configuring the two-factor authentication settings
Two-factor authentication prevents accidental or unauthorized deletion of backups and backup data. When this feature is enabled, only authorized users can delete a backup or backup data or assign a retention rule to an existing backup while logged on to the DS-Client. Before performing these tasks, an authorized user is required to type an authentication code the DS-System generates.
If your service provider has already configured the DS-Client to use two-factor authentication, you must configure the two-factor authentication settings for the DS-Client. This includes the list of authorized users and their email addresses for receiving authentication codes from the DS-System. You can manually add the users or import a list of users.
NOTE: You must be a DS-Client administrator to configure the two-factor authentication settings for the DS-Client.
To configure the two-factor authentication settings:
1. On the Setup menu, click Two-factor Authentication.
2. Do one of the following:
• To add a user, click Add.
• To modify the details of a user, select the user, and then click Modify.
NOTE: To delete a user, select the user, and then click Remove.
3. In the Add / Edit User dialog box, do the following:
a) In the User name box, type the name of the user you want to authorize.
NOTE: For successful authorization, the name must represent a valid existing user account on the DS-Client computer.
b) In the Domain box, select the domain to which the user belongs.
c) In the Email address box, type the email address associated with the user. This is the email address where an authorization code will be sent when the user attempts to delete a backup or backup data or assign a retention rule to an existing backup.
d) Click OK.
4. To import a list of users, do the following:
a) Create a text file that lists each new user on a separate line. For each user, include the user name, domain, and email address, separating each item with a comma, and then save the text file. For example:
user_example,example.com,user_example@example.com
b) Click Import.
c) Browse for and select the text file containing the list of users, and then click Open.
d) Verify that the user name, domain, and email address of each user that has been imported to the list is correct.
5. Click Forward to DS-System.
6. In the Two-factor Authentication Validation dialog box, do the following:
• In the Authentication Code box, type the authentication code that you received from the DS-System, and then click Validate.
NOTE: The authentication code is sent to the email address where you usually receive notifications from the DS-System. The code is valid for two hours. To request an authentication code be resent to you, click Resend.
7. To export the list of users to a text file, click Export, and then save the file.
8. Click Close.