Enforcing multifactor authentication on a WORM storage server
By default, multifactor authentication is optional. However, the msdpadm user can enforce it for all users on the server.
Use the following procedures to enforce or stop enforcing multifactor authentication on a WORM storage server.
To enforce multifactor authentication on a WORM storage server
- Log in to the instance as the msdpadm user.
- Run the following command:
setting MFA setenforce enforce=1 [grace_period=<days>]
Where [grace_period=<days>] is an optional parameter to specify the number of days before users are forced to configure multifactor authentication before they can log in. If you do not include this parameter, the default of 90 days is used.
For example:
setting MFA setenforce enforce=1 grace_period=30
To stop enforcing multifactor authentication on a primary or a media server instance
- Log in to the instance as the msdpadm user.
- Run the following command:
setting MFA setenforce enforce=0