Grandstream Networks UCM6300 Series Manual de usuario

Grandstream Networks Inc.

UCM6300 Series/UCM6300 Audio Series IP PBX

Multi-Factor Authentication User Guide

UCM6300 Series/UCM6300 Audio Series:  
Multi-Factor Authentication User Guide  
 
 
P a g e  | 2 
Table of Contents 
SUPPORTED DEVICES .....................................................................................................4
INTRODUCTION .................................................................................................................5
Virtual MFA Device .....................................................................................................................................5
Physical MFA Device..................................................................................................................................5
MFA DEVICE SPECIFICATIONS .......................................................................................6
VIRTUAL MFA APPLICATIONS.........................................................................................7
USING MFA DEVICE ..........................................................................................................8
Using Virtual MFA Device...........................................................................................................................8
Using Physical MFA Device .....................................................................................................................11 
REMOVING MFA DEVICE................................................................................................13 
Removing MFA via User Management ....................................................................................................13 
Removing MFA via Login Page ................................................................................................................13 
FAQ....................................................................................................................................14 
MFA Device Lost or Invalidated................................................................................................................14 

UCM6300 Series/UCM6300 Audio Series:

Multi-Factor Authentication User Guide

P a g e | 3

Table of Figures

Figure 1: Email Settings.................................................................................................................................9

Figure 2: User Information .............................................................................................................................9

Figure 3: Scan MFA QR Code .......................................................................................................................9

Figure 4: Enter MFA Code ...........................................................................................................................10

Figure 5: Hardware MFA Device Certification..............................................................................................11

Figure 6: Physical MFA Device ....................................................................................................................12

Table of Tables

Table 1: UCM Models Supporting Multi-Factor Authentication Feature .......................................................4

Table 2: MFA Device Specifications..............................................................................................................6

Table 3: Virtual MFA Applications..................................................................................................................7

UCM6300 Series/UCM6300 Audio Series:

Multi-Factor Authentication User Guide

P a g e | 4

SUPPORTED DEVICES

Following table shows the UCM models supporting multi-factor authentication feature described in this guide:

Table 1: UCM Models Supporting Multi-Factor Authentication Feature

UCM Models Supporting Multi-Factor Availability Feature

UCM6300 Series

UCM6301

Firmware 1.0.10.5 or higher

UCM6302

Firmware 1.0.10.5 or higher

UCM6304

Firmware 1.0.10.5 or higher

UCM6308

Firmware 1.0.10.5 or higher

UCM6300 Audio Series

UCM6300A

Firmware 1.0.10.5 or higher

UCM6302A

Firmware 1.0.10.5 or higher

UCM6304A

Firmware 1.0.10.5 or higher

UCM6308A

Firmware 1.0.10.5 or higher

UCM6300 Series/UCM6300 Audio Series:

Multi-Factor Authentication User Guide

P a g e | 5

INTRODUCTION

The UCM Multi-Factor Authentication (MFA) feature adds a simple and secure method to protect the system

on top of requiring username and password for login. If enabled, the UCM will require login credentials (the

1st factor) and a verification code from an MFA device (the 2nd factor), increasing security for the UCM

system.

To use MFA, users will need to install a virtual MFA application or purchase a physical MFA device. MFA is

configured and applied per account, not all accounts.

Virtual MFA Device

Virtual MFA devices refer to software applications that are run on mobile devices or others to substitute

physical MFA devices. An MFA application will generate a six-digit code via a time-based one-time

password (TOTP) algorithm. This code will be required when logging into the UCM. The virtual MFA

device assigned to each user must be unique. A user cannot use a code from another user’s MFA device

or application to log into his own account.

Since MFA applications may run on insecure hardware, they may not provide the same level of security

as physical MFA devices.

Physical MFA Device

A physical MFA device will generate a six-digit code via a time-based one-time password (TOTP)

algorithm. This code will be required when logging into the UCM. The physical MFA device assigned to

each user must be unique. A user cannot use a code from another user’s MFA device or application to log

into his own account.

UCM6300 Series/UCM6300 Audio Series:

Multi-Factor Authentication User Guide

P a g e | 6

MFA DEVICE SPECIFICATIONS

Table 2: MFA Device Specifications

Virtual MFA Device

Physical MFA Device

Device

See Table 3 below

Purchase required

Cost

Free

Price determined by 3rd party vendor

Device

Specifications

Any mobile device or tablet that

can install and run applications

supporting the TOTP standard

3rd party vendor device that supports TOTP

standard such as Microcosm MFA devices

Application

Scenario

Multiple tokens can be

supported on one device

Many financial institute and enterprise IT

organizations use the same device type

UCM6300 Series/UCM6300 Audio Series:

Multi-Factor Authentication User Guide

P a g e | 7

VIRTUAL MFA APPLICATIONS

Please go to your mobile device or tablet’s app store to download and install MFA applications. The below

table lists some example applications.

Table 3: Virtual MFA Applications

Android

Mobilde Devices

Google Authenticator

Twilio Authy 2-factor Authentication

iOS

Mobile Devices

Google Authenticator

Twilio Authy 2-factor Authentication

Windows

Mobile Devices

Authenticator (by Microsoft)

UCM6300 Series/UCM6300 Audio Series:

Multi-Factor Authentication User Guide

P a g e | 8

USING MFA DEVICE

It is highly recommended to configure Multi-Factor Authentication (MFA) to provide higher level security of

the UCM system. Super admins and admins can toggle on MFA for their own accounts but not for others’

accounts.

Using Virtual MFA Device

First, download an MFA application from your app store (e.g., Apple App Store or Google Play Store). See

Table 3 for examples of available MFA applications.

Note:

To configure MFA properly, email addresses must be set for the UCM and the desired admin

account. This is the only method to disable MFA without logging into the account. If no email

address is configured, the account will not be able to log in.

Follow these steps to configure MFA on UCM:

1. Log into the UCM management portal with the super admin account. Navigate to System

Settings Email Settings and configure valid email settings that will allow UCM to send out emails.

Make sure that the Type field is set to Client.

UCM6300 Series/UCM6300 Audio Series:

Multi-Factor Authentication User Guide

P a g e | 9

Figure 1: Email Settings

2. On UCM web UI, navigate to Maintenance->User Management page, click to edit the user information.

Configure email address for the admin.

Figure 2: User Information

3. Enable Multi-Factor Authentication and select Virtual MFA device certification in the prompt. Then

click on next.

4. The Virtual MFA device certification window will provide step-by-step instructions on setting everything

up. Users can either scan a QR code or manually enter a key via their MFA app.

Figure 3: Scan MFA QR Code

UCM6300 Series/UCM6300 Audio Series:

Multi-Factor Authentication User Guide

P a g e | 10

5. Open your virtual MFA app and follow the steps below.

(1) If your MFA application supports QR code, scan the provided QR code. Some mobile devices

can scan and detect QR code using camera app.

(2) If your MFA application does not support QR code, click on “Show key” and then manually enter

the key on the MFA application. If the MFA requires selecting how the code is generated, please

select “Time-based”.

Note:

If virtual MFA application supports multiple MFA devices or accounts, please select adding new

MFA device/account to create a new device or new account.

6. The MFA will periodically generate one-time passwords. Enter the displayed one-time password

displayed on the MFA app into the Code 1 field. Wait approximately 30 seconds for the app to

generate another one-time password. Enter this new password into the Code 2 field.

Figure 4: Enter MFA Code

7. Click on start authentication. After passing the authentication, click on Save and Apply Changes

buttons for the settings to take effect. The account has now been successfully bound to the virtual

MFA device. An MFA code will now the required to log into the account.

Note:

1. Please submit your request immediately after generating the code. Otherwise, the TOTP (time-

based one-time password) will expire soon. If it’s expired, please start over again.

2. One user can only be bind to one MFA device.

Otros manuales para UCM6300 Series

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Centralita privada de Grandstream Networks

Grandstream Networks

Grandstream Networks UCM6102 Manual de usuario

Grandstream Networks

Grandstream Networks GXE5024 Manual de usuario

Grandstream Networks

Grandstream Networks GXE502X Manual de usuario

Grandstream Networks

Grandstream Networks UCM6102 Manual de usuario

Grandstream Networks

Grandstream Networks UCM6 series Manual de usuario

Grandstream Networks

Grandstream Networks UCM6100 Series Manual de usuario

Grandstream Networks

Grandstream Networks UCM6301 Manual de usuario

Grandstream Networks

Grandstream Networks UCM6100 Series Manual de usuario

Grandstream Networks

Grandstream Networks UCM P800 Manual de usuario

Grandstream Networks

Grandstream Networks UCM6102 Manual de usuario

Grandstream Networks

Grandstream Networks UCM6102 Manual de usuario

Grandstream Networks

Grandstream Networks UCM6510 Manual de usuario

Grandstream Networks

Grandstream Networks UCM63 Series Manual de usuario

Grandstream Networks

Grandstream Networks UCM6200 Series Manual de usuario

Grandstream Networks

Grandstream Networks UCM6510 Manual de usuario

Grandstream Networks

Grandstream Networks UCM6100 Series Manual de usuario

Grandstream Networks

Grandstream Networks UCM6300 Series Manual de usuario

Grandstream Networks

Grandstream Networks GXE502X Manual de usuario

Grandstream Networks

Grandstream Networks UCM6200 Series Manual de usuario

Grandstream Networks

Grandstream Networks UCM6102 Manual de usuario

Grandstream Networks

Grandstream Networks UCM6202 Manual de usuario

Grandstream Networks

Grandstream Networks UCM6202 Manual de usuario

Grandstream Networks

Grandstream Networks UCM630X Manual de usuario

Grandstream Networks

Grandstream Networks UCM630X Manual de usuario

Manuales populares de Centralita privada de otras marcas

Allo.com

Allo.com Nano 2 Manual de usuario

ZYCOD

ZYCOD ZX50 Manual de usuario

Panasonic

Panasonic KX-TDA100BX Manual de usuario

LV switch

LV switch IPPBX800 Manual de instrucciones

Edge-Core

Edge-Core VST3305 Manual de usuario

Panasonic

Panasonic KX-T7625 - Digital Proprietary Speakerphone 24... Manual de usuario

Rauland-Borg

Rauland-Borg Telecenter IV Manual de usuario

ATCOM

ATCOM IPPBX IP02 Manual de usuario

Panasonic

Panasonic KX-TVS50 - 2 Port Voicemail System Manual de usuario

bintec elmeg

bintec elmeg elmeg hybird 600 Manual de usuario

Panasonic

Panasonic KX-NS300 Manual de usuario

MCK

MCK EXTender PBXgateway Manual de usuario

Panasonic

Panasonic KX-NS300CN Manual del propietario

NEC

NEC SL1000 Manual de usuario

Epygi

Epygi Quadro Quadro 2xi Manual de usuario

SMC Networks

SMC Networks TigerVoIP SMCPBX10 Manual de usuario

AGFEO

AGFEO AC 14 analog Manual de usuario

Nortel

Nortel QSY22 Manual de usuario