CertCentral two-factor authentication account configurations

Two-factor authentication adds another layer of security to your CertCentral® account by allowing you to require two methods of identity verification before you can sign in and access account information.

When working with your account manager to set up two-factor authentication, you have three account setting options:

By default, all CertCentral accounts come with the two-factor authentication security feature. However, it is not turned on by default. This provides you with full control of how and when two-factor authentication is implemented for your account:

• Turn two-factor on or off for your account as needed.
• Determine which second factor is used: client certificate or one-time password.
• Configure two-factor authentication rules for all account users and for specific account users (for example, Jane Doe in IT).

This setting automatically enforces two-factor authentication for the entire account and requires all account members to use their username and password and a client certificate to sign in.

You can still configure rules for specific individual users (for example, John Doe in IT) requiring them to use a one-time password (OTP) as their second form of authentication.

This setting automatically enforces two-factor authentication for the entire account. It requires all account members to use their username, password, and a one-time password to sign in to their account.

You can still configure rules for individual users (for example, John Doe in IT) requiring them to use a client certificate as their second form of authentication.