Your IAM organization administrator or an IAM Admin can enable or require two-factor authentication (2FA) an optional second layer of security for logging in to Trellix IAM user accounts in your organization. Trellix IAM supports Google 2-Step Verification for two-factor authentication.
Two-factor authentication
Two-factor authentication (2FA) is an optional second layer of security for logging in to Trellix IAM user accounts in an IAM organization. If 2FA is enabled and enforced, even if someone manages to steal your password, your user name and password credentials are not sufficient to log in to your account. Two-factor authentication requires a user to provide an additional verification that only the user can obtain using their smartphone.
When you log in to a Trellix IAM user account that is secured with 2FA, you begin by entering your user name and password (knowledge factor) as you would normally. The login page prompts you to enter a single-use verification code (possession factor). The code is sent to your mobile device by SMS text message or voice call.
After you enter the verification code, you are authenticated and you are logged in to your account.
Optional Google authenticator mobile app
If you have a supported smartphone, you can configure it as a two-factor authentication device by installing the Google Authenticator mobile app on it. The app generates verification codes even if your smartphone has no phone or data connectivity. For information about managing the optional Google Authenticator app, see the following topics: