Help Center> Identity and Access Management> FAQ> Security Settings> How Do I Bind a Virtual MFA Device?

How Do I Bind a Virtual MFA Device?

Multi-factor authentication (MFA) adds an extra layer of protection on top of your username and password. After you enable MFA-based login authentication, you need to enter a verification code after authenticating your username and password. MFA, together with your username and password, ensures the security of your account and resources.

MFA devices can be based on hardware or software. However, IAM supports only virtual MFA devices.

A virtual MFA device is an application that generates 6-digit codes in compliance with the Time-Based One-Time Password Algorithm (TOTP). MFA applications can run on mobile devices (including smartphones) and are easy to use.

Prerequisites

You have installed an MFA application on your mobile phone.

Procedure

  • HUAWEI CLOUD account or IAM user
  1. On the management console, hover the mouse pointer over the username in the upper right corner, and choose Security Settings from the drop-down list.
  2. Click the Critical Operations tab, and click Bind next to Virtual MFA Device.

    Figure 1 Virtual MFA Device

  3. Set up the MFA application by scanning the QR code or entering the secret key.

    The HUAWEI CLOUD app is used as an example to describe how to add a user in an MFA application. If you have installed another MFA application, add a user by following the on-screen prompts.
    Figure 2 Binding a virtual MFA device
    • Scan the QR code

      Open the HUAWEI CLOUD app on your mobile phone, and use the app to scan the QR code displayed on the Bind Virtual MFA Device page. Your account name or IAM user name is then displayed on the app.

    • Enter the secret key

      Open the HUAWEI CLOUD app on your mobile phone, and enter the secret key. As the administrator, enter your account name and the secret key. If you are an IAM user, enter your username and the secret key.

  4. View the verification code on the HUAWEI CLOUD app. The code is automatically updated every 30 seconds.
  5. On the Bind Virtual MFA Device page, enter two consecutive verification codes and click OK.
  • HUAWEI ID
  1. On the management console, hover the mouse pointer over the username in the upper right corner, and choose Security Settings from the drop-down list.
  2. Click the Critical Operations tab, and click Bind next to Virtual MFA Device.

    Figure 3 Virtual MFA Device

  3. On the HUAWEI ID website, choose Account & security, and bind a virtual MFA device in the Security verification area.

Related FAQs

How Do I Obtain a Virtual MFA Verification Code?

How Do I Unbind or Remove a Virtual MFA Device?

Why Does MFA Authentication Fail?

Parent topic: Security Settings