Configuring SMS Login Verification

Scenarios

You can configure a mobile phone to receive a 6-digit code for login identity verification. In SMS authentication method, both the static login password and a 6-digit SMS verification code are required for login.

The mobile number you configure must be valid. If the mobile number is changed later, reset the login method for user admin. For details, see Resetting Login Method for User admin.

Notes and Constraints

• Only one phone number can be bound to a system user account.
• You have enabled the SMS gateway IP address and port 10743 and port 443 for the security group of the bastion host instance, and the bastion host system can access the SMS gateway.
• The built-in SMS gateway has restrictions on the frequency and number of SMS messages that can be sent. To avoid these restrictions, use a third-party SMS gateway. For more details, see Configuring SMS Message Outgoing.

Prerequisites

An SMS gateway has been configured.

Step 1: Bind a Phone Number

The phone number bound to a user account must be valid and can receive SMS messages.

Method 1: Binding a phone number as an individual system user

1. Log in to your bastion host using your static password. For details, see Logging In to Your CBH System.
2. On the Dashboard page, click the user name in the upper right corner and choose Profile.
3. Click Edit. In the displayed dialog box, enter a phone number in the text box.

   Enter a valid mobile number. The format is [+][Country/Region code][Mobile number]. For mobile numbers in the Chinese mainland, you can omit [+][Country/Region code] and directly enter your 11-digit mobile number. Example: 185xxxx0000 or +86185xxxx0000

4. Click OK.

Method 2: Changing a user's phone number as the administrator

1. Log in to your bastion host as the administrator. For details, see Logging In to Your CBH System.
2. Choose User > User to go to the User management page.
3. Select a user and click its LoginName.
4. On the displayed page, click Edit in the Basic Info area.
5. Enter a valid phone number in the Mobile text box.
6. Click OK.

Step 2: Configure SMS Authentication as the Administrator

1. Log in to your bastion host as the administrator. For details, see Logging In to Your CBH System.
2. Choose User > User to go to the User management page.
3. Select a user and click its LoginName.
4. In the User Setting area, click Edit.
5. In the displayed Edit user setting dialog box, select Mobile SMS for Multifactor Verification.
6. Click OK.

   The next time the user logs in to the system, they will have to provide an SMS code.