Updated on 2025-02-17 GMT+08:00

Configuring Email Address Login Verification

For logins to bastion host instance, you can also enable email verification for users. Then, after a user enters a password, an email verification code is required for a login. In addition, email verification supports logins over SSH clients.

Prerequisites

Constraints

This method is not supported for first time logins. You need to configure email address login verification after the first login.

Adding an Email Address for an Account

  1. Log in to the management console.
  2. Click in the upper left corner and select a region or project. In the upper left corner of the page, click and select a region. Choose Security & Compliance > Cloud Bastion Host to go to the CBH instance management page.

    Figure 1 Instances
    Table 1 Instance parameters

    Parameter

    Description

    Instance Name

    Instance name you specify. It cannot be modified after the instance is created.

    Status

    Status of the instance, including the status of the standby host.

    Instance Type

    Instance type you select.

    Login Address

    Private IP address of the instance.

    EIP

    EIP of the instance.

    Billing Mode

    Billing mode of the current instance.

    Enterprise Project

    Enterprise project that the instance belongs to.

  3. Locate the target instance and click Remote Login in the Operation column. In the displayed dialog box, select a login mode.

    • If you want to use a private IP address to log in a bastion host, make sure the instance and your local network are connected, or the login will fail.
    • IAM Login and Admin Login do not require any passwords. If you log in locally, you need to use an account or key. You can configure login authentication based on Using a Web Browser to Log In to Your Bastion Host.

  4. Log in to the bastion host instance in Admin Login mode and choose User > User.
  5. In the user list, select one or more accounts for which you want to add email addresses and choose More > Edit multifactor below the list.
  6. In the dialog box displayed, select the email verification mode.

    • If you have configured other login verification methods and still want to use them, select them all together in this step.
    • If you want to enable email verification for all accounts in the department that the target account belongs to or all accounts in its subordinate departments, select Modify All.

  7. Click OK. Then, you can choose User > User and click the target account name to view the added email address and multifactor verification settings.