Quantum SPARK 1500 - Page 157

Configuring Administrator Access
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Locally Managed Administration Guide|157
Prerequisites for Two-Factor Authentication
1. In each administrator object, configure an email address and a phone number. See
"Configuring Local and Remote System Administrators" on page371 .
2. To avoid sync issues with the Authenticator app, use a Network Time Protocol (NTP)
sever to set the date and time on your appliance. See "Managing Date and Time" on
page161 .
To enable Two-Factor Authentication enforcement for administrators
1. Go to the Device > System > Administrator Access page.
2. In the Two-Factor Authentication (2FA) section, select Enable Two-Factor
Authentication enforcement.
3. Click Save.
4. The gateway sends an email (from do-not-reply@portal.checkpoint.com) to
all configured administrators that explains how to use the Authenticator app.
The email also contains a QR code and emergency keys.
Important - Save the emails with the emergency keys. Use these keys to log
in if you lose your smartphone, lose your mobile number pairing
configuration, or if the gateway is not connected to the Internet. Note that
each emergency key can be used only one time.
5. In the Web UI popup window, select I received email if you received the email or click
Resend email.
6. Install the Authenticator app.
You can use either the Microsoft Authenticator or the Google Authenticator.
Both are available from the Apple App store or Google Play.
7. In the Authenticator app, add a new account in one of these ways:
n
Scan the QR code you received in the email.
n
Enter the one-time verification code you received in the email.