Introduction; Virtual Mfa Device; Physical Mfa Device - Grandstream Networks UCM6300 Series User Manual

INTRODUCTION

The UCM Multi-Factor Authentication (MFA) feature adds a simple and secure method to protect the system
on top of requiring username and password for login. If enabled, the UCM will require login credentials (the
1 st factor) and a verification code from an MFA device (the 2 nd factor), increasing security for the UCM
system.
To use MFA, users will need to install a virtual MFA application or purchase a physical MFA device. MFA is
configured and applied per account, not all accounts.

Virtual MFA Device

Virtual MFA devices refer to software applications that are run on mobile devices or others to substitute
physical MFA devices. An MFA application will generate a six-digit code via a time-based one-time
password (TOTP) algorithm. This code will be required when logging into the UCM. The virtual MFA
device assigned to each user must be unique. A user cannot use a code from another user's MFA device
or application to log into his own account.
Since MFA applications may run on insecure hardware, they may not provide the same level of security
as physical MFA devices.

Physical MFA Device

A physical MFA device will generate a six-digit code via a time-based one-time password (TOTP)
algorithm. This code will be required when logging into the UCM. The physical MFA device assigned to
each user must be unique. A user cannot use a code from another user's MFA device or application to log
into his own account.
P a g e | 5
UCM6300 Series/UCM6300 Audio Series:
Multi-Factor Authentication User Guide