If you did not select this module to be included during the installation process, you must first install the module from the Marketplace.
To install this module from command line, execute the following:
yum install app-two-factor-auth
You can find this feature in the menu system at the following location:
<navigation>System|Accounts|2FA for Webconfig</navigation>
'2FA for Superuser (root) Account': Enable or disable 2 Factor Authentication for 'root' account access to Webconfig.
'Superuser E-mail': This is the email address that the 2 Factor Authentication code will be sent to.
'Verification Code Size': This is the length of the code. You can choose between 3 and 16. 6 is the default and recommended size.
'Verification Code Expiration': This is the length of time which will trigger the need for another email (with a different code) to be sent to the email on file.
'Token Expiration': This is the length of time which will trigger the requirement to login again using the root credentials.
Once you authenicate using your username and password, this screen will appear and require you to enter the correct code sent to you via email.
If you believe it's been longer than the time you've set as 'Verification Code Expiration' and the code emailed to you no longer works, click 'Resend Code'. Recheck your email for the new code.
If you need to disable 2FA for root and can't get into the webconfig, you can disable it from the command line. You need to go to /etc/clearos/two_factor_auth.conf and changed the root_enabled line to
root_enabled =