Re: Free MFA for IBM i

MFA also works with SST/DST

________________________________
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> on behalf of Justin Taylor <jtaylor.0ab@xxxxxxxxx>
Sent: Tuesday, April 8, 2025 3:52 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: Free MFA for IBM i

It's good to hear that restricted state works. Of course, the next
question is how to handle MFA for QSECOFR? Best practice is for admins to
use their own accounts rather than QSECOFR, but you still have to have
QSECOFR. Do you leave QSECOFR unprotected (Lab Services recommendation
using the old product)? If you use MFA, where do you put the client
authenticator?


As for time changes (assuming you mean Daylight Savings Time), I assume
both sides will always use UTC.



On Tue, Apr 8, 2025 at 1:13 PM Rob Berendt <robertowenberendt@xxxxxxxxx>
wrote:

I have had it confirmed directly from the Gods Themselves that this will
work in restricted state. It is simply TOTP. Make sure that your time on
your IBM i is accurate (see using NTP) and it will match fine with your
TOTP device. No communication necessary. I had this same doubt. I have
been totally placated.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.midrange.com%2Fmailman%2Flistinfo%2Fmidrange-l&data=05%7C02%7C%7C08246d8c089e43aa542f08dd76d6fc7a%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638797387907160372%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=0oyr2adzlpt%2FTNPuOQ1pYUQ%2BP7P4bJSILBOOGbr7VRo%3D&reserved=0<https://lists.midrange.com/mailman/listinfo/midrange-l>
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Farchive.midrange.com%2Fmidrange-l&data=05%7C02%7C%7C08246d8c089e43aa542f08dd76d6fc7a%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638797387907180747%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=ImWA50q7grbWfDm8cYd%2FX0UiQgC5EXjDiKov%2FvSJwS8%3D&reserved=0<https://archive.midrange.com/midrange-l>.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.