Subscribe

Subscribers to the boundless digital magazine will receive a regular digest of the most recently posted content.


How To Enable 2-Factor Authentication In HiveManager NG

By Bradley Chambers in · Solutions · August 2, 2017

Password security is often a hot topic among IT professionals. Getting your team to make it top of mind is one battle, and then having a good password strategy is another.

I am a big fan of using apps like 1Password and LastPass to help manage passwords. The best strategy is to have a unique password for every website you have an account with.

If you use the same password everywhere, and one site gets hacked, then you are also vulnerable everywhere. Whenever a big website is hacked, hackers will often try those login credentials on sites like PayPal, Gmail, Amazon, etc. By having a unique password, you only have one compromised login vs hundreds.

What is 2-Factor Authentication?

Another way to implement strong security is to use multi-factor authentication on websites that support it. Other terms for this are two-step or two-factor authentication. Whatever we call it, by enabling multi-factor authentication, you give yourself an extra layer of security.

While a strong/unique password is still recommended, a two-factor enabled login has an extra layer of security. When logging into a website, not only do you have to provide the correct username and password, but you will also be asked for a second code that is constantly being rotated (every 30 seconds).

There are multiple apps that support this. Popular ones are Google Authenticator (iPhone and Android), Authy (iPhone and Android), and 1Password (iPhone and Android). While they all look and act slightly different, they all use the same technology to generate the codes.

Aerohive HiveManager NG is one of those platforms that supports two-factor authentication, starting with release 11.24. And I eagerly implemented it as soon as it became available to me.

Why Use 2-Factor Authentication?

Why would I want to enable two-factor authentication? It adds an extra layer of security on top of your HiveManager NG login.

In this screenshot, you can see that when you go to log in, you’ll be asked to provide a secondary code.

This code changes very quickly, so someone would have to get ahold of your HiveManager NG email, password, AND be able to grab the dynamically generated code from Google Authenticator, Authy, 1Password, etc. You can even generate these codes offline. If you are on a plane using Wi-Fi on your laptop, you could still generate a code using an iPhone that was offline.

Have I sold you on enabling it yet? 

If so, here’s how to turn it on.

How to Turn On 2-Factor Authentication in HiveManager NG

From the main screen of HiveManager NG, click on the icon in the top right corner. Then click on Global Settings.

Under Accounts, look for the Multi-Factor Authentication link.

You’ll see a switch to enable it. 

You now see a giant QR code on the screen. In whatever app you are using, you’ll have the ability to scan this QR code to pair your HiveManager NG two-factor login with your app for generating one-time passcodes. 

Once you launch Google Authenticator, you’ll be given the option to scan the QR code. Scanning it will generate an initial code that you’ll need to enter in step 2.

In 1Password, it’s a fairly similar process. Another reason I like using the 1Password app is that it includes an Apple Watch app that can also generate the code. 

After you’ve got the feature enabled, you will have the opportunity to download some recovery codes. I’d recommend you print these off and keep them somewhere safe (wherever you keep confidential corporate documents).

This feature took me about three minutes to setup, but now I know that my HiveManager NG login is protected by an extra layer of security! Ping me on Twitter (@bradleychambers) if you have any questions.

Bradley Chambers (@bradleychambers )

Bradley Chambers has been the Director of Information Technology at Brainerd Baptist School since 2009. At BBS, he manages a network of Apple and Chrome OS devices. He also writes at Tools & Toys and The Sweet Setup.