.. _twostep-auth-googleotp:

Google OTP
=====================

Genian NAC can perform 2-step authentication for administrator account login by installing Google OTP.

Step 1. Enable 2-Step Authentication for Administrator Account
---------------------------------------------------------------

#. Go to **Management > User** in the top panel.
#. In the left user management panel, go to **All Administrators**.
#. Find and click the **User ID** to which 2-step authentication will be applied.
#. In **Login Settings**, set **2-Step Authentication** to **OTP (Google Authenticator)**.
#. Click **OTP (Google OTP)**.
#. In **Alarm Information Settings**, enter the following:

    - **SMS Reception Number** (*e.g.: KR +82-010-1234-5678*)
    - **Email** (*You can enter multiple email addresses separated by commas.*)

#. Click **Update**.

.. note:: To apply 2-step authentication for an administrator account, the Policy Server's 2-step authentication settings must also be completed.

Step 2. Enable Policy Server 2-Step Authentication
----------------------------------------------------------

#. Go to **Preferences** in the top panel.
#. In the left preferences panel, go to **Admin Console**.
#. Find **Enable 2-Step Authentication in WEB Console**.
#. Click the **OTP (Google Authenticator) checkbox**.
#. Click **Update**.

Step 3. Google OTP Setup
----------------------------------

#. Log out from the Policy Server Web UI and log in again with the administrator account for which 2-step authentication has been set.
#. The 2-Step Authentication Wizard for Google OTP setup will appear.
#. Click **Start Setup**.
#. Install **Google OTP** from the smartphone's app store.
#. Click **Next**.
#. Select **QR-Code** for **Security Key Transfer Method** and click **Generate Security Key**.
#. Scan the generated **QR code** with your **smartphone**.
#. Enter the **6-digit number** generated in the **Google OTP** app into the **Authentication Code** field.
#. Click **Enter**.