Setting up Two Factor Authentication


As part of our ongoing effort to ensure the safety and security of your site and customers, we will be introducing Two Factor Authentication to your Admin login forms. Please follow the steps below to configure the Google Authenticator or WinAuth Authenticator.

You will need to set up a Two Factor Authentication app either on your smart phone or using a Desktop application called WinAuth. This will need to be completed by each person that logs into the Admin Panel.

Please follow these steps to setup your Two factor authentication:

If you have and Apple or Android device follow these steps:

1. Download Google authenticator app from either the Apple App Store or from Google Play. (See instructions here)
2. Upon your first login, sign in with your username and password (you can skip the security code field) and you will be presented with the NCR Two Factor Authentication setup.



3. Open the Google Authenticator App and create a new instance
4. Scan the QR Code or manually enter the secret key at the top of the form and the authenticator will be added and you will be presented with a 6-digit code
5. Enter the security code into the Security Code field
6. Click Check Code

If successful you will be logged into the site. In the authenticator app the code changes randomly every 60 seconds.

You will need to open the app and get the new code any time you log into the admin panel.

If you want to use a Window’s desktop client please use WinAuth and follow these steps:

1. Download WinAuth here
2. Upon your first login, sign in with your username and password (you can skip the security code field) and you will be presented with the NCR Two Factor Authentication setup



3. Open the WinAuth App and Click Add then select Google



4. Enter a value in the Name field
5. Enter the secret key at the top of the form into the Step 1 field in WinAuth
6. Click Verify Authenticator
7. Enter the Generated Code in the Security Code field and click Check Code

If successful you will be logged into the site.

In the authenticator app the code changes randomly every 60 seconds. You will need to open the app and get the new code any time you log into the admin panel.

Please note that this only affects the login for the Admin Panel and does not affect merchant logins to the front end of the site.


Note that if you attempt to log in around 5 times with a blank or incorrect security code after setting it up, your IP address will be blacklisted for around 15 minutes.  Other systems will not be affected.  You will receive a 403 - Forbidden error.  If this happens, wait about 15 minutes and try again.  The more times you fail the login the longer the blacklist will last.



Article ID: 701
Created On: Mon, Jun 5, 2017 at 3:53 PM
Last Updated On: Thu, Jun 8, 2017 at 10:07 AM

Online URL: http://help.ncrretailonline.com/article/setting-up-two-factor-authentication.html