How To
Summary
This page provides more detail on some of the functions and specifics for questions that may arise.
Objective
You are in: IBM i Technology Updates > Navigator for i > Security > Multi-Factor Authentication > MFA Details
On IBM i 7.6, you can manage your Multi-Factor Authentication configuration with IBM Navigator for i. Also see Multi-factor authentication (MFA).
This page may answer some questions you have on using Navigator to configure and manage your MFA profiles:
Navigator dashboard not displayed after MFA login
NAV_300064: Authentication successful. The user's MFA interval is *NONE and Navigator has not been configured to use TLS. You must turn on TLS for all users, increase your MFA interval, or remove MFA authentication from your profile to login
This message means that although the MFA configuration for this user is good and their authentication credentials (password and TOTP) are correct, the user cannot sign in without TLS or the MFA interval set to something other than *NONE.
You can choose to do one of two things for MFA login to be successful:
- Turn on TLS for all users (recommended)
- Since this user profile cannot currently log in, an administrator would need to turn TLS on for this user by turning on TLS for all users. By logging in with a different profile that has enough authority, you can test and turn on TLS for all.
- Increase this users MFA interval
- An administrator or someone with enough authority would need to increase the MFA Optional Interval to something greater or other than *NONE.
- Also can be done by MFA Configuration panel > Users
- Or using green screen command CHGUSRPRF for TOTP optional interval - TOTPOPTITV
- An administrator or someone with enough authority would need to increase the MFA Optional Interval to something greater or other than *NONE.
Alternatively, you can remove MFA authentication from your profile:
- Uncheck the Additional Authentication Method for this user
- This can also be done by MFA Configuration panel > Users
- Or using green screen command CHGUSRPRF for Additional Authentication Methods - AUTHMTH(*NONE)
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB68","label":"Power HW"},"Business Unit":{"code":"BU070","label":"IBM Infrastructure"},"Product":{"code":"SWG60","label":"IBM i"},"ARM Category":[{"code":"a8m0z0000000CH1AAM","label":"IBM Navigator for i"}],"ARM Case Number":"","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"and future releases;7.6.0"}]
Was this topic helpful?
Document Information
Modified date:
21 May 2025
UID
ibm17234098