Use Cases for MFA on CTE

When using Multifactor Authentication with CipherTrust Transparent Encryption, after successfully completing the MFA provider, you can enable it on a:

• Client

• GuardPoint

• GuardPoint, while exempting certain users/applications/processes from authentication

Enable Multifactor Authentication on a client

You can enable Multifactor Authentication for all of the GuardPoints on a client. When Multifactor Authentication is enabled at the client level, CTE enforces the configuration for all GuardPoints configured on the client. It overrides any MFA configuration set for individual GuardPoints.

1. Open CipherTrust Manager > Transparent Encryption application.

2. Select the relevant client.

3. In the upper pane, select Multifactor Authentication.

   

4. Select Apply. All of the Multifactor Authentication switches are toggled to the on position.

   

5. If the MFA column doesn't display with all switches set to on, click Refresh GuardPoints to display the Multifactor Authentication column.

   

Enable Multifactor Authentication on a GuardPoint

You can enable Multifactor Authentication for individual GuardPoints on clients.

1. Open CipherTrust Manager > Transparent Encryption application.

2. Select the relevant client.

3. Select the GuardPoints tab.

4. Click the settings icon.

5. Select Multifactor Authentication to enable Multifactor Authentication for the GuardPoints.

   

6. Click OK. The Multifactor Authentication column displays.

   

7. Toggle the Multifactor Authentication switch to enable Multifactor Authentication for the selected GuardPoints.

Enable Multifactor Authentication for Client Groups

Multifactor authentication cannot be enabled at the client group level. However, you can enable Multifactor Authentication for individual GuardPoints on client groups.

While propagating the Multifactor Authentication-enabled GuardPoints to the member clients, CipherTrust Transparent Encryption checks the Multifactor Authentication capability of the member clients. If a client is Multifactor Authentication-capable, the GuardPoints are added to the client. If a client is not Multifactor Authentication-capable, the GuardPoints are skipped.