Using Multifactor Authentication (MFA) from the TrueSight Server Automation Console

Multifactor Authentication (MFA) support is enabled in the TrueSight Server Automation Console by using Remedy SSO Authentication. For more information, see Enabling-Multifactor-Authentication-MFA-support-for-console-users-using-Remedy-SSO.

After you enable MFA support, perform the following steps to use MFA from the console:

  1. Create the Remedy Single Sign-On Authentication profile by using the Remedy Single Sign-On authentication method, as shown in the following screenshot:

    image-2024-2-26_13-46-3.png

  2. Import the Remedy SSO client certificate into the console truststore by running the following command:

    <TSSAConsole_Install_Location>\NSH\jre\bin\keytool.exe -import -file "<RSSO_Cert_Location>\<certificate_name>" -alias <RSSO_HOSTNAME>_<RSSO_PORT> -keystore "<TSSAConsole_Install_Location>\NSH\jre\lib\security\cacerts" -storepass <java_keystore_password>

    Important

    • Name the alias as <RSSO_HOSTNAME>_<RSSO_PORT> to avoid the need for frequent certificate updates when you connect to multiple Remedy SSO servers through the same console.
    • You need to import this certificate for both fresh installations and console upgrades.
  3. Import the Remedy SSO client certificate into the browser:
    1. Open your browser.
    2. Select Setting > Privacy and Security > Security > Manage certificates.
    3. Click Import and provide the path to the Remedy SSO client certificate.
    4. Select the Automatically select the certificate store based on the type of certificate radio button.
    5. Click Next and then click Finish.

  4. Select the newly created profile with the Remedy Single Sign-On authentication method.
    Note the options related to user credentials become disabled. Refer to the following screenshots:

    image-2024-2-26_12-44-8.png

    image-2024-2-26_13-34-32.png

  5. Click Connect to launch the browser, and then enter your user credentials on the IdP server's login page.

    image-2024-2-26_14-37-10.png

  6. Complete the second-factor authentication by opening the Authenticator app and then entering the number there into the login page. Please refer the folowing screenshot.

    image-2024-2-26_22-56-54.png

    You have successfully logged into the TrueSight Automation Console and can now proceed with your tasks.

  7. (Optional) If your session times out, click Yes to the following prompt to reauthenticate and resume your work.

    image-2024-2-26_22-45-25.png


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*