SecureCloud generates encryption keys and provides full key lifecycle management. Any one with the Security Administrator rolehas the privilege to download encryption keys from the SecureCloud server. In this release, SecureCloud can determine if the user logging on is indeed the account owner. MFA mitigates the risk of an account being hacked.

SecureCloud applies MFA on a role-basis and implements two-factor authentication (or two-step verification), which implements Time-based One-time Password (TOTP) algorithm and requires account owners to provide the following:

By default, MFA for available user accounts is disabled. Only users with the Account Administrator role can manually change the status of and apply MFA to other roles through the Roles tab of User Management page.

When MFA is enabled for a specific role, accounts with the same role will need to go through the MFA activation process to access the SecureCloud web console.