GWN Cloud - securing your login

Overview: if you have been granted access to the GWN WiFi cloud then you must upgrade your account to support MFA authentication; password only auth no longer meets EU or UK standards for administering WiFi networks that carry potentially confidential and private data streams. This article explains how to add MFA to your account with app-based MFA (as of November 2020, SMS based MFA is no longer considered secure - you must use an app).

Prerequisites

• An account created for you at GWN Cloud (email address + password)
• An iPhone or Android phone
• Google Authenticator app:
  
  • Android: https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2
  • iPhone: https://apps.apple.com/us/app/google-authenticator/id388497605

Step 1

Log into your temporary account at https://www.gwn.cloud/login using a device other than your phone (notebook/tablet/desktop); if offered a zone choose "EU" if your project is "UK", or "US" (global) if outside UK.

Step 2

Click your name in the top-right and click "Enable" or "Enabled" next to MFA (Multi-Factor Authentication)

   Now choose Software Token Authentication (click to select)

Step 4

Unlike many MFA accounts, which only require 1 code, this account requires 2 codes seperated by 30 to 60 seconds.

Launch the "Google Authenticator" app on your phone, and tap the "+" icon to add a QR code account (point the phone camera at the code displayed). This will add the account "GWN US".

Enter the 1st 6-digit code into box 1...then wait for the code to change on your phone.

Enter the 2nd (new) 6-digit code into box 2, click OK, and then Save. If you encounter a problem, log out and abck in and try from step 1 again. Feel free to submit a ticket to us if you require further support.

(Once configured you can authenticate using just a single MFA code)

Completed!

Your account has now been upgraded to MFA, and now passes the minimum requirements. Your account can now be used with full access rather than temporary.

Your GWN Cloud account can now be used with:

• Bank-grade TLS encryption from end-to-end
• X.509 certificate-based authentication
• High reliability hosted by Amazon Web Services (AWS)
• App-based virtual MFA identity authentication

Additional security options

If you would like to use device based authentication such as device tokens, cards, key fobs, or integration with device compatible platforms, please raise a ticket and we can assist.