In Symantec VIP, request a new VIP Certificate in PKCS#12 format.Ĭomplete the other required fields in the Symantec interface and note the certificate password.

Register vip access code#

The Symantec VIP Security Code method can be enabled for strong authentication, account unlock, or password reset.Ĭomplete the following steps to set up and configure Symantec VIP: The Symantec VIP Push method can be enabled for strong authentication.

If a user has not enrolled in Symantec VIP or has not registered an Access Credential, the Symantec VIP strong authentication and password reset options do not appear within IdentityNow.

If a user's account is disabled within Symantec VIP, they do not see options to use Symantec VIP within IdentityNow. Once you enable this integration in IdentityNow, you can configure it as a strong authentication, account unlock, or password reset method for your identity profiles.Ĭertain Symantec VIP configuration options might affect your users' experience in IdentityNow, as follows: Please let me knwo the answer or way to address this issue.You can configure Symantec VIP to integrate with IdentityNow and give your users additional strong authentication options.Ĭonfiguring IdentityNow to use Symantec VIP strong authentication requires a certain amount of work outside of the IdentityNow admin interface. I have also read this FAQ / support doc, but it does not offer a complete or valid answer : Thats also assuming EACH of these providers's phone support reps even KNOW what a Symantec VIP 2FA Credential ID is.) its un-reasonable to expect users to have to call in and prove their identity to ALL their VIP 2FA (non-QR code) based accounts EACH time user gets a new phone or does a restore. (un acceptable, as im asking about ebay, eTrade ect.

Register vip access update#

' Contact your Workplace IT admin to update your Credential ID' I have searched the Symantec Forums vigorously, and the only 'answer' i found to this: ( so i can always re-scan them into any new phone or device i may have to get in the future, and can still login to these services). I have used TOTP based QR codes for many years, and these QR codes i physically BACKUP/PRINT offline, when i initially scan them into VIP Access. (as all a hacker has to do is click i dont have my VIP access code, and you are back to SMS based 2FA) If the answer is to have a backup method to logging-in to your various accounts, such as SMS backup, that defeats the ENTIRE purpose of using 30s generated codes. So how exactly do you 'register the new Credential ID with the vendors' IF you CANT login to the account any longer? Each vendor will need you to update your Credential ID with them ' You will need to register the new Credential ID with the vendors you use your 2FA (2 factor authentication) services with. The KB / faq doc gives this unacceptable answer to my question:

Register vip access full#

VIP access iOS app, how do I login to My Paypal or My Merrill Lynch account *IN THE CASE that* i get a *new* iPhone, or have to do a full iCloud Restore ? as the VIP App's Credential ID will of-course CHANGE on new device/restore, *thus* the 30s generated VIP Sec Code will not match up with my prior codes (so i wont be able to login to account at that point). not for your place of work using VIP 2FA where you can easily contact your work IT admin) (my question is ONLY in the context of 3rd my party accounts, such as Merrill Lynch, eTrade, eBay, PayPal ect.