Set up multi-factor authentication (MFA)

This page applies to legacy accounts. Learn more

Trend Micro Cloud One gives you the option to use multi-factor authentication (MFA). MFA is a method of access control requiring more than just a username and password, and is recommended as a best practice.

Currently, MFA is set up and managed through Trend Micro Cloud One - Workload Security.

Enable multi-factor authentication

  1. From the Trend Micro Cloud One home page, click Manage Users. Select User Properties from the menu under your username in the upper-right corner, or by selecting your username from the list of users and clicking Properties.
  2. On the General tab, click the Enable MFA button. This will open the Enable Multi-Factor Authentication wizard to guide you through the rest of the process.
  3. The first screen of the wizard will remind you to install a compatible virtual MFA application, such as Google Authenticator. For more information, see Supported multi-factor authentication (MFA) applications.
  4. If your device supports scanning QR codes, you can use your camera to configure your MFA application and click Next.

    Otherwise, you can choose My device does not support scanning QR codes. Show secret key for manual time-based configuration.

  5. Enter the Authentication Code (without the space), for example: 228045.

    Authentication code

  6. If the authentication code is correct, MFA will be enabled for your account and you will be required to enter a new MFA code each time you sign in.

    Sign In with MFA enabled

Disable multi-factor authentication

  1. From the Trend Micro Cloud One home page, click Manage Users. Select User Properties from the menu under your username in the upper-right corner, or by selecting your user from the list of users and clicking Properties.
  2. From the General tab, click the Disable MFA button.
  3. Click OK on the confirmation screen to disable MFA.

    Disable MFA confirmation window

  4. Your user properties screen will display a note to indicate the changes to MFA. Click OK to close the screen.

Supported multi-factor authentication (MFA) applications

The following smartphones and applications are actively supported for MFA. However, any application implementing an RFC 6238 compliant Time-base One-time Password Algorithm should work.

Smartphone MFA App
Android Google Authenticator, Duo
iPhone Google Authenticator, Duo
Blackberry Google Authenticator

Troubleshooting MFA

What if my MFA is enabled but not working?

MFA login issues are most commonly caused by the time on Trend Micro Cloud One being out of sync with your device. Please contact Support for assistance.

What if my MFA device is lost or stops working?

If your MFA device is lost, destroyed, or stops working, you'll need to disable MFA on your account in order to sign in.

  1. Get in touch with the person who provided you with your sign in credentials and ask them to follow the instructions in Disable multi-factor authentication. This should enable you to sign in using just your username and password.)
  2. After you've signed in, change your password.
  3. Follow the instructions for Enable multi-factor authentication.

If you are the only administrative user for a Trend Micro Cloud One account, please contact technical support for assistance in temporarily deactivating MFA for your account.