3
2FA Two-Step Authentication dont work on SM 7642
Problem reported by Giorgio Borra - 3/2/2022 at 10:13 AM
Resolved
Hi,
I try to setup 2FA authentication on SM 7642 and it work fine with email but dont work with Google Authenticator and with Microsoft Authenticator on my smartphone.
I follow this: Settings - SmarterMail Help (smartertools.com) but the code created by the authentication app don't work.
Is it a known issue ?

Thanks

Giorgio

10 Replies

Reply to Thread
0
Kyle Kerst Replied
Employee Post
Hi Giorgio, I'm sorry to hear you're having trouble with this. First, 2FA/MFA code emails will fail delivery to providers like Google if they don't have a proper from address configured for those messages. So, please head into Settings>System Messages and verify your 2FA email contains a valid from address with SPF, RDNS, etc in place for it. If this continues to fail delivery from there we'll need to take a look at the SMTP and Delivery logs in your environment to see why it is failing the handoff. Let me know what you find out :)
Kyle Kerst System/Network Administrator SmarterTools Inc. (877) 357-6278 www.smartertools.com
0
Giorgio Borra Replied
Thanks Kyle, forgive me, mail authentication works well. I receive the code via mail.
The code generated by the app Google Autheticator or Microsoft Authenticar dont work.
When I scan the qr code with the app, the code dont work.

Giorgio
0
Kyle Kerst Replied
Employee Post
Oh I see, not to worry! In this case it may be time inaccuracy issues as well. The 2FA codes are only active for a certain period of time, so having the correct time and timezone settings on the server, client PC, etc is critical. Are these in good shape? Beyond that we may need to take a closer look here in Support. I can work on setting up some internal testing on this for you today/tomorrow and will let you know what I find out.
Kyle Kerst System/Network Administrator SmarterTools Inc. (877) 357-6278 www.smartertools.com
0
Giorgio Borra Replied
Thanks kyle it would be really helpful. I checked the server and client clocks, resynchronized them with time.windows.com but the problem is still there. 
Let me know.

Giorgio
0
Kyle Kerst Replied
Employee Post
Will do! :) I just tested via iOS using Authy, Google Authenticator, and the Microsoft Authenticator successfully. I'm updating my Android test environment now to confirm the same. We may need to get a ticket submitted on this one so we can help take a look. 
Kyle Kerst System/Network Administrator SmarterTools Inc. (877) 357-6278 www.smartertools.com
0
Kyle Kerst Replied
Employee Post
I was able to finish testing under Android successfully as well, so we'll definitely need to take a closer look at this for you. Please let me know when you get that ticket submitted and I can take it over so that we can pick up where we left off. Have a good one!
Kyle Kerst System/Network Administrator SmarterTools Inc. (877) 357-6278 www.smartertools.com
0
Tony Scholz Replied
Employee Post
Hello Giorgio, 

On your mail server please go to the website https://time.is/. Here you can see if your clock is off at all. Depending on what you see we can move on from there. 

Here you can see on my server that the time is off by .017 seconds. 



The Authenticator applications are all time based so if this is off by as much as a second you can have issues depending on how fast you are at typing in the code. 

Looking forward to hearing your results. 

Thank you 
Tony
Tony Scholz System/Network Administrator SmarterTools Inc. (877) 357-6278 www.smartertools.com
0
Giorgio Borra Replied
Hi Tony, sorry for late reply.
My clock was 33,5 seconds ahead.
Now I have set it correctly but the error is the same.
My version of SM is 7642.


3
echoDreamz Replied
Nice site Tony... Our TimeMachine device is doing it's job :) - We are not on 7642, we are 8083, but have never had issues with 2FA codes. Being 33 seconds off from real time def. will cause issues, perhaps a service restart after adjusting the time? Your build is over a year old though, maybe updating may help?

2
Giorgio Borra Replied
Hi, after setting correct time and restarting the server everything works fine.
Thanks SM staff for support !

Giorgio

Reply to Thread