Environment
- Carbon Black Cloud Console: All Versions
- CB Defense
- CB LiveOps
- CB ThreatHunter
- CB ThreatSight
- Duo Security
Objective
How to set up DUO two-factor authentication for the Carbon Black Cloud Console.
Resolution
Best Practice: Open a second tab or window after logging into Console, and make changes to 2fa settings there. This allows any changes to be reverted without the need for a Support case in case values were entered incorrectly.
- Go to Settings > Users
- Under Enable two-factor authentication, click DUO Security
- Click Confirm to confirm that you want to enable DUO 2FA for everyone in your organization who will sign in to the Carbon Black Cloud console
- Enter the DUO Security Settings from your DUO account into the modal
- Find the integration key, secret key, and API hostname in DUO (Applications > + Protect an Application > search "Web SDK" > Protect this Application)
- Click Submit
