diff --git a/docs/auth.md b/docs/auth.md index 2bbb8c81..0cba9b27 100644 --- a/docs/auth.md +++ b/docs/auth.md @@ -107,9 +107,6 @@ Two-factor authentication (2FA) is a new method of strengthening the protection It is strongly recommended to enable it if you expose the PiKVM in the big and scary Internet. !!! warning - Using 2FA eliminates the possibility of using [IPMI](ipmi.md) and [VNC with vncauth](vnc.md) (both disabled by default). - It also slightly affects the use of [API](api.md) and regular VNC with user/password, read below. - Please note that 2FA does not concern the Linux OS access for the `root` user, so take care of a strong password for it for SSH access (or setup the [key access](https://www.digitalocean.com/community/tutorials/how-to-configure-ssh-key-based-authentication-on-a-linux-server)). @@ -142,7 +139,7 @@ All Web UI users will be required to enter a one-time password on login. In other words, **the secret is the same for all users**. !!! note - With 2FA for API or VNC authentication, you will need to append the one-time code to the password without spaces. + With 2FA for API or VNC authentication (except VNCAuth mode), you will need to append the one-time code to the password without spaces. That is, if the password is `foobar` and the code is `123456`, then you need to use `foobar123456` as the password. To view the current QR code of the secret use command `kvmd-totp show`. diff --git a/docs/ipmi.md b/docs/ipmi.md index e85fdae8..07525140 100644 --- a/docs/ipmi.md +++ b/docs/ipmi.md @@ -11,8 +11,6 @@ Please consider to using the Redfish or [KVMD API](api.md) instead of it. - Also, IPMI can not work with [2FA](auth.md#two-factor-authentication). - ---- ## IPMI BMC diff --git a/docs/vnc.md b/docs/vnc.md index c0db3667..c861f767 100644 --- a/docs/vnc.md +++ b/docs/vnc.md @@ -71,8 +71,6 @@ than the browser, especially on weak client computers. to the password without spaces. That is, if the password is `foobar` and the code is `123456`, then the string `foobar123456` should be used as a password. - Also note that `vncauth` (step 3) will not work with 2FA. - ----- ## Configuring the client