The following is a list of frequently asked questions about i2Pass. If you have a question that is not covered here, ask us via email and we'll answer your question.

Register your E-mail address to receive automatic notification when this product is updated.

i2Pass Frequently Asked Questions:

• Are there any consideration for i2Pass when installing an IBM i OS upgrade?
• If a user specifies a "Program/procedure" on the signon screen, will it bypass i2Pass controls?
• Can I send the 2FA code to a cell phone as a text?
• When enrolling users, do I have to do them one at a time or can I enroll them all at once?
• I am using the initial program setting on user profiles, will i2Pass still work for me?

Are there any consideration for i2Pass when installing an IBM i OS upgrade?

Yes. After the IBM i OS upgrade is complete and all IBM PTFs have been installed but before you put your system back into productive use, you must run the following command:

GRTOBJAUT OBJ(QSYS/ASSIST) OBJTYPE(*MENU) USER(I2PASSUSR) AUT(*EXCLUDE)

This is needed to avoid users bypassing the 2FA validation process during a normal signon. See the i2Pass User's Guide under the section titled "IBM i Security Loophole" for more information.

If a user specifies a "Program/procedure" on the signon screen, will it bypass i2Pass controls?

Yes, this is possible. To correct for this situation, we ship alternate signon screens for the system that remove the "Program/procedure" line from the signon screen. We also include step-by-step instructions on how to install the alternate signon screen objects and test them.

Can I send the 2FA code to a cell phone as a text?

Yes!

Since version 3.03 you can sent native SMS messages though the built-in connection with our SMS utility, kConnect. Alternatively, you can also send codes using your cell carriers email-to-text feature. This can require extensive configuration and troubleshooting of SMTP and DNS services. More information about SMS Integration is available here.

When enrolling users, do I have to do them one at a time or can I enroll them all at once?

Your can enroll user profiles one at a time if you want to, but i2Pass also includes a batch enrollment utility that will let you enroll all active users or GENERIC* user profiles. We don't recommend that you do this while the software is installed on trial, but once you commit to i2Pass, it will simplify your activation process.

I am using the initial program setting on user profiles, will i2Pass still work for me?

Yes!

When you register a user profile in i2Pass, the initial program information is saved. When the two factor authentication process has been completed successfully, then your initial program will still be called.