Authenticator 2FA For Web Admin Interface

The GreenRADIUS web admin interface itself can be secured with two-factor authentication (2FA). This is easy to do with any Authenticator app, such as Google Authenticator and Microsoft Authenticator.

1. Open the Webmin Configuration link (found under the Webmin menu in the left panel.)

2. You will be presented with a grid of configuration menus. Select Two-Factor Authentication.

3. From the two-factor authentication options, select Google Authenticator:

Click Save to commit your changes. This will require the server to restart, so there will be a slight delay.

4. Open the Webmin Users link (also located under the Webmin menu in the left panel).

5. Select the user for whom you would like to enable two-factor authentication. You will be presented with a series of configuration dropdowns. Select "Security and limits options":

6. Click the "Enable Two-Factor for User" button.

7. Select "Enroll for Two-Factor Authentication":

8. A QR code will be generated which you can scan with your authenticaton app of choice.

9. The next time you attempt to log into the web admin interface, an OTP dialog will appear. Input the six-digit Authenticator code here:

2FA is now enabled for the web admin interface.