Fortanix Armor - User Profile Management

1.0 Introduction

This article describes how to access and manage your user profile in the Fortanix Armor platform.

It also describes:

How to view and update your profile details, including name and email.
How to change your password.
How to configure two-factor authentication (2FA) for additional account security.
How to accept the latest terms and conditions.
How to permanently delete your Fortanix Armor user profile.

2.0 Manage User Profile

In Fortanix Armor, you can manage the profile details of the currently logged-in user.

Figure 1: Manage your user profile

Select Profile to manage the profile details and authentication.
Select Sign out to log out from Fortanix Armor. If selected, you will be logged out of the platform and redirected to the Login page.

2.1 Update User Name and Email

To update your profile name and email,

Select Profile.
On the My Profile page, click next to the user name and email to update the new values.
Click SAVE to apply the updates.
Figure 2: Update user profile
NOTE
When you change your email, all your pending account invites will be removed. You will need to be invited again using your new email.
You can view your profile creation and last log-in date and time.

2.2 Change Password

If you have forgotten your password, you can reset it.

To update your password while editing your user profile,

Select Profile.
On the My Profile page, select CHANGE PASSWORD to create a new password.
1. Current password: Enter your current password.
2. New password: Enter a new password.
3. New password (again): Re-enter the new password.
4. Click CHANGE PASSWORD to update your password.

The new password will only be accepted if it meets all security requirements, including a minimum length of twelve characters.

For more information on password requirements for Fortanix Armor SaaS user accounts, refer to Fortanix Armor - Getting Started.

2.3 Configure Two-factor Authentication (2FA) at User Level

Multi-factor Authentication (MFA), specifically Two-factor Authentication (2FA), can be configured at both the user and account levels in Fortanix Armor.

For more details on setting 2FA at the account level, refer to Fortanix Armor Identity and Access Management (IAM).

When 2FA is enabled for a specific user, that user will be required to set up 2FA before logging into their account.

Ensure the following before configuring the 2FA at the user level:

You are a Fortanix Armor user
2FA is currently supported using the FIDO2/WebAuthn standard, which is supported by devices such as YubiKey. This also works for FIDO U2F authenticators since FIDO2/WebAuthn is backward compatible with them.

NOTE
Your device must support FIDO2/WebAuthn to use 2FA.
Fortanix Armor uses FIDO2/WebAuthn for the 2FA requirements.
Fortanix Armor supports FIDO2 devices that provide either packed or fido-u2f attestation. See “Defined Attestation Statement Formats” section in https://www.w3.org/TR/webauthn-2 for more details.

After users are authenticated using a password, an additional layer of security can be added by enabling 2FA through a device that supports U2F or FIDO2/WebAuthn.

Fortanix Armor supports security keys for 2FA, leveraging FIDO2/WebAuthn-compatible devices (for example, YubiKey).

To enable 2FA at the user level,

Select Profile.
On the My Profile page, select Enable for Two-step Authentication. The 2FA is disabled by default.
On the Two-step Authentication dialog box, enter the profile password.
Click NEXT.
Select where you want to register your security key based on your operating system:
Linux:
Perform the following steps:
1. Select the USB security key option.
  Figure 3: Set security key for Linux
  b. Touch your YubiKey device and enter the PIN for your security key.
  c. Click Next.
  Figure 4: Enter the security key
  d. Touch your YubiKey device again to complete the registration.
Windows:
Use Security Key option to register your key. Avoid using methods like Windows Hello, Android/iOS devices, or a Google account, as they may cause errors.
Perform the following steps:
1. Select Windows Hello or external security key.
  Figure 5: Select the security key register type
2. Click Use another device.
  Figure 6: Select your choice
3. Select the Security key and click Next.
  Figure 7: Select the 'Security Key' option
4. Click OK.
5. Enter your Security Key PIN and click OK.
  Figure 8: Enter your security key
6. Touch your YubiKey device once and click OK to register your security key.
After successfully registering the security key, on the Two-step Authentication dialog box, assign a name and click NEXT.
After your security key has been added, Recovery codes will be generated. Ensure to save them as they are used to access your account if you cannot connect the security key to the system.
Click FINISH to add the security key to the Two-step Authentication section. 2FA will then be enabled at the user level.
After the security key is added, you can perform the following actions:
Figure 9: Manage a security key
- Click ADD SECURITY KEY and follow Steps 3 to 8 to add another security key, if required.
- You can edit the security key details using . If selected, you can change the name of the key and click SAVE to update the new value.
- You can remove the security key if it is no longer needed using . If selected, on the Disable 2FA Authentication dialog box, click DELETE to remove the security key.
  NOTE
  If your Fortanix Armor account has account level 2FA enabled, you must disable it before deleting any user level 2FA.
- You can regenerate the recovery code if required. To regenerate the recovery code,
  1. Click REGENERATE under Recovery codes.
  2. On the Regenerate recovery code dialog box, enter the profile password and click NEXT.
  3. Click REGENERATE on the Regenerate recovery code dialog box.
  4. The recovery codes will be regenerated. Ensure to save them and click CLOSE.
- You can disable the 2FA configured. To perform this,
  1. Click DISABLE.
  2. On the Disable 2FA Authentication dialog box, enter your profile password and click NEXT.
  3. Click DISABLE to deactivate the 2FA configured.
After 2FA is enabled, an additional authentication layer will be added to the password-based user authentication during login.
For example, you will see the hard_key being added during login. Follow the necessary steps to log in to Fortanix Armor using 2FA.
Figure 10: 2FA during login

2.4 Accept Terms and Conditions

On the My Profile page, you must select the You have accepted the latest Terms of Service and Privacy Policy checkbox to accept the latest terms and conditions of Fortanix Armor.

2.5 Delete User Profile

To delete your user profile from the Fortanix Armor platform permanently,

Select Profile.
On the My Profile page, click Delete my user profile.
1. The dialog box with the details will be displayed. Read the details and enter your current password to confirm the profile deletion.
2. Click DELETE MY PROFILE PERMANENTLY to delete your user profile permanently.