Section X: ACME, 2FA/MFA/WebAuthn, Anti-Lockout

[coolaj86]

ACME

Video: https://www.youtube.com/watch?v=dZibKXMMUss&list=PLZaEVINf2Bq9fWPycTZDZ8Da6D0uH64NF&index=6

• NameDotCom Tut: https://forum.proxmox.com/threads/acme-dns-api-with-name-com.164572/
• Wiki: https://github.com/acmesh-official/acme.sh/wiki/dnsapi
  • https://github.com/acmesh-official/acme.sh/wiki/dnsapi2

Passkeys, TOTP, MFA, 2FA (TFA), Recovery Codes

https://pve.proxmox.com/pve-docs/chapter-pveum.html

https://forum.proxmox.com/threads/howto-webauthn-passkeys-across-cluster-or-on-single-node.165331/

• Datacenter
  • Options => WebAuthn Settings => COMMON DOMAIN
  • Permissions => Realms => PVE => Default, Require TFA

Realm passwd

pveum user tfa unlock joe@pve

rm /etc/pve/priv/tfa.cfg

killall pmxcfs
pmxcfs -l

• https://forum.proxmox.com/threads/i-messed-my-login-help-will-be-appreciated.117438/