MFA issue

[everytech]

I've upgraded a customer PBX from V18 to V20 and the customer has been using it for a week. I've logged into the server a few times with no issues. I did not have MFA enabled. Today I try and login to the system to make a change for the customer and the system is saying your administrator has enforced Two Factor Authentication. I am the only administrator/owner and did not make the change. The issue is whenever I scan the QR Code to setup MFA and put in the 2FA Security Code the system gives me an invalid security code. I know incorrect date and/or time on the server or cell phone can cause MFA issues. I've checked the date, time, time zone and everything is synced with the correct time. What can I do to get back into the system? There are no other users with any rights besides user rights. Is there a way to disable MFA? I need to get into the system to make a change for the customer. The PBX is running on Windows.

Thanks

 

[SteveITS]

Just to ask, are you sure about the time? I had someone once tell me repeatedly their phone was correct and it turned out it was 25 seconds off and slowly drifting, so the 30 second window was getting progressively shorter. They found they did not have automatic time sync enabled on the cell phone. Along those lines I suppose you could try setting the phone time backwards or forwards by a minute.

Once in, there's a checkbox on each user/extension.

 

[everytech]

I've checked the time on the server. I've even checked the BIOS time. My phone is setup to sync time from my provider. I've also checked the time to my telephone, and they match to the second. I use MFA for over 50 logins other than 3cx and I've never run into a time sync issue. Any other ideas on how to resolve this or reset MFA from the server.

 

[everytech]

Does anyone have any ideas on how to disable the MFA on 3cx thru Windows? Does 3cx support have the ability to reset the MFA.

Thanks

 

[Alphabetic]

try at your own risk

you could try doing a backup via cmd

open up the XML File and search for your ext DN="103"

then under there modify the <Name>ENABLE_2FA</Name> value to 0.

restore via cmd