v20 2FA Invalid Security Code Issues

[srane.sushant]

I reseted my company admin password but as MFA is enable its asking me code. I scan QR and entering correct code but still it not accepting.



Getting above error. I do not have any other company admin to login to disable this user MFA.
need help to resolve this issue.

 

[KyriacosS_3CX]

Hello,

Such errors are generally due to the time being wrong on either the phone or PBX. Can you please check and fix any time errors before trying again?

Best,
KS

 

[srane.sushant]

how to fix time issue ? I only have root access to 3cx as of now

 

[srane.sushant]

i checked via root login time is correct on system

 

[KyriacosS_3CX]

Hi,

Firstly, let's confirm - time on phone is fine?

On your server type:
# date

This should show you what time the server things it is.

You can update this by running:

# date -s TIMESTRING

 

[KyriacosS_3CX]

View attachment 48400
i checked via root login time is correct on system

OK, and is the phone on the same time +/- a second or two?

 

[srane.sushant]

PABX is UAE and I am using MFA authenticator from India but previously it was woring

 

[KyriacosS_3CX]

The time zone difference should not matter.

If you check date/time on both, are the minutes and seconds synchronised?

 

[srane.sushant]

sorry not getting you? what do you mean by both ?

I am using google authenticator also try Microsoft Authenticator still getting same error

 

[KyriacosS_3CX]

I scan QR and entering correct code

And just a verification, you deleted the old 2FA entry from your app for this PBX and you are registering it again via the QR, entering the code from the new registration?

 

[KyriacosS_3CX]

sorry not getting you? what do you mean by both ?

For example:
PBX time: xx:30:15
Phone time: xx:30:15

 

[srane.sushant]

And just a verification, you deleted the old 2FA entry from your app for this PBX and you are registering it again via the QR, entering the code from the new registration?

This PABX is access via multiple admin so not sure if any other engineer has set himself MFA on there device.

 

[srane.sushant]

For example:
PBX time: xx:30:15
Phone time: xx:30:15

Yes PABX time is

My phone time is 13:04 IST

 

[KyriacosS_3CX]

The only common cause for 2FA to fail is wrong time on one of the devices, it seems to be the PBX.

Please run:
timedatectl
and paste the output.

 

[srane.sushant]

The only common cause for 2FA to fail is wrong time on one of the devices, it seems to be the PBX.

Please run:
timedatectl
and paste the output.

 

[KyriacosS_3CX]

OK, no ntp or other tyme sync service is running.

You will need to install/start ntp so the server can restore correct time for itself automatically.
Check if installed:

apt policy ntp

If it shows
Installed: (none)
then do:

apt-get update
apt-get install ntp

do:

timedatectl

to see if it's running.
If not you can start the service by doing:

systemctl enable ntp.service
systemctl restart ntp.service

You can find more details here:
https://reintech.io/blog/configuring-ntp-client-debian-12