Skip to main content

Your account

To check or change your account details and settings:

  1. Click the control_center_user_menu_icon.png user icon in the upper-right corner of the console and select My Account.

  2. Under Account Details, correct or update your account details.

    If you use an Active Directory user account, you cannot change account details.

    • Username

      The username is the unique identifier of a user account and cannot be changed.

    • Full name

      Enter your full name.

    • Email

      This is your login and contact email address. Reports and important security notifications are sent to this address. Email notifications are sent automatically whenever important risk conditions are detected in the network.

    • A Change password link allows you to change your login password.

  3. Under Settings, configure the account settings according to your preferences.

    • Timezone - Choose from the menu the timezone of your account. The console will display time information according to the selected timezone.

    • Language - Choose from the menu the console display language. Available languages:

      • English

      • Spanish

      • German

      • French

      • Romanian

      • Polish

      • Portuguese

      • Italian

      • Russian

      • Czech

      • Chinese

      • Vietnamese

      • Turkish

      • Korean

      • Japanese

    • Session Timeout - Select the inactivity time interval before your user session will expire.

  4. Under Login Security, configure two-factor authentication and check the status of the policies available to secure your GravityZone account. Company-wide set policies are read-only.

    • Two-factor authentication. The two-factor authentication adds an extra layer of security to your GravityZone account, by requiring an authentication code in addition to your Control Center credentials.

      When first logging in to your GravityZone account you will be prompted to download and install either Google Authenticator, Microsoft Authenticator, or any two-factor TOTP (Time-Based One-Time Password Algorithm) authenticator app - compatible with the standard RFC6238 - on a mobile phone or another device such as a computer.

      After the installation is complete, link it to your GravityZone account, then use it with each Control Center login. The authentication app generates a six-digit code each 30 seconds. To complete the Control Center login, after entering the password, you will need to provide the six-digit code.

    • Concurrent Logins - When the option is disabled for an account, its user is able to log in to the GravityZone console from multiple browser sessions. If enabled, any existing session will be terminated and the user will automatically be logged out when a new session is started.

    To enable the two-factor authentication:

    1. Go to My account > Two-factor authentication and click Enable.

      myAccount-enable-2fa-on-premises-july2022.png

    2. A dialog box opens. Click the appropriate link to download and install Google Authenticator, Microsoft Authenticator, or any two-factor TOTP (Time-Based One-Time Password Algorithm) authenticator on your mobile phone or another device, such as a computer.

    3. On your device, open the authentication app.

    4. In the Add an account screen, scan the QR code to link the app to your GravityZone account. You can also enter the secret key (you can copy and paste it if you use a computer).

      This action is required only once, to enable the feature in GravityZone.

      Important

      Make sure to copy and save the secret key in a safe location. Click Print a backup to create a PDF file with the QR code and secret key. If the device used for activating two-factor authentication is lost or replaced, you will need to install Google Authenticator, Microsoft Authenticator, or any two-factor TOTP (Time-Based One-Time Password Algorithm) authenticator - compatible with the standard RFC6238, on a new device and provide the secret key to link it to your GravityZone account.

    5. Enter the six-digit code in the Authentication code field.

    6. Click Enable to complete the feature activation.

    2fa-configuration-page.png

    Note

    Your Company Administrator may turn two-factor authentication mandatory for all GravityZone accounts. In this case, you will be asked at login to configure your 2FA. At the same time, you will not be able to deactivate 2FA for your account as long as this feature is enforced by your Company Administrator.

    Be aware that, if the currently configured 2FA is disabled for your account, this secret key will no longer be valid.

    Note

    If you want to switch to a different authenticator app, you must first reset 2FA. To do this, contact your Company Administrator. Afterwards, you can configure 2FA with the new authenticator app. For details on 2FA reset, refer to Managing two-factor authentication for user accounts.

    After you enabled 2FA and logged again in to Control Center, you can revoke the trust for the browsers used to access GravityZone. You can either revoke the trust for all browsers on all computers, or revoke only the current browser.

    At this stage you can also disable 2FA if the this login method is not mandatory for your account. To disable 2FA you need to provide your GravityZone username and the six-digit code from the authentication app.

    myAccount-revoke-browsers-on-premises-july2022.png

    • Password expiration policy is disabled/enabled. Regular changes to your password provide an added layer of protection against the unauthorized use of passwords, or limits the duration of unauthorized use. When enabled, GravityZone requires you to change your password no later than 90 days.

    • Account lockout policy is disabled/enabled. This policy prevents access to your account after five consecutive failed login attempts. This measure is to protect against brute-force attacks.

      To unlock your account, you need to reset your password from the login page, or contact another GravityZone administrator.

  5. In the Control Center API section, you can view your Access URL. You cannot edit this field.

    For details, refer to Bitdefender Control Center API documentation.

  6. The API keys section allows you to generate API keys needed to perform calls to Bitdefender Control Center APIs. You can use Bitdefender Control Center APIs to build custom applications that automate repetitive and time consuming workflows.

    Each API key is unique and allows the application to call methods exposed by one or several APIs. The allowed APIs are selected at the time the API key is generated.

    To generate API keys:

    1. Log in to https://YOUR-HOSTNAME/ using an administrator account. Your account must have the following rights: Manage Networks, Manage Users, Manage Company, and View and analyze data.

    2. Click your username in the upper right side of the console and select My Account:

      console_my_account_121716_en.png

    3. Go to the API keys section and click the Add button:

      console_my_account_add_API_key121716_en.png

    4. Type in a description for the key and select the APIs you want to enable for use with this key.

      console_my_account_configure_API_key_op_121716_en.png

    5. Click Generate.

      Note

      A window will be displayed with the newly generated API key and a warning stating that the key is only available for you to read while the window is open. After closing the window you will no longer be able to view the key anywhere in GravityZone.

      console_my_account_display_API_key_121716_en.png

    6. Click the copy_to_clipboard_121716_en.png button to copy the key to clipboard and save it in a safe location.

    7. Close the API key window.

    The new key is added under the API keys section in an obfuscated format along with its description and creation date, and a list of enabled APIs.

    API_keys_gzconsole_o_125277_en.png

    Important

    By using the API keys, developers can access sensitive information such as packages and inventory. Please do not share or distribute your own generated API keys, in order to prevent the leaking of sensitive information!

    Control Center also allows you to delete the previously generated API keys if they are no longer needed:

    1. Select the API key from the list.

    2. Click the Delete button:

      console_my_account_delete_API_key_125277.png

    3. Select Yes to confirm the deletion.

      Warning

      You will no longer be able to use the keys and any connections to third party apps using them will be terminated.

    For information about authentication, error reporting and other details, refer to Bitdefender Control Center API documentation.

  7. Click Save to apply the changes.

Note

You cannot delete your own account.

In this section: