Resolved Plesk MFA/Google Auth stopped working on version 18.0.64

[nogray]

Server operating system version

CentOS 7 (Core)

Plesk version and microupdate number

18.0.64 #1

I saw this topic Resolved - Plesk 18.0.61 Login Problem w/ Google Auth/MFA & Cloudflare but it's already marked resolved.

Today is the first time I tried to login after the Plesk was updated to 18.0.64 and Google Authenticator didn't recognize the code. After disabling the extension using SSH, I was able to login. I found the notice it was deprecated and installed MFA.

Trying to setup MFA fails as well and does not recognize the code.
I am logged in using port 8443

 

[Sebahat.hadzhi]

I tested the MFA extension on a CentOS 7.9 server with Authenticator app for Android and I was not able to encounter any issue. At what stage exactly the process fails, please? Do you encounter any error/issue when scanning the QR code from MFA through your local authentication app? If possible, please provide us with step-by-step instructions so we can attempt to reproduce the issue.

 

[nogray]

The error happens when I try to input the code and submit the form. Scanning the QR code and everything else works as expected.

Here are step by step instructions.

• Install MFA extension and open it.
• Check "Enable Multi-factor Authentication"
• Scan the QR code with Google Authenticator app (I am using an iPhone)
• Enter the "Verification Code" from the app in the form
• Press the "OK" button.

Error: CODE is not valid (under the Verification Code field)

The error happened for both Google Authenticator extension (before I un-installed it) and the MFA extension. It also happened to multiple user accounts out of the sudden. I encountered it after I tried to login the code didn't work anymore so I had to disable the extension via SSH. After logging in, I noticed that Plesk auto updated to 18.0.64 around two weeks ago.

I have a suspicion it might be the system time, but we have 2FA in our SSH login (using google authenticator) and it works correctly. So I am not sure what else could cause the issue.

 

[Sebahat.hadzhi]

Thank you for the update. I believe your suggestion about the system time might be correct. Could you please try the following workaround? Although the guide is for Google Authenticator, it is also applicable for the MFA extension.

 

[nogray]

Thank you, the system time was off by one minute. Changing the system time through the Plesk panel fixed the issue and did not effect the SSH 2FA.
P.S. I don't know how to mark the issue as Resolved.