Which two steps are required to enable multifactor authentication on an E-Series system? (Choose two.)

Enabling multifactor authentication (MFA) on a NetApp E-Series system is accomplished by integrating with a centralized directory service that handles the authentication, which can include an MFA provider. The first required step is to configure the connection to the directory server using LDAP (Lightweight Directory Access Protocol). Once the E-Series system can communicate with the directory service for user authentication, the second required step is to map the user groups from that directory to the specific access roles within SANtricity System Manager. This ensures that authenticated users receive the appropriate permissions on the storage system.

A. Test SSO login: This is a verification action performed after the configuration is complete, not a required step to enable the functionality.

B. Configure In-Band Management: Network management access is required, but it can be configured either in-band or out-of-band. Specifying in-band management is not a mandatory prerequisite for MFA.

1. NetApp E-Series SANtricity System Manager Documentation

"Configure a directory server": This official documentation outlines the procedure for setting up external authentication. It states

"You can use a directory server to authenticate storage array users. To do so

you must configure the directory server settings and then map the directory user groups to SANtricity System Manager's predefined roles." This directly supports configuring LDAP (D) and mapping roles (C).

Reference Location: NetApp E-Series SANtricity System Manager 11.7 and later -> Access management -> Configure a directory server.

2. NetApp E-Series SANtricity System Manager Documentation

"Map roles": This section details the second critical step after configuring the directory server. It explains that administrators must "map user groups defined on a directory server to the roles available in SANtricity System Manager." This confirms that role mapping is a required configuration step.

Reference Location: NetApp E-Series SANtricity System Manager 11.7 and later -> Access management -> Map roles.