# How to enable MFA on OnPremise Passbolt **URL:** \ **Category:** Installation Issues\ **Created:** [March 29, 2023, 12:35pm UTC](https://community.passbolt.com/t/how-to-enable-mfa-on-onpremise-passbolt/6871 "2023-03-29T12:35:15Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![mlakatamitis](https://avatars.discourse-cdn.com/v4/letter/m/6a8cbe/32.png) [@mlakatamitis](https://community.passbolt.com/u/mlakatamitis)\ **Post date:** [March 29, 2023, 12:35pm UTC](https://community.passbolt.com/t/how-to-enable-mfa-on-onpremise-passbolt/6871/1 "2023-03-29T12:35:15Z")
**Checklist** [X] I have read intro post: [About the Installation Issues category](https://community.passbolt.com/t/about-the-installation-issues-category/12) [X] I have read the tutorials, help and searched for similar issues [X] I provide relevant information about my server (component names and versions, etc.) [X] I provide a copy of my logs and healthcheck [X] I describe the steps I have taken to trouble shoot the problem [X] I describe the steps on how to reproduce the issue Hello, We have Communitiy, OnPremise 3.5.0. How can I enable MFA? When I get to the Administration area (since I am an admin) I dont see any security-related options. Can you please help? thank you. ---
**Author:** ![max](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/max/32/1528_2.png) [@max](https://community.passbolt.com/u/max)\ **Post date:** [March 29, 2023, 12:44pm UTC](https://community.passbolt.com/t/how-to-enable-mfa-on-onpremise-passbolt/6871/2 "2023-03-29T12:44:46Z")
Hi @mlakatamitis , If you are on 3.5 (version from January 2022) you should consider update your instance to benefit from security updates and as well to get access to MFA (since 3.9.0) and folders (since 3.12) follow the guide corresponding to your installation: [Passbolt Help | Update](https://help.passbolt.com/hosting/update) Also, have a look at the release not of the 3.5 since the keys of package expired last year and we updated them. The procedure to follow is here: [Passbolt Help | Wide Open](https://help.passbolt.com/releases/ce/wide-open-2) Cheers, Max ---
**Author:** ![mlakatamitis](https://avatars.discourse-cdn.com/v4/letter/m/6a8cbe/32.png) [@mlakatamitis](https://community.passbolt.com/u/mlakatamitis)\ **Post date:** [March 30, 2023, 10:27am UTC](https://community.passbolt.com/t/how-to-enable-mfa-on-onpremise-passbolt/6871/3 "2023-03-30T10:27:47Z")
Thanks Max, Updating our Passbolt worked fine. However, I cannot find how to enforce the MFA policy for all my users. In addition to this, is there any way to enforce the sessions to expire, let’s say, every 5 minutes of idle time? I only want my users to login with MFA, get their password, and if they forget logging out, they should be forced-logging out. thank you again ---
**Author:** ![garrett](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/garrett/32/545_2.png) [@garrett](https://community.passbolt.com/u/garrett)\ **Post date:** [March 31, 2023, 1:48am UTC](https://community.passbolt.com/t/how-to-enable-mfa-on-onpremise-passbolt/6871/4 "2023-03-31T01:48:13Z")
> [@As an admin I should be able to force MFA setup and MFA at every login for my users](https://community.passbolt.com/t/as-an-admin-i-should-be-able-to-force-mfa-setup-and-mfa-at-every-login-for-my-users/1867/8): > > Specs for MFA enforcement: [MFA policy settings - Requirements & specifications - Google Docs](https://docs.google.com/document/d/1a9ER_0h-JqkJPK6gQDRi-4lvseEmYtPPAVdf_MuGN6g/edit?usp=sharing) Missing specs for a setting to “disable remember me” option on MFA. For MFA ---
**Author:** ![garrett](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/garrett/32/545_2.png) [@garrett](https://community.passbolt.com/u/garrett)\ **Post date:** [March 31, 2023, 1:50am UTC](https://community.passbolt.com/t/how-to-enable-mfa-on-onpremise-passbolt/6871/5 "2023-03-31T01:50:51Z")
> [@Logouts after ~60 Minutes](https://community.passbolt.com/t/logouts-after-60-minutes/2698): > > Hi Folks! Several users complain a sporadic sign out of the session after about 60 Minutes and have to re-enter the password to decrypt passwords in both web gui and browser extension. Version: 2.12 passbolt.php session config: // Session configuration. 'Session' =\> ['defaults' =\> 'php', // Session timeout in minutes. 'timeout' =\> 720, 'ini' =\> ['session.gc\_maxlifetime' =\> 43200, 'session.cookie\_lifetime' =\> 43200] ], Sessions Browser Plugin Version: 2.12.2 Browsers affected: Chrome (l… For session expiration ---
**Author:** ![n2h-git](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/n2h-git/32/2955_2.png) [@n2h-git](https://community.passbolt.com/u/n2h-git)\ **Post date:** [August 7, 2023, 4:06pm UTC](https://community.passbolt.com/t/how-to-enable-mfa-on-onpremise-passbolt/6871/6 "2023-08-07T16:06:37Z")
On an AWS installation, I can manually navigate to https://[mydomain]/app/administration/mfa-policy but cannot use any of the options. I followed the update guides and literally stood this server up yesterday evening, so not sure if the AWS image is broken or not. ![image](https://canada1.discourse-cdn.com/flex031/uploads/passbolt/original/2X/3/30acab2bd14e082d02738776dd6563e419bd96f5.png) ---
**Author:** ![clayton](https://avatars.discourse-cdn.com/v4/letter/c/f9ae1b/32.png) [@clayton](https://community.passbolt.com/u/clayton)\ **Post date:** [August 8, 2023, 7:05am UTC](https://community.passbolt.com/t/how-to-enable-mfa-on-onpremise-passbolt/6871/7 "2023-08-08T07:05:38Z")
Just to be sure you have HTTPS set up for this server, correct? It is a requirement for using MFA ---
**Author:** ![n2h-git](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/n2h-git/32/2955_2.png) [@n2h-git](https://community.passbolt.com/u/n2h-git)\ **Post date:** [August 9, 2023, 4:28pm UTC](https://community.passbolt.com/t/how-to-enable-mfa-on-onpremise-passbolt/6871/8 "2023-08-09T16:28:33Z")
It is enabled. The domain begins with `https://passvault.my_domain.com` and is part of the AWS build option. I only had to choose the AMI instance and it did the rest according to the passbolt documentation found [here](https://help.passbolt.com/hosting/install/pro/aws.html) and [here](https://help.passbolt.com/configure/https/pro/aws/auto.html) on the PassBolt Help section