---
title: Using MFA for Secure Remote Access
slug: kronpam-reference-guide-3-8-0/using-mfa-for-secure-remote-access
docTags: 
createdAt: 2025-06-20T11:12:55.033Z
---

Kron PAM’s built-in MFA can be used as a secondary layer of authentication for logging into the Kron PAM Secure Remote Access.
To enable MFA for Kron PAM Secure Remote Access:

1. Navigate to Administration > System Configuration. Manager.
2. Set the **rap.client.otp.enabled **parameter as **true**.

If the parameter is set to true *and *if MFA is enabled for the user, after the user enters Kron PAM password, the Secure Remote Access Portal should ask the user for OTP.

If the new parameter is set to false or if it is set to true but the OTP is not enabled for the user, after the user enters Kron PAM password, the Remote Access Portal lists the target devices without asking OTP.