{"id":2680,"date":"2020-11-15T06:00:59","date_gmt":"2020-11-15T14:00:59","guid":{"rendered":"https:\/\/www.cloudinsidr.com\/content\/?p=2680"},"modified":"2020-11-15T06:07:40","modified_gmt":"2020-11-15T14:07:40","slug":"cannot-sign-in-to-aws-as-iam-user-with-mfa-how-to-resync-your-mfa-token-generator","status":"publish","type":"post","link":"https:\/\/www.cloudinsidr.com\/content\/cannot-sign-in-to-aws-as-iam-user-with-mfa-how-to-resync-your-mfa-token-generator\/","title":{"rendered":"Cannot sign in to AWS as IAM user with MFA? How to resync your MFA token generator"},"content":{"rendered":"<p>Problems signing in to AWS? When the login page &#8220;Sign in as IAM user&#8221; repeatedly says: &#8220;Your authentication information is incorrect. Please try again&#8221; though you entered correct information, your Gemalto token generator for MFA authentication could be out of sync.<\/p>\n<figure id=\"attachment_2681\" aria-describedby=\"caption-attachment-2681\" style=\"width: 1024px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/www.cloudinsidr.com\/content\/cannot-sign-in-to-aws-as-iam-user-with-mfa-how-to-resync-your-mfa-token-generator\/sign_in_as_iam-01\/\" rel=\"attachment wp-att-2681\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2681 size-large\" src=\"https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-01-1024x654.png\" alt=\"Sign in as IAM user: Your authentication information is incorrect\" width=\"1024\" height=\"654\" srcset=\"https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-01-1024x654.png 1024w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-01-300x192.png 300w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-01-768x490.png 768w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-01-600x383.png 600w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-01.png 1239w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><figcaption id=\"caption-attachment-2681\" class=\"wp-caption-text\">Sign in as IAM user: Your authentication information is incorrect<\/figcaption><\/figure>\n<p><!--more--><\/p>\n<p>Follow these steps to resync your Gemalto token for access to your AWS account.<\/p>\n<h1>Step 1. Sign in as AWS root<\/h1>\n<p>Sign in to the AWS Management Console as the AWS root user for the account.<\/p>\n<h1>Step 2. Verify the configuration of IAM user&#8217;s sign-in credentials<\/h1>\n<p>In the AWS Management Console for the account, head straight to the IAM service, find the user and navigate to the user&#8217;s security credentials.<\/p>\n<figure id=\"attachment_2682\" aria-describedby=\"caption-attachment-2682\" style=\"width: 1024px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/www.cloudinsidr.com\/content\/cannot-sign-in-to-aws-as-iam-user-with-mfa-how-to-resync-your-mfa-token-generator\/sign_in_as_iam-02\/\" rel=\"attachment wp-att-2682\"><img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-2682\" src=\"https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-02-1024x472.png\" alt=\"Edit IAM user's security credentials\" width=\"1024\" height=\"472\" srcset=\"https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-02-1024x472.png 1024w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-02-300x138.png 300w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-02-768x354.png 768w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-02-1536x708.png 1536w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-02-600x277.png 600w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-02.png 1898w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><figcaption id=\"caption-attachment-2682\" class=\"wp-caption-text\">Edit IAM user&#8217;s security credentials<\/figcaption><\/figure>\n<p>Verify that the user is accessing the appropriate account using either the account number or alias.<br \/>\nVerify the serial number of the token generator.<\/p>\n<p>To replace or resync the token generator, click on the link &#8220;manage&#8221; next to &#8220;Assigned MFA device&#8221;.<\/p>\n<h1>Step 3. Resync the MFA device<\/h1>\n<p>In the dialog &#8220;Manage MFA device&#8221;, click on Resync and confirm.<\/p>\n<figure id=\"attachment_2683\" aria-describedby=\"caption-attachment-2683\" style=\"width: 1024px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/www.cloudinsidr.com\/content\/cannot-sign-in-to-aws-as-iam-user-with-mfa-how-to-resync-your-mfa-token-generator\/sign_in_as_iam-03\/\" rel=\"attachment wp-att-2683\"><img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-2683\" src=\"https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-03-1024x498.png\" alt=\"Resync MFA token generator for an IAM user on AWS\" width=\"1024\" height=\"498\" srcset=\"https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-03-1024x498.png 1024w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-03-300x146.png 300w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-03-768x373.png 768w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-03-600x292.png 600w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-03.png 1376w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><figcaption id=\"caption-attachment-2683\" class=\"wp-caption-text\">Resync MFA token generator for an IAM user on AWS<\/figcaption><\/figure>\n<p>Press the button on the Gemalto device to generate &#8220;MFA code 1&#8221;, then enter it in the appropriate field.<\/p>\n<p>Press the button on the Gemalto device a second time to generate &#8220;MFA code 2&#8221;, then enter it in the appropriate field.<\/p>\n<figure id=\"attachment_2685\" aria-describedby=\"caption-attachment-2685\" style=\"width: 1024px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/www.cloudinsidr.com\/content\/cannot-sign-in-to-aws-as-iam-user-with-mfa-how-to-resync-your-mfa-token-generator\/sign_in_as_iam-04\/\" rel=\"attachment wp-att-2685\"><img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-2685\" src=\"https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-04-1024x376.png\" alt=\"Resync MFA token generator for an IAM user on AWS\" width=\"1024\" height=\"376\" srcset=\"https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-04-1024x376.png 1024w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-04-300x110.png 300w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-04-768x282.png 768w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-04-600x221.png 600w, https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/sign_in_as_IAM-04.png 1379w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><figcaption id=\"caption-attachment-2685\" class=\"wp-caption-text\">Resync MFA token generator for an IAM user on AWS<\/figcaption><\/figure>\n<p>Confirm and you are done. The IAM user should now be able to sign in without a problem.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Problems signing in to AWS? When the login page &#8220;Sign in as IAM user&#8221; repeatedly says: &#8220;Your authentication information is incorrect. Please try again&#8221; though you entered correct information, your Gemalto token generator for MFA authentication could be out of sync.<\/p>\n","protected":false},"author":1,"featured_media":2686,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[266,33],"tags":[58,265,264,108],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v14.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Cannot sign in to AWS as IAM user with MFA? How to resync your MFA token generator - CloudInsidr<\/title>\n<meta name=\"robots\" content=\"index, follow\" \/>\n<meta name=\"googlebot\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta name=\"bingbot\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cloudinsidr.com\/content\/cannot-sign-in-to-aws-as-iam-user-with-mfa-how-to-resync-your-mfa-token-generator\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cannot sign in to AWS as IAM user with MFA? How to resync your MFA token generator - CloudInsidr\" \/>\n<meta property=\"og:description\" content=\"Problems signing in to AWS? When the login page &#8220;Sign in as IAM user&#8221; repeatedly says: &#8220;Your authentication information is incorrect. Please try again&#8221; though you entered correct information, your Gemalto token generator for MFA authentication could be out of sync.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cloudinsidr.com\/content\/cannot-sign-in-to-aws-as-iam-user-with-mfa-how-to-resync-your-mfa-token-generator\/\" \/>\n<meta property=\"og:site_name\" content=\"CloudInsidr\" \/>\n<meta property=\"article:published_time\" content=\"2020-11-15T14:00:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-11-15T14:07:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/photo-1506967726964-da9127fdec36.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2102\" \/>\n\t<meta property=\"og:image:height\" content=\"1401\" \/>\n<meta name=\"twitter:card\" content=\"summary\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#website\",\"url\":\"https:\/\/www.cloudinsidr.com\/content\/\",\"name\":\"CloudInsidr\",\"description\":\"Cyber security, infotech\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/www.cloudinsidr.com\/content\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/cannot-sign-in-to-aws-as-iam-user-with-mfa-how-to-resync-your-mfa-token-generator\/#primaryimage\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/www.cloudinsidr.com\/content\/wp-content\/uploads\/2020\/11\/photo-1506967726964-da9127fdec36.jpg\",\"width\":2102,\"height\":1401,\"caption\":\"by Broad Ripple, Indianapolis, United States, via Unsplash\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/cannot-sign-in-to-aws-as-iam-user-with-mfa-how-to-resync-your-mfa-token-generator\/#webpage\",\"url\":\"https:\/\/www.cloudinsidr.com\/content\/cannot-sign-in-to-aws-as-iam-user-with-mfa-how-to-resync-your-mfa-token-generator\/\",\"name\":\"Cannot sign in to AWS as IAM user with MFA? How to resync your MFA token generator - CloudInsidr\",\"isPartOf\":{\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/cannot-sign-in-to-aws-as-iam-user-with-mfa-how-to-resync-your-mfa-token-generator\/#primaryimage\"},\"datePublished\":\"2020-11-15T14:00:59+00:00\",\"dateModified\":\"2020-11-15T14:07:40+00:00\",\"author\":{\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#\/schema\/person\/dd6ee9cb21cf05763fd7cff3d6f11b2b\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.cloudinsidr.com\/content\/cannot-sign-in-to-aws-as-iam-user-with-mfa-how-to-resync-your-mfa-token-generator\/\"]}]},{\"@type\":[\"Person\"],\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#\/schema\/person\/dd6ee9cb21cf05763fd7cff3d6f11b2b\",\"name\":\"Cloud Insidr\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.cloudinsidr.com\/content\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8b2fa1415b3d573b97d818b8f8f83b7c?s=96&d=mm&r=g\",\"caption\":\"Cloud Insidr\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","_links":{"self":[{"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/posts\/2680"}],"collection":[{"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/comments?post=2680"}],"version-history":[{"count":4,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/posts\/2680\/revisions"}],"predecessor-version":[{"id":2690,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/posts\/2680\/revisions\/2690"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/media\/2686"}],"wp:attachment":[{"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/media?parent=2680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/categories?post=2680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudinsidr.com\/content\/wp-json\/wp\/v2\/tags?post=2680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}