Kisco Systems
i2Pass : Support : Frequently Asked Questions

The following is a list of frequently asked questions about i2Pass. If you have a question that is not covered here, ask us via email and we'll answer your question.

Register your E-mail address to receive automatic notification when this product is updated.

i2Pass Frequently Asked Questions:

Are there any consideration for i2Pass when installing an IBM i OS upgrade?

Yes. After the IBM i OS upgrade is complete and all IBM PTFs have been installed but before you put your system back into productive use, you must run the following command:


This is needed to avoid users bypassing the 2FA validation process during a normal signon. See the i2Pass User's Guide under the section titled "IBM i Security Loophole" for more information.

If a user specifies a "Program/procedure" on the signon screen, will it bypass i2Pass controls?

Yes, this is possible. To correct for this situation, we ship alternate signon screens for the system that remove the "Program/procedure" line from the signon screen. We also include step-by-step instructions on how to install the alternate signon screen objects and test them.

Can I send the 2FA code to a cell phone as a text?


You can send the 2FA code to your cell phone as a text using your cell carriers email-to-text feature. Kisco can help you with this if you are unfamiliar. In fact, if you want, you can send the code both as an email message and via text. This is how we use the product internally here.

When enrolling users, do I have to do them one at a time or can I enroll them all at once?

Your can enroll user profiles one at a time if you want to, but i2Pass also includes a batch enrollment utility that will let you enroll all active users or GENERIC* user profiles. We don't recommend that you do this while the software is installed on trial, but once you commit to i2Pass, it will simplify your activation process.

I am using the initial program setting on user profiles, will i2Pass still work for me?


When you register a user profile in i2Pass, the initial program information is saved. When the two factor authentication process has been completed successfully, then your initial program will still be called.