Configure VIP Authentication for log on to the SEP Manager

 Authenticates the administrators with Symantec VIP authentication on their smartphone. Administrators provide a unique, one-time verification code when they log on, in addition to a password.

1. For this option to be available, you must first add the appropriate PKCS keystore file and keystore's password. You  can download the keystore with password from VIP Manager as shown below:

2.  In the SEP console from Admin > Servers and click the local server name, then from the Tasks menu click "Configure VIP Authentication". Then, browse the certificate and enter Keystore Password.

3. Verify that the Symantec Endpoint Protection Manager administrator has a corresponding username on the Symantec VIP Manager that matches exactly, including case sensitivity. The passwords for the two usernames do not have to match.

4. In the console, click Admin > Servers > Administrators, select the added administrator and  click  "Edit the Administrator"  on the "Authentication" tab, click "Enable two-factor authentication using VIP"

NOTE: Now your VIP integration has been completed, while you enter to the console at the password field you must put your administrator's password+one time passcode generated from your VIP Credential tool.