16.4 Deployment Recommendation

16.4.1 Number of MFA Servers

While one MFA server is sufficient to provide the functionality, more than one MFA servers provide high availability. MFA agent uses only one MFA server at any point of time. If one MFA server becomes unavailable, the MFA agent reconfigures itself to use next available MFA server.

Load balancing is not available in this release.

16.4.2 MFA Agents

MFA agents run as a service in every OES server where CIFS service is configured. To disable the MFA agent service, execute the following commands:

systemctl stop mfa-agent.service

systemctl disable mfa-agent.service