Introduction to Ultimatix Authenticator
In today's digital workplace, security is paramount. Ultimatix Authenticator is TCS's official two-factor authentication (2FA) application that adds an extra layer of security to your TCS account. This comprehensive guide will walk you through everything you need to know about downloading, setting up, and using the Ultimatix Authenticator effectively.
Two-factor authentication significantly enhances the security of your account by requiring something you know (your password) and something you have (the authenticator code). Even if someone obtains your password, they cannot access your account without the time-sensitive code generated by the Ultimatix Authenticator on your personal device.
The Ultimatix Authenticator generates Time-based One-Time Passwords (TOTP) that change every 30 seconds. These codes are required when logging into TCS systems like MyApp TCS, SM Portal, Self Service Portal, and other enterprise applications. Understanding how to properly set up and use this authenticator is essential for every TCS employee.
Important
The Ultimatix Authenticator is mandatory for accessing most TCS systems. Ensure you set it up during your onboarding process. If you lose access to the authenticator, follow the recovery procedures outlined in this guide.
What is Ultimatix Authenticator?
Ultimatix Authenticator is a mobile application developed specifically for TCS employees to provide secure two-factor authentication across all TCS digital platforms. The application implements the industry-standard TOTP (Time-based One-Time Password) algorithm, ensuring compatibility with TCS's authentication infrastructure while maintaining the highest security standards.
The authenticator works by establishing a shared secret key between your mobile device and TCS's authentication servers during the initial setup. This secret key, combined with the current time, generates a unique 6-digit code every 30 seconds. When you log in to a TCS system, you enter this code along with your password. The server generates the same code using the shared secret and current time, verifying that you possess the registered device.
Unlike SMS-based authentication which can be vulnerable to SIM-swapping attacks, the Ultimatix Authenticator operates offline once configured. The codes are generated locally on your device and do not require an internet connection. This makes the system more secure and reliable, as you can generate codes even without network connectivity.
The application is available for both Android and iOS platforms, ensuring that all TCS employees can use it regardless of their mobile device preference. The user interface is designed to be simple and intuitive, displaying the current code prominently with a countdown timer showing when the next code will be generated.
Why Two-Factor Authentication?
Two-factor authentication (2FA) is a security measure that requires users to provide two different types of identification before accessing an account. This approach significantly reduces the risk of unauthorized access compared to password-only authentication. Understanding why 2FA is important helps appreciate its value and encourages proper usage.
Protection Against Password Theft
Passwords can be stolen through various means including phishing attacks, data breaches, keyloggers, and social engineering. With 2FA enabled, a stolen password alone is not sufficient for an attacker to access your account. They would also need physical access to your authenticator device, making unauthorized access significantly more difficult.
Compliance with Security Standards
TCS serves clients across industries including banking, healthcare, and government sectors that have strict security and compliance requirements. 2FA is often mandated by regulations such as GDPR, HIPAA, and PCI-DSS. By using the Ultimatix Authenticator, you help TCS maintain compliance with these critical standards.
Protection of Sensitive Data
TCS systems contain sensitive employee data, client information, and proprietary business data. 2FA adds a crucial layer of protection for this information. If your account were compromised, the potential damage to you, TCS, and clients could be significant. 2FA significantly reduces this risk.
Real-Time Security Alerts
When 2FA is enabled, any login attempt triggers a code request. If you receive a code request when you are not trying to log in, it serves as an immediate alert that someone may be attempting to access your account. You can then take immediate action by changing your password and reporting the incident.
Download & Installation
The Ultimatix Authenticator is available on major mobile app stores. Follow these instructions to download and install the application on your device.
For Android Devices
Open Google Play Store
Launch the Google Play Store on your Android smartphone or tablet.
Search for Ultimatix Authenticator
Type 'Ultimatix Authenticator' or 'TCS Authenticator' in the search bar.
Verify Publisher
Ensure the app is published by Tata Consultancy Services. Check for the official TCS logo.
Tap Install
Click the Install button to download and install the application. Accept any permission requests.
Wait for Installation
The app will download and install automatically. Size is typically 10-20 MB.
Launch the App
Once installed, tap Open or find the app in your app drawer to launch it.
For iOS Devices
Open App Store
Launch the Apple App Store on your iPhone or iPad.
Search for the App
Search for 'Ultimatix Authenticator' or 'TCS Authenticator'.
Verify the Publisher
Confirm the app is from Tata Consultancy Services Limited.
Tap Get
Click Get and authenticate with Face ID, Touch ID, or your Apple ID password.
Complete Installation
The app will download and install automatically.
Open the App
Find the app icon on your home screen and tap to open.
System Requirements
Ultimatix Authenticator requires Android 6.0 (Marshmallow) or later for Android devices, and iOS 11.0 or later for Apple devices. Ensure your device meets these requirements.
Initial Setup Process
After installing the Ultimatix Authenticator, you need to complete the initial setup process to link it with your TCS account. This is typically done during your onboarding or when enabling 2FA for your account.
Open the App
Launch Ultimatix Authenticator on your mobile device. You will see the welcome screen.
Accept Terms
Read and accept the terms of use and privacy policy. These are required to proceed.
Set Up Security
Configure app security - set a PIN or enable biometric authentication (fingerprint/face recognition) to protect the app.
Proceed to Add Account
After initial security setup, you'll be prompted to add your TCS account. Continue to the linking process.
Information
The app-level PIN or biometric security adds another layer of protection. Even if someone gains access to your unlocked phone, they cannot open the authenticator without the PIN or your biometric verification.
Linking Your TCS Account
Linking your TCS account with the Ultimatix Authenticator establishes the secure connection required for generating valid authentication codes. This process involves scanning a QR code or entering a setup key provided by TCS systems.
Method 1: QR Code Scanning
Access 2FA Setup in TCS Portal
Log into a TCS portal (like Self Service Portal) and navigate to security settings. Find the 2FA or Authenticator setup option.
Display QR Code
The system will generate and display a QR code on your computer screen.
Open Authenticator App
On your mobile device, open Ultimatix Authenticator and select 'Add Account' or '+' button.
Scan QR Code
Point your phone camera at the QR code on screen. The app will automatically scan and register the account.
Verify Setup
The app will show a 6-digit code. Enter this code in the TCS portal to verify successful setup.
Complete Registration
Upon successful verification, your account is now linked. You'll see it listed in the authenticator app.
Method 2: Manual Entry
If QR scanning doesn't work, you can manually enter the setup key. The TCS portal will display a text key (also called secret key or setup key). In the authenticator app, select 'Manual Entry' option, enter your TCS email or Employee ID as the account name, and paste or type the setup key. Verify with the generated code as described above.
Security Notice
Never share the QR code or setup key with anyone. This key is used to generate your authentication codes. If someone else has this key, they can generate valid codes and potentially access your account.
Using the Authenticator
Once set up, using the Ultimatix Authenticator is straightforward. Whenever you log into a TCS system that requires 2FA, you'll need to provide the current code from the authenticator in addition to your password.
Generating Authentication Codes
Open the App
Launch Ultimatix Authenticator and authenticate with your PIN or biometrics if configured.
View Current Code
Your TCS account will be displayed with a 6-digit code. This is your current TOTP code.
Check Countdown Timer
A circular timer or countdown shows when the code will refresh. Codes change every 30 seconds.
Enter Code Before Expiry
Type the displayed code into the login prompt. Ensure you enter it before the timer expires.
If Code Expires
If the code changes while you're typing, use the new code. The system has a small grace period.
Understanding the Display
The app displays your account name (typically your Employee ID or email) and the current 6-digit code. The code is often displayed in two groups of three digits for easier reading. A progress indicator shows the time remaining before the next code is generated. When the indicator reaches the end, a new code appears automatically.
Tips for Quick Entry
- Have the app ready before starting the login process
- If less than 5 seconds remain, wait for the next code
- Some systems allow copying the code with a tap - look for a copy option
- Memorize the code pattern rather than reading digit by digit
Backup & Recovery
Losing access to your authenticator can lock you out of TCS systems. It's crucial to understand backup options and recovery procedures before you need them.
Backup Codes
When setting up 2FA, you may be provided with backup codes. These are one-time use codes that can be used instead of the authenticator code if you lose access to your device. Store these codes securely - in a password manager, printed in a safe location, or another secure method. Each backup code can only be used once.
Recovery Procedures
Contact GHD Support
If you lose your device or access to the authenticator, immediately contact GHD Support to report the issue.
Identity Verification
You will need to verify your identity through alternative means. This may include manager confirmation, security questions, or HR verification.
Account Reset
Support will disable 2FA on your account temporarily, allowing you to log in and set up a new authenticator.
Set Up New Authenticator
Follow the initial setup and linking process to configure the authenticator on your new or recovered device.
Update Backup Methods
Generate new backup codes and update your recovery information.
Pro Tip
Set up the authenticator on a backup device if possible, or save the setup key securely when first configuring 2FA. This can significantly simplify recovery if you lose your primary device.
Multiple Devices
You may want to set up the Ultimatix Authenticator on multiple devices for convenience or as a backup. Understanding how this works helps you manage your authentication setup effectively.
Setting Up on Additional Devices
During the initial setup process, you can scan the same QR code or enter the same setup key on multiple devices. All devices with the same setup key will generate identical codes at the same time. This is useful if you have both a personal phone and a work tablet, for example.
Important Considerations
- All devices must have accurate time settings - sync with network time
- If you reset 2FA, all previously configured devices become invalid
- Keep track of which devices have the authenticator installed
- Remove the app from devices you no longer use
Troubleshooting
Code Not Working
The most common reason for code rejection is time synchronization. Ensure your device's time is set to automatic. Go to Settings → Date & Time and enable automatic time. If time is correct but codes still fail, try restarting the app. As a last resort, you may need to reset and reconfigure 2FA through the Self Service Portal.
App Not Opening
If the app crashes or won't open, try force closing and reopening. Clear the app cache if available. Ensure your device has the latest OS updates. Uninstall and reinstall the app as a last resort - but note this will require reconfiguring your account.
Lost Device
If you lose your device, immediately use backup codes if available to access your account and reset 2FA. If you don't have backup codes, contact GHD Support for identity verification and account recovery.
New Phone Setup
When switching to a new phone, set up the authenticator on the new device before wiping the old one. If the old phone is already gone, follow the recovery procedures to regain access and set up fresh authentication.
Security Best Practices
- Enable app-level PIN or biometric protection on the authenticator
- Keep your device's operating system and apps updated
- Never share screenshots of your authenticator codes
- Never share your backup codes or setup keys
- Use device encryption (built into most modern phones)
- Enable screen lock on your mobile device
- Be cautious of phishing attempts asking for your codes
- Report lost devices immediately to GHD Support
Phishing Alert
TCS will never ask you to share authenticator codes via email, phone, or chat. If someone claiming to be from TCS IT asks for your code, it is a phishing attempt. Report such incidents immediately.
Common Errors & Solutions
Error: "Invalid Code"
Verify device time is synced. Wait for new code and try again. Ensure you're entering the code for the correct account if you have multiple accounts configured.
Error: "Account Already Configured"
This account is already set up in the app. Look for the existing entry or remove it before adding again if you need to reconfigure.
Error: "QR Code Not Scanning"
Ensure good lighting, hold phone steady, and position camera properly. Clean your camera lens. Try manual entry option instead.
Error: "Time Sync Failed"
Enable automatic time in device settings. Connect to the internet and restart the app. Some apps have a manual time sync option in settings.
Frequently Asked Questions
Do I need internet to use the authenticator?
No, once configured, codes are generated locally on your device without internet connection. However, initial setup requires internet.
What happens if my phone battery dies?
You won't be able to access codes until your phone is charged. Use backup codes as an alternative, or wait until you can charge your device.
Can I use Google Authenticator instead?
TCS may support compatible TOTP apps, but Ultimatix Authenticator is the official and recommended option. Check with IT policy for approved alternatives.
How often do I need to enter the code?
You typically need to code each time you log in to a TCS system. Some systems may remember your device for a period, reducing frequency.
