Skip to content
Novaz AuthenticatorGET

HPE 2FA: how to set up an authenticator app for your HPE account

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Why "Google Authenticator" works with Novaz
  2. Who turns it on
  3. Turn on 2FA with an authenticator app
  4. No backup codes, so add a second method
  5. Signing in
  6. If HPE rejects your code
  7. Changing phones
  8. If you lose your authenticator
  9. Turning it off
  10. Using an HPE product's own 2FA?
  11. Official HPE help

Hewlett Packard Enterprise (HPE) gives customers and partners one sign-in for all its applications, GreenLake cloud included: the HPE account (HPE). You can turn on multifactor authentication (MFA), HPE's term for two-factor authentication (2FA), for your own account, and a GreenLake workspace administrator can require it for everyone in the workspace (HPE).

The methods are Okta Verify push prompts, a security key or biometric authenticator, and codes from an app, which HPE lists as Google Authenticator (HPE). This guide uses Authenticator App - Novaz on iPhone for the code option. Any authenticator app works the same way.

How we checked this guide: the HPE steps come from HPE's own help pages, the HPE Account Help (2025) and the GreenLake cloud User Guide (October 2026), linked below, which we read on October 20, 2026. The two don't use quite the same labels. We haven't tested the steps on an HPE account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Why "Google Authenticator" works with Novaz

HPE only ever names Google Authenticator, but it explains the mechanism: HPE shares a secret key with your app during setup, and the app turns it into six-digit sign-in codes (HPE). Every authenticator app works that way, so Novaz can take its place. Okta Verify is a different app built around push prompts.

Who turns it on

  • You, for your account: on your profile at auth.hpe.com/profile/UserProfile, switch on the toggle in the Multifactor Authentication section (HPE). It then applies in every GreenLake workspace you open, even ones that don't require MFA.
  • A workspace administrator, for everyone: in GreenLake cloud, IAM and administration > Workspace details > Manage MFA, then Require MFA and Save changes. Every user, including those who come in through company single sign-on, sets up a method at their next sign-in (HPE).

Turn on 2FA with an authenticator app

These steps follow the GreenLake cloud User Guide (HPE):

  1. Turn on MFA on your profile, or just sign in to GreenLake cloud if your workspace requires it.
  2. On the Setup Multi-factor Authentication page, select Google Authenticator and click Setup.
  3. Choose iPhone as the device type, then open Novaz instead of downloading Google Authenticator.
  4. Follow the instructions on the page. HPE's help doesn't say whether it shows a QR code, a key to type, or both.
    • QR code: in Novaz, tap +, then Scan QR code. If it's on the same iPhone, take a screenshot and use Choose a photo (how).
    • Text key: tap +, then Enter key manually, and type it as the Setup key, with HPE as the Service (about setup keys).
  5. If the page asks for a code, type the six-digit code from Novaz.
  6. HPE then offers a second method, now or later. Click Finish when you're done.

Back to Settings leaves the setup at any point. HPE doesn't say how often its codes change, so scan the QR code if there is one: it carries those settings, while a typed key always gets 30-second codes.

No backup codes, so add a second method

The HPE pages we read don't mention backup or recovery codes. HPE recommends two MFA methods instead, to avoid being locked out (HPE). That matters with Novaz, whose keys stay on your iPhone unless you turn on iCloud backup or export a backup file. A security key, or Touch ID or Windows Hello on your computer, makes a good second method.

Signing in

HPE asks for the method you set up or used most recently. To switch, use the drop-down menu beside the authentication icon. For Google Authenticator, type the code from Novaz (HPE). HPE doesn't say whether it remembers trusted devices.

If HPE rejects your code

HPE's help has no advice on rejected codes. If you have two methods, make sure the page wants Google Authenticator, then check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when it's 15 seconds or more off. More in Authenticator code not working?

If your account gets locked, click Unlock Account? on the sign-in page, enter your email and click Send Email (HPE).

Changing phones

HPE's help doesn't cover replacing an MFA method. With a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone. Without one, before you give up the old phone, look in your profile's Multifactor Authentication section for a way to set Google Authenticator up again, and contact HPE (below) if you can't find one. See moving to a new iPhone.

If you lose your authenticator

Sign in with your second method if you have one. If not, HPE's account help says to contact support when you can't sign in, with two routes (HPE):

Both offer Multi-Factor Authentication under What do you need help with?. HPE doesn't say what proof it wants, how long a reset takes, or whether a workspace administrator can reset your MFA. See Lost the phone with your authenticator app?

Turning it off

A workspace administrator clears Require MFA under Manage MFA and clicks Save changes (HPE). The account help only describes the profile toggle for turning MFA on. Once HPE stops asking for codes, open the account in Novaz and tap Remove account.

Using an HPE product's own 2FA?

Some HPE products have their own two-factor setting. On HPE StoreOnce, an administrator turns on Authenticator App (TOTP) for a local user under Settings > Users and Groups, and the QR code appears after the user signs out and back in (HPE).

Official HPE help

More guides: Hosting and cloud