Lockdown mode¶
Afi provides a lockdown mode feature that restricts sensitive operations in an Afi organization account, including access management and data deletion. Once lockdown mode is enabled, protected operations are blocked for all administrators and backup operators. If necessary, an administrator with access to the lockdown secret code (generated during configuration) can temporarily lift lockdown mode.
When lockdown mode is active, the following operations are restricted:
- Organization and tenant access management
- Access policies management
- Backup SLA policies management, including retention and archiving rules
- Backup SLA assignment and auto-protection configuration
- Secret management, including backup encryption keys
- Backup deletion
Info
We recommend completing the account setup (e.g., backup policy and auto-protection setup, administrator configuration) before turning on lockdown mode.
All operations related to lockdown mode configuration — including disabling and temporarily lifting lockdown mode protection — are audited.
Turn on lockdown mode¶
To enable lockdown mode for an account, go to the Configuration → Access policies tab, select the Enable lockdown mode checkbox, and confirm. Afi will then display a dialog with a secret code that you can use to temporarily lift lockdown protection. Lockdown mode applies to the entire Afi organization account and its child tenants, affecting all administrators.
Info
Store the lockdown secret in a secure location. We suggest not saving it in your browser’s password manager to prevent accidental exposure if your Google or Microsoft 365 account credentials are compromised.
Temporarily unlock access to sensitive operations¶
Once lockdown mode is enabled, you will see a Lockdown mode: On banner at the top of the Afi portal pages where protected controls and settings are located.
To temporarily lift lockdown mode, click the lock icon on the right side of the banner and enter the lockdown secret in the prompt. Lockdown mode will then be turned off for 15 minutes, allowing access to protected operations during that time.
Turn off lockdown mode¶
To permanently disable lockdown mode, go to the Configuration → Access policies tab, unlock access using the lockdown mode code, clear the Enable lockdown mode checkbox, and confirm by entering the code again.
