Multifactor Authorization *(MFA) is being added to CQS, the Cerro Quoting System. This update of security will include:

• Strong Password usage
• A login code must be entered. This code will be received via email. And the login code can be received via SMS Text Message if desired.
• Via a new MyProfile page, passwords can be reset by our users without support assistance.
• Resetting a forgotten Password can now be done without support assistance.

This feature will be in place starting on Thursday May 1, 2025.

A password will now have to meet the following requirements:

• Must be 16 chars or greater in length
• Must have a upper case letter
• Must have a lower case letter
• Must have a numeric digit
• Must have a special character; one of #?!@$%^&*-

Once username and password is confirmed, the CQS site will send a 6 digit login code via email or SMS Text Message. This login code is entered by the user; if the code entered is the expected value, authentication is complete.

NOTE: The login code expires after 5 minutes. If that is the case, a button is provided to re-send a login code.

NOTE: Cerro provides a grace period of 8 hours for the login code. Once a login code is confirmed, the user may login using only their username and password.

TEXT MESSAGES
To enable SMS Text Messaging of the login code, the user must enter their 10 digit phone number via the MyProfile page. To opt-out of text messaging, the user can clear the Phone Number field.

A self help page is now provided for the user. The MyProfile page allows the user to change their password and set/clear their cell phone number for SMS Text Message. A link for this page is shown on the main menu of each CQS page.

Accompanying the prompt for UserName and Password, there is a button to start the process for resetting a user's password.

The process steps are as follows:

• Click the Reset Password button
• The user is shown a prompt for their email address.
• Enter the email address in the field shown and click the RESET button
• Assuming the email is found associated with a CQS user, an email is sent that contains a link.
• Click on the link in the email.
• Next, the user is shown two fields to use to enter the password and to confirm it.
• Click on the RESET PW button; the password will be updated
• At this point the user is shown the prompts for Username and Password; login can proceed using the new Password