OKTA Authentication Lost After a Windows Update: Restoring wiTECH 2 Access
A Windows update or upgrade can remove the WinAuth authenticator used for OKTA two-factor on a diagnostic laptop, leaving you unable to sign into wiTECH 2 even though the account and subscription are both fine. This guide covers recognising the cause, restoring access, and setting OKTA up so it survives the next update.
If wiTECH 2 stopped letting you sign in immediately after a Windows update or a Windows 11 upgrade, and the account and subscription are both current, the likely cause is the authenticator rather than the account. OKTA two-factor can be configured on the diagnostic laptop using WinAuth, and a Windows update can remove or break that configuration. The account is intact, the subscription is intact, and the password is correct — but the second factor is gone, so the login cannot complete.
This Login & Account Access guide covers confirming the cause, restoring access, and preventing a repeat.
Recognising this rather than a subscription problem
This is the authenticator if:
-
The problem started immediately after a Windows update or upgrade.
-
The password is accepted but the two-factor step cannot be completed.
-
WinAuth is missing from the machine, or opens without your wiTECH entry.
-
Both the wiTECH 2 and TechAuthority subscriptions show as active.
It is more likely a subscription problem if the login fails before any two-factor prompt appears, or if you see a certificate or "Not a Valid TechAuthority Subscription" error. See the wiTECH 2.0 subscription article for that case.
Restoring access
The OKTA two-factor setup has to be reconfigured. It cannot be recovered from the removed WinAuth installation.
-
Submit a support ticket, or call AE Tools, and state that the OKTA authenticator was lost after a Windows update.
-
Have one of the following ready to verify the account: your sales order number, the tool serial number, or the wiTECH 2 J2534 serial number.
-
AE Tools requests a fresh OKTA setup for the account.
-
Watch for the OKTA emails and complete the setup as described in the wiTECH 2 password reset and OKTA setup guide.
Set OKTA up on a phone this time
Configuring OKTA on a phone rather than on the diagnostic laptop is the durable fix. A phone-based authenticator survives Windows updates, reimaging, partition rebuilds, and laptop replacements — all of which take out a WinAuth configuration on the machine.
If you have several technicians, make sure the authenticator is on a phone that stays with the shop rather than a personal device belonging to someone who may leave.
If a short-term subscription is running down
If you bought a three-day wiTECH or Tech Authority subscription for a job and lost access before using it, say so when you raise the ticket. The subscription clock does not pause while the authenticator is being restored. Raising it early gives the team the best chance of resolving it inside the window.
Before a planned Windows upgrade
If a Windows 11 upgrade or a machine rebuild is scheduled, move OKTA to a phone beforehand. That removes the authenticator from the list of things the upgrade can break, and avoids a recovery cycle on a day when a truck is booked in.