{"id":35772,"date":"2019-10-31T22:06:16","date_gmt":"2019-10-31T19:06:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dvuhfaktornaya-autentifikatsiya-na-sajte-s-ispolzovaniem-usb-tokena-kak-sdelat-vhod-na-sluzhebnyj-portal-bezopasnym\/"},"modified":"2019-10-31T22:06:16","modified_gmt":"2019-10-31T19:06:16","slug":"dvuhfaktornaya-autentifikatsiya-na-sajte-s-ispolzovaniem-usb-tokena-kak-sdelat-vhod-na-sluzhebnyj-portal-bezopasnym","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/dvuhfaktornaya-autentifikatsiya-na-sajte-s-ispolzovaniem-usb-tokena-kak-sdelat-vhod-na-sluzhebnyj-portal-bezopasnym","title":{"rendered":"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/dc51ee610da66c8eca1fcbd0f6de3315.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Hacker\u016fm se poda\u0159ilo z\u00edskat p\u0159\u00edstup k hlavn\u00edmu e-mailov\u00e9mu serveru mezin\u00e1rodn\u00ed spole\u010dnosti Deloitte. \u00da\u010det spr\u00e1vce tohoto serveru byl chr\u00e1n\u011bn pouze heslem.<\/p>\n<p><\/p>\n<p>Nez\u00e1visl\u00fd rakousk\u00fd v\u00fdzkumn\u00edk David Wind obdr\u017eel odm\u011bnu 5000 dolar\u016f za odhalen\u00ed zranitelnosti na p\u0159ihla\u0161ovac\u00ed str\u00e1nce intranetu Google.<\/p>\n<p><\/p>\n<p>91 % rusk\u00fdch spole\u010dnost\u00ed skr\u00fdv\u00e1 skute\u010dnosti o \u00faniku dat.<\/p>\n<p><\/p>\n<p>Takov\u00e9 zpr\u00e1vy lze t\u00e9m\u011b\u0159 ka\u017ed\u00fd den nal\u00e9zt v internetov\u00fdch novinov\u00fdch kan\u00e1lech. To je p\u0159\u00edm\u00fdm d\u016fkazem, \u017ee intern\u00ed slu\u017eby spole\u010dnosti je nutn\u00e9 chr\u00e1nit.<\/p>\n<p><\/p>\n<p>A \u010d\u00edm v\u011bt\u0161\u00ed je spole\u010dnost, t\u00edm v\u00edce zam\u011bstnanc\u016f m\u00e1 a slo\u017eit\u011bj\u0161\u00ed je jej\u00ed vnit\u0159n\u00ed IT infrastruktura, t\u00edm aktu\u00e1ln\u011bj\u0161\u00ed je pro ni probl\u00e9m \u00faniku informac\u00ed. Jak\u00e9 informace zaj\u00edmaj\u00ed \u00fato\u010dn\u00edky a jak je chr\u00e1nit?<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Jak\u00e9 \u00faniky informac\u00ed mohou u\u0161kodit spole\u010dnosti?<\/p>\n<p><\/p>\n<ul>\n<li>informace o z\u00e1kazn\u00edc\u00edch a transakc\u00edch;<\/li>\n<li>technick\u00e9 informace o produktech a know-how;<\/li>\n<li>informace o partnerech a speci\u00e1ln\u00edch nab\u00eddk\u00e1ch;<\/li>\n<li>osobn\u00ed \u00fadaje a \u00fa\u010detnictv\u00ed.<\/li>\n<\/ul>\n<p><\/p>\n<p>Pokud jste si uv\u011bdomili, \u017ee n\u011bjak\u00e9 informace z uveden\u00e9ho seznamu jsou dostupn\u00e9 z jak\u00e9hokoliv segmentu va\u0161\u00ed s\u00edt\u011b pouze po p\u0159edlo\u017een\u00ed u\u017eivatelsk\u00e9ho jm\u00e9na a hesla, m\u011bli byste p\u0159em\u00fd\u0161let o zv\u00fd\u0161en\u00ed \u00farovn\u011b ochrany dat a ochran\u011b p\u0159ed neopr\u00e1vn\u011bn\u00fdm p\u0159\u00edstupem.<\/p>\n<p><\/p>\n<p>Dvoufaktorov\u00e1 autentizace pomoc\u00ed hardwarov\u00fdch kryptografick\u00fdch nosi\u010d\u016f (token\u016f nebo \u010dipov\u00fdch karet) si zaslou\u017eila pov\u011bst velmi spolehliv\u00e9 a z\u00e1rove\u0148 pom\u011brn\u011b snadn\u00e9 na pou\u017eit\u00ed.<\/p>\n<p><\/p>\n<p>O v\u00fdhod\u00e1ch dvoufaktorov\u00e9 autentizace p\u00ed\u0161eme t\u00e9m\u011b\u0159 v ka\u017ed\u00e9m \u010dl\u00e1nku. Podrobn\u011bji o tom si m\u016f\u017eete p\u0159e\u010d\u00edst v \u010dl\u00e1nc\u00edch o tom, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/aktiv-company\/blog\/327232\/\">jak chr\u00e1nit \u00fa\u010det v dom\u00e9n\u011b Windows<\/a><\/noindex> a <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/aktiv-company\/blog\/329904\/\">e-mail<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>V tomto \u010dl\u00e1nku v\u00e1m uk\u00e1\u017eeme, jak pou\u017e\u00edvat dvoufaktorovou autentizaci pro p\u0159\u00edstup na intern\u00ed port\u00e1ly organizace.<\/p>\n<p><\/p>\n<p>Pro p\u0159\u00edklad vezmeme nejvhodn\u011bj\u0161\u00ed model pro firemn\u00ed pou\u017eit\u00ed, RUTOKEN \u2014 kryptografick\u00fd USB token <noindex><a rel=\"nofollow\" href=\"https:\/\/www.rutoken.ru\/products\/all\/rutoken-ecp-pki\/\">RUTOKEN ECP PKI<\/a><\/noindex>.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/aa18cc0649ddb1a23262afad02319fe9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Poj\u010fme se pustit do nastaven\u00ed.<\/p>\n<p><\/p>\n<h2>Krok 1 \u2014 Nastaven\u00ed serveru<\/h2>\n<p><\/p>\n<p>Z\u00e1kladem ka\u017ed\u00e9ho serveru je opera\u010dn\u00ed syst\u00e9m. V na\u0161em p\u0159\u00edpad\u011b je to Windows Server 2016. Spolu s n\u00edm a dal\u0161\u00edmi opera\u010dn\u00edmi syst\u00e9my rodiny Windows je \u0161\u00ed\u0159en IIS (Internet Information Services).<\/p>\n<p><\/p>\n<p>IIS je skupina internetov\u00fdch server\u016f, v\u010detn\u011b webov\u00e9ho serveru a FTP serveru. IIS zahrnuje aplikace pro vytv\u00e1\u0159en\u00ed a spr\u00e1vu webov\u00fdch str\u00e1nek.<\/p>\n<p><\/p>\n<p>IIS je navr\u017eena pro budov\u00e1n\u00ed webov\u00fdch slu\u017eeb pomoc\u00ed u\u017eivatelsk\u00fdch \u00fa\u010dt\u016f poskytovan\u00fdch dom\u00e9nou nebo slu\u017ebou Active Directory. To umo\u017e\u0148uje vyu\u017e\u00edt existuj\u00edc\u00ed datab\u00e1ze u\u017eivatel\u016f.<\/p>\n<p><\/p>\n<p>V <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/aktiv-company\/blog\/327232\/\">v prvn\u00edm \u010dl\u00e1nku<\/a><\/noindex> Podrobn\u011b jsme popsali, jak doinstalovat a nakonfigurovat na va\u0161em serveru Certifika\u010dn\u00ed autoritu (Certification Authority). Nyn\u00ed se na to podrobn\u011bji nezam\u011b\u0159\u00edme a budeme p\u0159edpokl\u00e1dat, \u017ee v\u0161e je ji\u017e nastaveno. HTTPS certifik\u00e1t pro webov\u00fd server mus\u00ed b\u00fdt vystaven spr\u00e1vn\u011b. Je lep\u0161\u00ed to ihned zkontrolovat.<\/p>\n<p><\/p>\n<p>Windows Server 2016 obsahuje vestav\u011bn\u00fd IIS verze 10.0.<\/p>\n<p><\/p>\n<p>Pokud je IIS nainstalov\u00e1n, zb\u00fdv\u00e1 ho spr\u00e1vn\u011b nakonfigurovat.<\/p>\n<p><\/p>\n<p>Ve f\u00e1zi v\u00fdb\u011bru rol\u00ed slu\u017eeb jsme za\u0161krtli <b>B\u011b\u017en\u00e1 autentizace<\/b>.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/2e22498a6b7ae00e5863970679b90b5a.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Pot\u00e9 v <b>Spr\u00e1vci slu\u017eeb IIS<\/b>\u00a0jsme povolili <b>B\u011b\u017enou autentizaci<\/b>.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/d69a95c155a665d90ead219c236f69e4.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>A uvedli jsme dom\u00e9nu, ve kter\u00e9 se nach\u00e1z\u00ed webov\u00fd server.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/09fa6ad105fe77a6008da061a32d56bf.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/a217db57533eeda11bf1dce5ce32e6fb.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Pot\u00e9 jsme p\u0159idali vazbu webu.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/624a2133329030b1c04b84b91d47e224.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>A vybrali jsme mo\u017enosti SSL.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/83510bc0f83faca9c90f3052b2745e6e.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>T\u00edm je konfigurace serveru dokon\u010dena.<\/p>\n<p><\/p>\n<p>Po proveden\u00ed t\u011bchto krok\u016f se na web m\u016f\u017ee dostat pouze u\u017eivatel, kter\u00fd m\u00e1 token s certifik\u00e1tem a PIN k\u00f3dem tokenu.<\/p>\n<p><\/p>\n<p>Je\u0161t\u011b jednou p\u0159ipom\u00edn\u00e1me, \u017ee podle <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/aktiv-company\/blog\/327232\/\">v prvn\u00edm \u010dl\u00e1nku<\/a><\/noindex>, m\u011bl u\u017eivatel p\u0159edem vyd\u00e1n token s kl\u00ed\u010di a certifik\u00e1tem vystaven\u00fdm podle \u0161ablony typu\u00a0<b>U\u017eivatel se smart kartou<\/b>.<\/p>\n<p><\/p>\n<p>Nyn\u00ed p\u0159ejdeme k nastaven\u00ed po\u010d\u00edta\u010de u\u017eivatele. M\u011bl by nakonfigurovat prohl\u00ed\u017ee\u010de, kter\u00e9 bude pou\u017e\u00edvat k p\u0159ipojen\u00ed k chr\u00e1n\u011bn\u00fdm webov\u00fdm str\u00e1nk\u00e1m.<\/p>\n<p><\/p>\n<h2>Krok 2 \u2013 Nastaven\u00ed po\u010d\u00edta\u010de u\u017eivatele<\/h2>\n<p><\/p>\n<p>Pro zjednodu\u0161en\u00ed p\u0159edpokl\u00e1dejme, \u017ee n\u00e1\u0161 u\u017eivatel m\u00e1 syst\u00e9m Windows 10.<\/p>\n<p><\/p>\n<p>Tak\u00e9 p\u0159edpokl\u00e1dejme, \u017ee m\u00e1 nainstalov\u00e1n bal\u00ed\u010dek <noindex><a rel=\"nofollow\" href=\"https:\/\/www.rutoken.ru\/support\/download\/drivers-for-windows\/\">Ovlada\u010de Rutoken pro Windows<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Instalace bal\u00ed\u010dku ovlada\u010d\u016f je voliteln\u00e1, proto\u017ee pravd\u011bpodobn\u011b podpora tokenu p\u0159ijde prost\u0159ednictv\u00edm Windows Update.<\/p>\n<p><\/p>\n<p>Pokud se tak nestalo, instalace bal\u00ed\u010dku Ovlada\u010d\u016f Rutoken pro Windows vy\u0159e\u0161\u00ed v\u0161echny probl\u00e9my.<\/p>\n<p><\/p>\n<p>P\u0159ipoj\u00edme token k po\u010d\u00edta\u010di u\u017eivatele a otev\u0159eme Ovl\u00e1dac\u00ed panel Rutoken.<\/p>\n<p><\/p>\n<p>Na kart\u011b <b>Certifik\u00e1ty<\/b> za\u0161krtneme odpov\u00eddaj\u00edc\u00ed certifik\u00e1t, pokud nen\u00ed za\u0161krtnut\u00fd.<\/p>\n<p><\/p>\n<p>T\u00edmto jsme zkontrolovali, \u017ee token funguje a obsahuje po\u017eadovan\u00fd certifik\u00e1t.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/47bcd59a3c34700229bcee7b4318121b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>V\u0161echny prohl\u00ed\u017ee\u010de krom\u011b Firefoxu se nastavuj\u00ed automaticky.<\/p>\n<p>\u00a0<\/p>\n<p>S nimi nen\u00ed t\u0159eba nic speci\u00e1ln\u00edho d\u011blat.<\/p>\n<p><\/p>\n<p>Te\u010f otev\u0159eme libovoln\u00fd prohl\u00ed\u017ee\u010d a zad\u00e1me adresu zdroje.<\/p>\n<p><\/p>\n<p>Ne\u017e se webov\u00e1 str\u00e1nka na\u010dte, otev\u0159e se okno pro v\u00fdb\u011br certifik\u00e1tu a pot\u00e9 okno pro zad\u00e1n\u00ed PIN k\u00f3du tokenu.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/c1ec3e977495b3311acc956ccd4d4118.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/589f494bc564d5cc6ed53e8a471564f5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Pokud je pro za\u0159\u00edzen\u00ed jako kryptografick\u00fd poskytovatel ve v\u00fdchoz\u00edm nastaven\u00ed zvolen Aktiv ruToken CSP, otev\u0159e se pro zad\u00e1n\u00ed PIN k\u00f3du jin\u00e9 okno.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/4c6a813e07f6fd2e679571f6ea6151af.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>A teprve po \u00fasp\u011b\u0161n\u00e9m zad\u00e1n\u00ed se v prohl\u00ed\u017ee\u010di otev\u0159e na\u0161e str\u00e1nka.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/c00f6965e18d5a4cc35abdc64e811835.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Pro prohl\u00ed\u017ee\u010d Firefox je t\u0159eba prov\u00e9st dal\u0161\u00ed nastaven\u00ed.<\/p>\n<p><\/p>\n<p>V nastaven\u00ed prohl\u00ed\u017ee\u010de vyberte <b>Ochrana osobn\u00edch \u00fadaj\u016f a Bezpe\u010dnost<\/b>. V \u010d\u00e1sti <b>Certifik\u00e1ty<\/b> stiskn\u011bte\u00a0<b>Ochrann\u00e9 za\u0159\u00edzen\u00ed<\/b>. Otev\u0159e se okno <b>Spr\u00e1va za\u0159\u00edzen\u00ed<\/b>.<\/p>\n<p><\/p>\n<p>Stiskn\u011bte\u00a0<b>Na\u010d\u00edst<\/b>, zadejte n\u00e1zev RUTOKEN ECP a cestu C:windowssystem32rtpkcs11ecp.dll.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/347d57fd495e7757f345f894418dcaa9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>To je v\u0161e, nyn\u00ed Firefox v\u00ed, jak pracovat s tokenem a umo\u017e\u0148uje p\u0159\u00edstup na web pomoc\u00ed n\u011bj.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/0f2ec13b310f583aad37823d7166005f.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Mimochodem, p\u0159ihl\u00e1\u0161en\u00ed pomoc\u00ed tokenu na webov\u00e9 str\u00e1nky funguje tak\u00e9 na MaMac\u00edch v prohl\u00ed\u017ee\u010di Safari, Chrome a Firefox.<\/p>\n<p><\/p>\n<p>Mus\u00edte jen nainstalovat z webu RUTOKEN\u00a0<noindex><a rel=\"nofollow\" href=\"https:\/\/www.rutoken.ru\/support\/download\/drivers-for-mac\/\">modul pro podporu Kl\u00ed\u010dov\u00e9ho \u0159et\u011bzce<\/a><\/noindex>\u00a0a vid\u011bt certifik\u00e1t na tokenu.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/6e68421ce09d493dbb7162ab745e6374.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Nastaven\u00ed prohl\u00ed\u017ee\u010d\u016f Safari, Chrome, Yandex a dal\u0161\u00edch nen\u00ed nutn\u00e9, sta\u010d\u00ed otev\u0159\u00edt web v libovoln\u00e9m z t\u011bchto prohl\u00ed\u017ee\u010d\u016f.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Dvoufaktorov\u00e1 autentizace na webu pomoc\u00ed USB tokenu. Jak zajistit bezpe\u010dn\u00fd p\u0159\u00edstup na slu\u017eebn\u00ed port\u00e1l?\" src=\"\/wp-content\/uploads\/ccd87fef41239c4099156bfea21f3bac.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Prohl\u00ed\u017ee\u010d Firefox se nastavuje t\u00e9m\u011b\u0159 stejn\u011b jako ve Windows (Nastaven\u00ed \u2014 Dal\u0161\u00ed \u2014 Certifik\u00e1ty \u2014 Ochrann\u00e1 za\u0159\u00edzen\u00ed). Jen cesta k knihovn\u011b je m\u00edrn\u011b jin\u00e1 \/Library\/Akitv Co\/Rutoken ECP\/lib\/librtpkcs11ecp.dylib.<\/p>\n<p><\/p>\n<h2>Z\u00e1v\u011bry<\/h2>\n<p><\/p>\n<p>Uk\u00e1zali jsme v\u00e1m, jak nastavit dvoufaktorovou autentizaci na webov\u00fdch str\u00e1nk\u00e1ch pomoc\u00ed kryptografick\u00fdch token\u016f. Jak v\u017edy, k tomu jsme nepot\u0159ebovali \u017e\u00e1dn\u00fd dal\u0161\u00ed software krom\u011b syst\u00e9mov\u00fdch knihoven RUTOKEN.<\/p>\n<p><\/p>\n<p>Tento postup m\u016f\u017eete prov\u00e9st s jak\u00fdmikoliv intern\u00edmi zdroji, tak\u00e9 flexibiln\u011b m\u016f\u017eete nastavovat skupiny u\u017eivatel\u016f, kte\u0159\u00ed budou m\u00edt k webu p\u0159\u00edstup, stejn\u011b jako kdekoli v Windows Serveru.<\/p>\n<p><\/p>\n<h2>Pou\u017e\u00edv\u00e1te jin\u00fd opera\u010dn\u00ed syst\u00e9m pro server?<\/h2>\n<p><\/p>\n<p>Pokud chcete, abychom napsali o nastaven\u00ed jin\u00fdch opera\u010dn\u00edch syst\u00e9m\u016f, dejte n\u00e1m v\u011bd\u011bt v koment\u00e1\u0159\u00edch k \u010dl\u00e1nku.<\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/aktiv-company\/blog\/412809\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0425\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0433\u043b\u0430\u0432\u043d\u043e\u043c\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Deloitte. \u0423\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u044d\u0442\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u044b\u043b\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u0440\u043e\u043b\u0435\u043c. \u041d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0430\u0432\u0441\u0442\u0440\u0438\u0439\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0414\u044d\u0432\u0438\u0434 \u0412\u0438\u043d\u0434 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 5 \u0442\u044b\u0441. \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0434\u043b\u044f \u0432\u0432\u043e\u0434\u0430 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438\u043d\u0442\u0440\u0430\u043d\u0435\u0442\u0430 Google. 91% \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0444\u0430\u043a\u0442\u044b \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0422\u0430\u043a\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043f\u043e\u0447\u0442\u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u0434\u0435\u043d\u044c \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0442\u0440\u0435\u0442\u0438\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35772","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/dvuhfaktornaya-autentifikatsiya-na-sajte-s-ispolzovaniem-usb-tokena-kak-sdelat-vhod-na-sluzhebnyj-portal-bezopasnym\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0414\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c USB-\u0442\u043e\u043a\u0435\u043d\u0430. \u041a\u0430\u043a \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0432\u0445\u043e\u0434 \u043d\u0430 \u0441\u043b\u0443\u0436\u0435\u0431\u043d\u044b\u0439 \u043f\u043e\u0440\u0442\u0430\u043b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c? | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/dvuhfaktornaya-autentifikatsiya-na-sajte-s-ispolzovaniem-usb-tokena-kak-sdelat-vhod-na-sluzhebnyj-portal-bezopasnym\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:06:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:06:16+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dvoufaktorov\u00e1 autentizace na webu s pou\u017eit\u00edm USB tokenu. Jak u\u010dinit p\u0159ihl\u00e1\u0161en\u00ed na slu\u017eebn\u00ed port\u00e1l bezpe\u010dn\u011bj\u0161\u00ed? | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/dvuhfaktornaya-autentifikatsiya-na-sajte-s-ispolzovaniem-usb-tokena-kak-sdelat-vhod-na-sluzhebnyj-portal-bezopasnym","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c USB-\u0442\u043e\u043a\u0435\u043d\u0430. \u041a\u0430\u043a \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0432\u0445\u043e\u0434 \u043d\u0430 \u0441\u043b\u0443\u0436\u0435\u0431\u043d\u044b\u0439 \u043f\u043e\u0440\u0442\u0430\u043b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c? | ProHoster","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/dvuhfaktornaya-autentifikatsiya-na-sajte-s-ispolzovaniem-usb-tokena-kak-sdelat-vhod-na-sluzhebnyj-portal-bezopasnym","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:06:16+00:00","article:modified_time":"2019-10-31T19:06:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35772","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 00:43:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:56:33","updated":"2026-01-22 00:43:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/35772","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=35772"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/35772\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=35772"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=35772"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=35772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}