{"id":81662,"date":"2020-05-15T13:42:35","date_gmt":"2020-05-15T11:42:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/kak-ne-dat-buhgalteru-sebya-kinut-ili-perevodim-1s-v-oblako-poshagovaya-instrukcziya"},"modified":"2020-05-15T13:42:35","modified_gmt":"2020-05-15T11:42:35","slug":"kak-ne-dat-buhgalteru-sebya-kinut-ili-perevodim-1s-v-oblako-poshagovaya-instrukcziya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-ne-dat-buhgalteru-sebya-kinut-ili-perevodim-1s-v-oblako-poshagovaya-instrukcziya","title":{"rendered":"Jak se nenechat podv\u00e9st \u00fa\u010detn\u00edm nebo P\u0159ev\u00e1d\u00edme 1C do cloudu. Krok za krokem n\u00e1vod","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Jak se v sou\u010dasnosti ve firm\u00e1ch \u00fa\u010dtuje? Obvykle jde o program 1C, nainstalovan\u00fd na lok\u00e1ln\u00edm po\u010d\u00edta\u010di \u00fa\u010detn\u00edho, na kter\u00e9m pracuje st\u00e1l\u00fd \u00fa\u010detn\u00ed nebo specialista na outsourcing. Outsourcer m\u016f\u017ee spravovat sou\u010dasn\u011b n\u011bkolik takov\u00fdch firemn\u00edch klient\u016f, n\u011bkdy dokonce i konkurent\u016f.<\/p>\n

P\u0159i takov\u00e9m p\u0159\u00edstupu jsou p\u0159\u00edstupy k bankovn\u00edm \u00fa\u010dt\u016fm, prost\u0159edk\u016fm kryptochr\u00e1n\u011bn\u00ed, elektronick\u00e9mu ob\u011bhu dokument\u016f a dal\u0161\u00edm d\u016fle\u017eit\u00fdm slu\u017eb\u00e1m nastaveny p\u0159\u00edmo na po\u010d\u00edta\u010di \u00fa\u010detn\u00edho. <\/p>\n

Co to znamen\u00e1? \u017de v\u0161e je v rukou \u00fa\u010detn\u00edho a pokud se rozhodne podv\u00e9st majitele firmy, ud\u011bl\u00e1 to bez probl\u00e9m\u016f.<\/p>\n

\"Jak<\/a><\/noindex>film \u201eRocknRolla\u201c (2008)<\/i><\/p>\n

V tomto \u010dl\u00e1nku si pov\u00edme, jak spolehliv\u011b uzamknout v\u0161echny slu\u017eby, v\u010detn\u011b 1C, v jednom cloudu, abyste m\u011bli mo\u017enost od\u0159\u00edznout v\u0161echny slu\u017eby jedn\u00edm tla\u010d\u00edtkem, i kdy\u017e \u00fa\u010detn\u00ed odlet\u011bl na kouzeln\u00e9 Bali.<\/a><\/noindex><\/p>\n

Co se v\u016fbec m\u016f\u017ee st\u00e1t? Dva skute\u010dn\u00e9 p\u0159\u00edpady<\/h2>\n

<\/p>\n

Syst\u00e9mov\u00fd administr\u00e1tor z Wall Street<\/h3>\n

\nMan\u017eelka na\u0161eho spoluzakladatele \u2014 zku\u0161en\u00e1 \u00fa\u010detn\u00ed \u2014 ji v minul\u00e9m m\u011bs\u00edci oslovila o pomoc v\u00fdznamn\u00e1 restaurace v Moskv\u011b. Restaurace ukl\u00e1dala v\u0161echny datab\u00e1ze na vlastn\u00edm serveru, o kter\u00fd se staral st\u00e1l\u00fd sysadmin z t\u00fdmu restaurace.<\/p>\n

P\u0159\u00edmo b\u011bhem pr\u00e1ce \u00fa\u010detn\u00ed za\u0161el sysadmin do online kasina a chytl virus, kter\u00fd zni\u010dil celou datab\u00e1zi. Na koho byla vinu svr\u017eena? P\u0159esn\u011b tak, na pr\u00e1v\u011b p\u0159\u00edchoz\u00ed \u00fa\u010detn\u00ed. <\/p>\n

Hrdince se velmi vyda\u0159ilo, \u017ee jej\u00ed man\u017eel je managing partner hostingov\u00e9 firmy a rozum\u00ed takov\u00fdm v\u011bcem. Po dlouh\u00fdch h\u00e1dk\u00e1ch telefonicky (n\u00e1\u0161 kolega u\u017e byl p\u0159ipraven vyrazit a osobn\u011b se postarat o admina) byly shrom\u00e1\u017ed\u011bny d\u016fkazy a vin\u00edk potrest\u00e1n. Ale datab\u00e1ze byla ztracena, tak\u017ee pro sysadmina se happy end nekonal.<\/p>\n

Notebook, uv\u00edzl\u00fd v ciz\u00edm byt\u011b<\/h3>\n

\nTo je star\u00fd p\u0159\u00edb\u011bh na\u0161ich dal\u0161\u00edch zn\u00e1m\u00fdch.<\/p>\n

Zku\u0161en\u00e1 \u017eena ve v\u011bku 64 let pe\u010dliv\u011b vedla \u00fa\u010detnictv\u00ed internetov\u00e9ho obchodu s \u010d\u00ednsk\u00fdmi gadgety p\u0159es 1C. Klient a datab\u00e1ze byly ulo\u017eeny na notebooku, kter\u00fd j\u00ed byl poskytnut v pr\u00e1ci. Bylo to pohodln\u00e9: snadno tisknout z kancel\u00e1\u0159sk\u00fdch tisk\u00e1ren, datab\u00e1ze byla mal\u00e1 a ve\u0161la se na netbook, mohla si ji vz\u00edt na chalupu nebo dom\u016f.<\/p>\n

Pak do\u0161lo k trag\u00e9dii: v p\u00e1tek ve\u010der ji odvezli s mrtvic\u00ed, \u017e\u00e1dn\u00e1 z\u00e1chrann\u00e1 slu\u017eba. Netbook z\u016fstal doma, proto\u017ee \u00fa\u010detn\u00ed byla zodpov\u011bdn\u00e1 a vzala si pr\u00e1ci na v\u00edkend.<\/p>\n

Notebook was certainly rescued, the accountant has recovered, but if we transfer this situation to the present days and replace a stroke with coronavirus, the operation of rescuing the computer from a locked apartment takes on a completely different scale.<\/p>\n

Can two cats and a Labrador open the door for you? Even if the neighbor waters the flowers and feeds the cats, will she give you the computer?<\/p>\n

But let's move on to 1C in the cloud \u2014 what deployment and cloud operation options are available. <\/p>\n

What options are there for working with 1C in the cloud?<\/h2>\n

\nOption 1. Client + corporate application server + database<\/b><\/p>\n

Suitable for large companies where the services of a whole team of accountants are needed. This is quite an expensive option (many additional licenses are required), and we won\u2019t consider it since the article is about configuring work for an accountant in a small firm.<\/p>\n

Option 2. 1C: Fresh<\/b><\/p>\n

1C: Fresh is a quite convenient way to work with 1C via a browser. No configuration is required: when renting such a license, the franchisee company will set everything up themselves and provide you with a username and password. <\/p>\n

But there are two downsides: <\/p>\n

\u2717<\/b> High price: the basic tariff for one application requires payment upfront for at least six months for two workplaces \u2014 6808 CZK.
\n\u2717<\/b> You cannot configure the VPS server yourself, on which many companies operate simultaneously. You are given a key only to your room in a dormitory, based on shared hosting principles.<\/p>\n

In Fresh, there is also the configuration 1C: BusinessStart, a subscription for which, during a promotion, costs 400 CZK per month. The capabilities of the configuration are significantly limited; without the promotion, the subscription will cost 1000 CZK, and it must also be paid for a minimum of six months.<\/p>\n

Option 3: your own VPS, on which the 1C client and database are installed.<\/b><\/p>\n

This option is suitable for small companies where 1-2 accountants work \u2014 they can comfortably operate without installing the 1C: Enterprise application server and SQL server.<\/p>\n

The main advantage of this approach is that the rented VPS can serve as a full-fledged working computer for the accountant with RDP access.<\/p>\n

Kdy\u017e jsou v\u0161echna data, dokumenty a p\u0159\u00edstupy ulo\u017eeny na VPS pod va\u0161\u00ed kontrolou, m\u016f\u017eete se b\u00e1t nejen zam\u010den\u00fdch notebook\u016f v byt\u011b, ale ani spole\u010dn\u00e9ho \u00fat\u011bku \u00fa\u010detn\u00edho se syst\u00e9mov\u00fdm administr\u00e1torem na ostrovy, kter\u00fd s sebou vezme v\u0161echny dokumenty a pen\u00edze z \u00fa\u010dtu. M\u016f\u017eete deaktivovat p\u0159\u00edstup jedn\u00edm tla\u010d\u00edtkem odstran\u011bn\u00edm u\u017eivatele.<\/p>\n

Tento zp\u016fsob je dobr\u00fd i z n\u00e1sleduj\u00edc\u00edch d\u016fvod\u016f:<\/p>\n

    \n
  1. Kdy\u017e \u00fa\u010detn\u00ed pracuje s produkty 1C, 1C generuje spoustu dokument\u016f Word, Excel, Acrobat. Kdy\u017e je klient 1C spu\u0161t\u011bn na po\u010d\u00edta\u010di \u00fa\u010detn\u00edho, v\u0161echny dokumenty se ukl\u00e1daj\u00ed na jeho notebook. P\u0159i pr\u00e1ci na VPS se v\u0161e ukl\u00e1d\u00e1 na virtu\u00e1ln\u00edm stroji.<\/li>\n
  2. Datab\u00e1ze 1C a dokumenty v\u016fbec nep\u0159ech\u00e1zej\u00ed na osobn\u00ed po\u010d\u00edta\u010d \u00fa\u010detn\u00edho (p\u0159i pou\u017e\u00edv\u00e1n\u00ed 1C: Fresh by se dokumenty musely stahovat).<\/li>\n
  3. Mo\u017enost p\u0159ipojit VPS do podnikov\u00e9 s\u00edt\u011b p\u0159es VPN a zajistit \u00fa\u010detn\u00edmu bezpe\u010dn\u00fd p\u0159\u00edstup k vnit\u0159n\u00edm zdroj\u016fm (p\u0159i pou\u017e\u00edv\u00e1n\u00ed 1C: Fresh by byl osobn\u00ed po\u010d\u00edta\u010d \u00fa\u010detn\u00edho nutn\u00e9 p\u0159ipojit do chr\u00e1n\u011bn\u00e9 lok\u00e1ln\u00ed s\u00edt\u011b).<\/li>\n
  4. Je mo\u017en\u00e9 nastavit bezpe\u010dnou integraci 1C: Podniku s extern\u00edmi syst\u00e9my: EDI, osobn\u00edmi \u00fa\u010dty bank, st\u00e1tn\u00edmi slu\u017ebami atd. V p\u0159\u00edpad\u011b pou\u017eit\u00ed 1C: Fresh by bylo nutn\u00e9 p\u0159\u00edstup k mnoha kritick\u00fdm slu\u017eb\u00e1m nastavit na osobn\u00edm po\u010d\u00edta\u010di \u00fa\u010detn\u00edho.<\/li>\n<\/ol>\n

    \nNo a cena, samoz\u0159ejm\u011b. Pron\u00e1jem virtu\u00e1ln\u00edho stroje s licenc\u00ed 1C bude st\u00e1t asi 1500 K\u010d m\u011bs\u00ed\u010dn\u011b, pokud si zvol\u00edte luxusn\u00ed tarify od drah\u00fdch hosting\u016f. To nen\u00ed o moc dra\u017e\u0161\u00ed ne\u017e minim\u00e1ln\u00ed z\u00e1kladn\u00ed bal\u00ed\u010dek slu\u017eeb 1C: Fresh a je to podstatn\u011b levn\u011bj\u0161\u00ed ne\u017e u jin\u00fdch p\u0159edplatn\u00fdch. Platit lze m\u011bs\u00ed\u010dn\u011b.<\/p>\n

    Licenci lze zakoupit od jak\u00e9hokoli francizanta, a cena z\u00e1vis\u00ed na konfiguraci bal\u00ed\u010dku produkt\u016f a slu\u017eeb, a po vypr\u0161en\u00ed doby platnosti bude nutn\u00e9 doplatit za podporu p\u0159es port\u00e1l 1C: ITS, aby byly aktualizace.<\/p>\n

    Pokud vezmete VPS<\/a><\/noindex> u n\u00e1s, nab\u00edz\u00edme k t\u011bmto \u00fa\u010del\u016fm virtu\u00e1ln\u00ed stroj s p\u0159edinstalovan\u00fdm klientem 1C: Podniku (sta\u010d\u00ed n\u00e1m napsat na podporu s popisem va\u0161eho \u00fakolu). Pron\u00e1jem virtu\u00e1ln\u00edho stroje stoj\u00ed p\u0159ibli\u017en\u011b 800 K\u010d m\u011bs\u00ed\u010dn\u011b, a cena pron\u00e1jmu licence 1C na jedno pracovn\u00ed m\u00edsto bude dal\u0161\u00edch 700 K\u010d. Podporu poskytujeme bez dal\u0161\u00edho poplatku, p\u0159i\u010dem\u017e 1C: Podnik aktualizuj\u00ed na\u0161i specialist\u00e9, pokud nap\u00ed\u0161ete ticket<\/a><\/noindex> do technick\u00e9 podpory.<\/p>\n

    Pro \u00fa\u010detn\u00edho to bude vypadat p\u0159esn\u011b tak, jak je zvykl\u00fd \u2014 zn\u00e1m\u00e1 pracovn\u00ed plocha, ikony, dokonce si m\u016f\u017ee pov\u011bsit i zn\u00e1m\u00e9 pozad\u00ed. A te\u010f k meritu v\u011bci, jak vytvo\u0159it a nastavit takov\u00e9 cloudov\u00e9 prost\u0159ed\u00ed, jeho\u017e p\u0159\u00edstup lze deaktivovat stisknut\u00edm jedn\u00e9 tla\u010d\u00edtka.<\/p>\n

    Objedn\u00e1v\u00e1me VPS se zabudovan\u00fdm 1C: podnik\u00e1n\u00edm<\/h2>\n

    \nPro \u00fa\u010detn\u00edho je ide\u00e1ln\u00ed OS Windows. Co se t\u00fd\u010de v\u00fdkonu VPS \u2014 podle na\u0161ich zku\u0161enost\u00ed, pro pohodlnou pr\u00e1ci jednoho nebo dvou zam\u011bstnanc\u016f s file serverovou verz\u00ed 1C: podnik\u00e1n\u00ed sta\u010d\u00ed konfigurace se dv\u011bma procesorov\u00fdmi j\u00e1dry, minim\u00e1ln\u011b 4-5 GB RAM a rychl\u00fdm SSD o kapacit\u011b 50 GB. <\/p>\n

    Slu\u017eby automatizujeme teprve pot\u00e9, co se d\u016fkladn\u011b ujist\u00edme, \u017ee je to pro z\u00e1kazn\u00edky pot\u0159eba, proto zat\u00edm p\u0159ipojen\u00ed nen\u00ed automatizov\u00e1no a objedn\u00e1n\u00ed serveru s 1C prob\u00edh\u00e1 prost\u0159ednictv\u00edm ticketov\u00e9ho syst\u00e9mu. V\u0161echno nastav\u00edme ru\u010dn\u011b. <\/p>\n

    Kdy\u017e se p\u0159ipoj\u00edte k vytvo\u0159en\u00e9 virtu\u00e1ln\u00ed ma\u0161in\u011b p\u0159es RDP, m\u016f\u017eete vid\u011bt p\u0159ibli\u017en\u011b takov\u00fd obr\u00e1zek.<\/p>\n

    \"Jak
    \n<\/p>\n

    P\u0159en\u00e1\u0161\u00edme datab\u00e1zi 1C<\/h2>\n

    \nDal\u0161\u00edm krokem je exportovat datab\u00e1zi z d\u0159\u00edve nainstalovan\u00e9 verze 1C: podnik\u00e1n\u00ed na \u00fa\u010detn\u00edm po\u010d\u00edta\u010di. <\/p>\n

    Pot\u00e9 ji mus\u00edte nahr\u00e1t na virtu\u00e1ln\u00ed server p\u0159es FTP, jak\u00fdmkoli cloudov\u00fdm \u00falo\u017ei\u0161t\u011bm nebo p\u0159ipojen\u00edm m\u00edstn\u00edho \u00falo\u017en\u00e9ho za\u0159\u00edzen\u00ed k VPS prost\u0159ednictv\u00edm RDP klienta. <\/p>\n

    N\u00e1sledn\u011b je t\u0159eba p\u0159idat informa\u010dn\u00ed datab\u00e1zi do klientsk\u00e9ho programu: ukazujeme, jak to ud\u011blat na obrazovk\u00e1ch.<\/p>\n

    \"Jak
    \n
    \n\"Jak
    \n
    \nPo \u00fasp\u011b\u0161n\u00e9m p\u0159id\u00e1n\u00ed datab\u00e1ze je 1C: podnik\u00e1n\u00ed p\u0159ipraveno k pou\u017eit\u00ed na va\u0161em vlastn\u00edm VPS. Zb\u00fdv\u00e1 nastavit vzd\u00e1len\u00e9 pracovn\u00ed plochy pro u\u017eivatele a integraci s r\u016fzn\u00fdmi extern\u00edmi syst\u00e9my, jako jsou osobn\u00ed \u00fa\u010dty bank nebo slu\u017eby elektronick\u00e9ho dokumentov\u00e9ho ob\u011bhu.<\/p>\n

    Nastavujeme vzd\u00e1len\u00e9 pracovn\u00ed plochy<\/h2>\n

    \nVe v\u00fdchoz\u00edm nastaven\u00ed Windows Server povoluje maxim\u00e1ln\u011b dv\u011b sou\u010dasn\u00e9 RDP relace pro spr\u00e1vu syst\u00e9mu. Pou\u017e\u00edvat je pro pr\u00e1ci technicky nen\u00ed slo\u017eit\u00e9 (sta\u010d\u00ed p\u0159idat nemajetkov\u00e9ho u\u017eivatele do odpov\u00eddaj\u00edc\u00ed skupiny), ale to by bylo poru\u0161en\u00edm podm\u00ednek licen\u010dn\u00ed smlouvy. <\/p>\n

    Abychom mohli nasadit plnohodnotn\u00e9 slu\u017eby vzd\u00e1len\u00e9 plochy (Remote Desktop Services nebo RDS), je t\u0159eba p\u0159idat serverov\u00e9 role a komponenty, aktivovat licen\u010dn\u00ed server nebo pou\u017e\u00edt extern\u00ed, a tak\u00e9 nainstalovat samostatn\u011b zakoupen\u00e9 klientsk\u00e9 licence (RDS CAL). <\/p>\n

    Tady tak\u00e9 m\u016f\u017eeme pomoci: m\u016f\u017eete si u n\u00e1s zakoupit RDS CAL jednodu\u0161e zasl\u00e1n\u00edm po\u017eadavku na podporu<\/a><\/noindex>. D\u00e1le budeme jednat my: nainstalujeme je na n\u00e1\u0161 licen\u010dn\u00ed server a nastav\u00edme slu\u017eby vzd\u00e1len\u00e9 plochy. <\/p>\n

    Ale samoz\u0159ejm\u011b, pokud byste cht\u011bli v\u0161echno nastavit sami, nebudeme v\u00e1s o to pot\u011b\u0161en\u00ed p\u0159ipravovat.<\/p>\n

    \"Jak
    \n
    \nPo nastaven\u00ed RDS m\u016f\u017ee \u00fa\u010detn\u00ed za\u010d\u00edt pracovat s 1C: Enterprise na virtu\u00e1ln\u00edm serveru jako na m\u00edstn\u00edm po\u010d\u00edta\u010di. Nezapome\u0148te nainstalovat na VPS standardn\u00ed \u00fa\u010detn\u00ed software: kancel\u00e1\u0159sk\u00fd bal\u00edk, alternativn\u00ed prohl\u00ed\u017ee\u010d, Acrobat Reader. <\/p>\n

    Nyn\u00ed zb\u00fdv\u00e1 postarat se o p\u0159ipojen\u00ed klienta 1C k bankovn\u00edm osobn\u00edm \u00fa\u010dt\u016fm.<\/p>\n

    Nastavujeme integraci s bankami<\/h2>\n

    \nV 1C: Enterprise existuje technologie DirectBank pro p\u0159\u00edmou v\u00fdm\u011bnu dat s bankami, bez nutnosti instalace dal\u0161\u00edho softwaru. Umo\u017e\u0148uje stahovat v\u00fdpisy a pos\u00edlat platebn\u00ed dokumenty bez jejich exportu do soubor\u016f, pokud banka takov\u00fd standard interakce podporuje (v opa\u010dn\u00e9m p\u0159\u00edpad\u011b se budeme muset starat o textov\u00e9 soubory ve form\u00e1tu 1C, ale nic hrozn\u00e9ho \u2014 nyn\u00ed se ukl\u00e1daj\u00ed na virtu\u00e1ln\u00ed stroj). <\/p>\n

    Nejprve se v \u00fa\u010detn\u00edm programu vytvo\u0159\u00ed b\u011b\u017en\u00fd \u00fa\u010det (pokud je\u0161t\u011b nebyl vytvo\u0159en), pot\u00e9 je t\u0159eba otev\u0159\u00edt jeho formul\u00e1\u0159 v kart\u011b organizace a vybrat p\u0159\u00edkaz \u201eP\u0159ipojit 1C: DirectBank\u201c. Nastaven\u00ed v\u00fdm\u011bny m\u016f\u017ee b\u00fdt na\u010dteno do 1C: Enterprise automaticky nebo ru\u010dn\u011b: pro podrobn\u00e9 pokyny se obra\u0165te na webov\u00e9 str\u00e1nky banky. V n\u011bkter\u00fdch p\u0159\u00edpadech je nutn\u00e9 aktivovat integraci s produkty 1C zvl\u00e1\u0161\u0165 v osobn\u00edm \u00fa\u010dtu. <\/p>\n

    \"Jak
    \n
    \nPro nastaven\u00ed m\u016f\u017ee b\u00fdt pot\u0159eba u\u017eivatelsk\u00e9 jm\u00e9no a heslo k osobn\u00edmu \u00fa\u010dtu spole\u010dnosti v bance. Nej\u010dast\u011bji se p\u0159i tom pou\u017e\u00edv\u00e1 dvoufaktorov\u00e1 autentizace (2FA) p\u0159es SMS. <\/p>\n

    Dal\u0161\u00ed popul\u00e1rn\u00ed mo\u017enost, zabezpe\u010den\u00fd hardwarov\u00fd token, n\u00e1m nevyhovuje z d\u016fvodu pou\u017eit\u00ed virtu\u00e1ln\u00edho serveru. Krom\u011b toho by bylo nutn\u00e9 zabezpe\u010den\u00e9 nosi\u010de p\u0159en\u00e9st mimo are\u00e1l spole\u010dnosti a p\u0159edat pracuj\u00edc\u00edmu vzd\u00e1len\u011b \u00fa\u010detn\u00edmu, \u010d\u00edm\u017e bychom nad nimi ztratili kontrolu. <\/p>\n

    Varianta s p\u0159ihl\u00e1\u0161en\u00edm\/heslem a 2FA p\u0159es SMS m\u016f\u017ee b\u00fdt tak\u00e9 riskantn\u00ed, a\u010dkoli technologie DirectBank umo\u017e\u0148uje pouze z\u00edsk\u00e1vat v\u00fdpisy a zas\u00edlat platebn\u00ed dokumenty. Pro proveden\u00ed platby je v\u0161ak nutn\u00e9 ji podepsat kvalifikovan\u00fdm elektronick\u00fdm podpisem, kter\u00fd se uchov\u00e1v\u00e1 na zabezpe\u010den\u00e9m fyzick\u00e9m za\u0159\u00edzen\u00ed klienta nebo na stran\u011b banky. V prvn\u00edm p\u0159\u00edpad\u011b nejsou \u017e\u00e1dn\u00e9 probl\u00e9my: pokud extern\u00ed \u00fa\u010detn\u00ed nebude m\u00edt p\u0159\u00edstup k tokenu, bude moci pouze formulovat dokumenty. <\/p>\n

    V p\u0159\u00edpad\u011b cloudov\u00e9ho elektronick\u00e9ho podpisu je SMS s jednor\u00e1zov\u00fdm k\u00f3dem pro potvrzen\u00ed platby obvykle zas\u00edl\u00e1na na stejn\u00e9 telefonn\u00ed \u010d\u00edslo, kter\u00e9 se pou\u017e\u00edv\u00e1 pro autentizaci v osobn\u00edm \u00fa\u010dtu. N\u011bkter\u00e9 banky tuto situaci vy\u0159e\u0161ily tak, \u017ee umo\u017enily klient\u016fm vym\u011b\u0148ovat si data prost\u0159ednictv\u00edm DirectBank bez 2FA. V tomto p\u0159\u00edpad\u011b bude \u00fa\u010detn\u00ed moci pouze stahovat v\u00fdpisy a zas\u00edlat dokumenty, ale p\u0159\u00edstup k pen\u011bz\u016fm nebo dokonce k osobn\u00edmu \u00fa\u010dtu nez\u00edsk\u00e1.<\/p>\n

    Existuje je\u0161t\u011b jedna mo\u017enost pro odd\u011blen\u00ed \u00farovn\u00ed p\u0159\u00edstupu: mnoho bank umo\u017e\u0148uje pou\u017e\u00edvat \u00fa\u010det na st\u00e1tn\u00edch slu\u017eb\u00e1ch prost\u0159ednictv\u00edm jednotn\u00e9ho syst\u00e9mu identifikace a autentizace (ESIA<\/a><\/noindex>). \u0158editeli sta\u010d\u00ed vstoupit do nastaven\u00ed sv\u00e9ho \u00fa\u010dtu, vybrat z\u00e1lo\u017eku \u201eOrganizace\u201c a pozvat zam\u011bstnance. Jakmile pozv\u00e1n\u00ed p\u0159ijme, v sekci \u201eP\u0159\u00edstupy k syst\u00e9m\u016fm\u201c je mo\u017en\u00e9 naj\u00edt svou banku (po p\u0159edchoz\u00edm nastaven\u00ed integrace s n\u00ed) a d\u00e1t u\u017eivateli p\u0159\u00edstup k osobn\u00edmu \u00fa\u010dtu. P\u0159itom nen\u00ed nutn\u00e9 mu p\u0159ed\u00e1vat telefon nebo token, kter\u00fd se pou\u017e\u00edv\u00e1 k podpisu platebn\u00edch dokument\u016f.<\/p>\n

    \"Jak
    \n<\/p>\n

    P\u0159ipojujeme se k slu\u017eb\u00e1m EDO<\/h2>\n

    \nSlu\u017eby pro v\u00fdm\u011bnu elektronick\u00fdch dokument\u016f jsou pohodln\u00e9 a v\u0161eobecn\u00e1 remote pracovn\u00ed doba je u\u010dinila naprosto nezbytn\u00fdmi. Klient 1C: Podnik se s nimi integruje, ale pr\u00e1vn\u011b v\u00fdznamn\u00fd EDO vy\u017eaduje pou\u017eit\u00ed kvalifikovan\u00e9ho elektronick\u00e9ho podpisu. <\/p>\n

    Ten m\u016f\u017ee b\u00fdt ulo\u017een pouze na flash disku nebo uchov\u00e1v\u00e1n v cloudov\u00fdch slu\u017eb\u00e1ch, kter\u00e9 maj\u00ed odpov\u00eddaj\u00edc\u00ed certifik\u00e1ty dom\u00e1c\u00edch regul\u00e1tor\u016f. <\/p>\n

    Nahr\u00e1t elektronick\u00fd podpis na jak\u00e9koli m\u00e9dium nebo jej uchov\u00e1vat na VPS nen\u00ed mo\u017en\u00e9, proto obvykle \u00fa\u010detn\u00ed pracuje s elektronick\u00fdm ob\u011bhem dokument\u016f z m\u00edstn\u00edho po\u010d\u00edta\u010de p\u0159ipojen\u00edm USB flash disku. Na n\u011bj se instaluje certifikovan\u00fd prost\u0159edek kryptografick\u00e9 ochrany informac\u00ed (tzv. kryptoprvn\u00edk) a ve\u0159ejn\u00fd certifik\u00e1t elektronick\u00e9ho podpisu. Jej\u00ed priv\u00e1tn\u00ed \u010d\u00e1st je ulo\u017eena na flash disku, kter\u00fd je nutn\u00e9 fyzicky p\u0159ipojit k po\u010d\u00edta\u010di pro podepisov\u00e1n\u00ed dokument\u016f v programech, kter\u00e9 tuto funkci podporuj\u00ed. Pro pr\u00e1ci s EDP p\u0159es webov\u00e9 rozhran\u00ed budou pot\u0159ebn\u00e9 pluginy pro prohl\u00ed\u017ee\u010de.<\/p>\n

    \"Jak
    \n
    \nAby se kritick\u00fd syst\u00e9m pro business nemusel spou\u0161t\u011bt na osobn\u00edm po\u010d\u00edta\u010di zam\u011bstnance pracuj\u00edc\u00edho na d\u00e1lku, bude rovn\u011b\u017e u\u017eite\u010dn\u00e9 VPS, nicm\u00e9n\u011b varianta s fyzick\u00fdm tokenem zde nebude fungovat. <\/p>\n

    Je obt\u00ed\u017en\u00e9 \u0159\u00edct, jak se zachov\u00e1 kryptopr\u016fvodce ve virtu\u00e1ln\u00edm prost\u0159ed\u00ed, zvl\u00e1\u0161\u0165 p\u0159i pokusu o prohozen\u00ed USB portu na VPS p\u0159es RDP klienta. Z\u016fst\u00e1v\u00e1 cloudov\u00fd EDS bez fyzick\u00e9ho nosi\u010de, ale ne v\u0161echny slu\u017eby EDP tuto mo\u017enost nab\u00edzej\u00ed. Ta stoj\u00ed, mimochodem, kolem tis\u00edce rubl\u016f ro\u010dn\u011b, nezahrnuj\u00edc poplatek za samotnou slu\u017ebu v\u00fdm\u011bny dokument\u016f, kter\u00fd z\u00e1vis\u00ed na objemech. <\/p>\n

    Dobrou zpr\u00e1vou je, \u017ee t\u00e9m\u011b\u0159 v\u0161echny popul\u00e1rn\u00ed rusk\u00e9 slu\u017eby u\u017e d\u00e1vno zavedly vz\u00e1jemn\u00fd roaming dokument\u016f, a proto se lze p\u0159ipojit k jak\u00e9koli z nich. \u0160patnou zpr\u00e1vou je, \u017ee zcela se vzd\u00e1t pap\u00edru nebude mo\u017en\u00e9, proto\u017ee mezi obchodn\u00edmi partnery se ur\u010dit\u011b najdou ti, kte\u0159\u00ed EDP nepou\u017e\u00edvaj\u00ed.<\/p>\n

    Nastavujeme p\u0159\u00edstup k slu\u017eb\u00e1m pomoc\u00ed certifik\u00e1t\u016f.<\/h2>\n

    \nMnoh\u00e9 slu\u017eby umo\u017e\u0148uj\u00ed prov\u00e1d\u011bt autentizaci a autorizaci bez p\u0159ihla\u0161ovac\u00edho jm\u00e9na a hesla pomoc\u00ed klientsk\u00fdch SSL certifik\u00e1t\u016f, kter\u00e9 lze tak\u00e9 nainstalovat na VPS, nikoli na po\u010d\u00edta\u010d \u00fa\u010detn\u00edho.<\/p>\n

    Stejn\u00fdm zp\u016fsobem lze nastavit autentizaci na firemn\u00edch webov\u00fdch resursech. Jak to ud\u011blat:<\/p>\n