{"id":35772,"date":"2019-10-31T22:06:16","date_gmt":"2019-10-31T19:06:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dvuhfaktornaya-autentifikatsiya-na-sajte-s-ispolzovaniem-usb-tokena-kak-sdelat-vhod-na-sluzhebnyj-portal-bezopasnym\/"},"modified":"2019-10-31T22:06:16","modified_gmt":"2019-10-31T19:06:16","slug":"dvuhfaktornaya-autentifikatsiya-na-sajte-s-ispolzovaniem-usb-tokena-kak-sdelat-vhod-na-sluzhebnyj-portal-bezopasnym","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/dvuhfaktornaya-autentifikatsiya-na-sajte-s-ispolzovaniem-usb-tokena-kak-sdelat-vhod-na-sluzhebnyj-portal-bezopasnym","title":{"rendered":"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/dc51ee610da66c8eca1fcbd0f6de3315.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>H\u00e4kkerid p\u00e4\u00e4sesid ligi rahvusvahelise ettev\u00f5tte Deloitte peamise postiserveri juurde. Selle serveri administraatori konto oli kaitstud ainult parooliga.<\/p>\n<p><\/p>\n<p>Iseseisev Austria teadlane David Wind sai 5000 dollari suuruse preemia Google'i intraneti sisselogimislehe haavatavuse avastamise eest.<\/p>\n<p><\/p>\n<p>91% Venemaa ettev\u00f5tetest varjab andmelekkeid.<\/p>\n<p><\/p>\n<p>Selliseid uudiseid v\u00f5ib iga p\u00e4ev leida Interneti uudistevoogudest. See on otsene t\u00f5estus sellest, et ettev\u00f5tte siseteenuseid tuleb kindlasti kaitsta.<\/p>\n<p><\/p>\n<p>Ja mida suurem on ettev\u00f5te, seda rohkem on selles t\u00f6\u00f6tajaid ja keerukam on sisemine IT-infrastruktuur, seda j\u00f5ulisem on andmelekkega seotud probleem. Milline teave huvitab kurjategijaid ja kuidas seda kaitsta?<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Milline teave v\u00f5ib ettev\u00f5ttele kahju tekitada?<\/p>\n<p><\/p>\n<ul>\n<li>teave klientide ja tehingute kohta;<\/li>\n<li>toodete ja teadmusartiklite tehniline teave;<\/li>\n<li>teave partnerite ja eripakkumiste kohta;<\/li>\n<li>isikuandmete ja raamatupidamine.<\/li>\n<\/ul>\n<p><\/p>\n<p>Ja kui olete aru saanud, et m\u00f5ni teave loetletud nimekirjast on kergesti k\u00e4ttesaadav teie v\u00f5rgustiku igast osast, esitamata teisi autentimisviise, siis peaksite m\u00f5tlema andmete turvalisuse taseme t\u00f5stmisele ja nende kaitsmisele volitamata juurdep\u00e4\u00e4su eest.<\/p>\n<p><\/p>\n<p>Kaksfaktoriline autentimine riistvaraliste kr\u00fcptograafiliste seadmete (tokenite v\u00f5i nutikaartide) kaudu on teeninud oma usaldusv\u00e4\u00e4rse ning samas \u00fcsna lihtsa kasutamise maine.<\/p>\n<p><\/p>\n<p>Kaksfaktorilise autentimise eelistest kirjutame peaaegu igas artiklis. Selle kohta saab rohkem lugeda artiklitest, mis k\u00e4sitlevad seda, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/aktiv-company\/blog\/327232\/\">kuidas kaitsta Windowsi domeeni kasutajakontot<\/a><\/noindex> ja <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/aktiv-company\/blog\/329904\/\">e-posti<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Selles artiklis n\u00e4itame teile, kuidas rakendada kaksfaktorilist autentimist organisatsiooni siseportaalidesse sisenemisel.<\/p>\n<p><\/p>\n<p>N\u00e4iteks v\u00f5tame k\u00f5ige sobivama ettev\u00f5tluskatte jaoks Rutokeni mudeli \u2014 kr\u00fcptograafilise USB-tokeni <noindex><a rel=\"nofollow\" href=\"https:\/\/www.rutoken.ru\/products\/all\/rutoken-ecp-pki\/\">RUToken E\u00dcT PKI<\/a><\/noindex>.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/aa18cc0649ddb1a23262afad02319fe9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Alustame seadistamist.<\/p>\n<p><\/p>\n<h2>Samm 1 \u2014 Serveri seadistamine<\/h2>\n<p><\/p>\n<p>Igap\u00e4eva serveri alus on operatsioonis\u00fcsteem. Meie puhul on see Windows Server 2016. Koos selle ja teiste Windowsi operatsioonis\u00fcsteemidega levitatakse ka IIS-i (Internet Information Services).<\/p>\n<p><\/p>\n<p>IIS on r\u00fchm internetiservereid, sealhulgas veebiserver ja FTP-server. IIS sisaldab rakendusi, mis aitavad luua ja hallata veebisaite.<\/p>\n<p><\/p>\n<p>IIS on loodud veebiteenuste ehitamiseks, kasutades kasutajakontosid, mida pakub domeen v\u00f5i Active Directory teenus. See v\u00f5imaldab kasutada olemasolevaid kasutajabaase.<\/p>\n<p><\/p>\n<p>V <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/aktiv-company\/blog\/327232\/\">esimesest artiklist<\/a><\/noindex> Oleme juba r\u00e4\u00e4kinud, kuidas installida ja seadistada Sertifitseerimiskeskus (Certification Authority) oma serveris. N\u00fc\u00fcd me sellele pikalt ei peatu, vaid eeldame, et k\u00f5ik on juba seadistatud. HTTPS-sertifikaat veebiserverile peab olema korrektselt v\u00e4lja antud. On parem see kohe \u00fcle kontrollida.<\/p>\n<p><\/p>\n<p>Windows Server 2016-s on sisseehitatud IIS versioon 10.0.<\/p>\n<p><\/p>\n<p>Kui IIS on installitud, tuleb see \u00f5igesti konfigureerida.<\/p>\n<p><\/p>\n<p>Teenuste rollide valimise etapis t\u00f5mbasime linnukese <b>Tavaline autentimine<\/b>.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/2e22498a6b7ae00e5863970679b90b5a.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Seej\u00e4rel <b>IIS-i teenuste halduris<\/b>\u00a0lisasime <b>Tavalise autentimise<\/b>.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/d69a95c155a665d90ead219c236f69e4.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Ja m\u00e4\u00e4rasite domeeni, kus veebi server asub.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/09fa6ad105fe77a6008da061a32d56bf.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/a217db57533eeda11bf1dce5ce32e6fb.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Seej\u00e4rel lisasite saidi sidumise.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/624a2133329030b1c04b84b91d47e224.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Ja valisite SSL-i seaded.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/83510bc0f83faca9c90f3052b2745e6e.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Serveri seadistamine on n\u00fc\u00fcd l\u00f5petatud.<\/p>\n<p><\/p>\n<p>P\u00e4rast nende toimingute sooritamist saab saidile siseneda ainult kasutaja, kellel on sertifikaadiga ja PIN-koodiga token.<\/p>\n<p><\/p>\n<p>Kinnitame veel kord, et vastavalt <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/aktiv-company\/blog\/327232\/\">esimesest artiklist<\/a><\/noindex>, anti kasutajale eelnevalt token, millel on v\u00f5tmed ja sertifikaat, v\u00e4ljastatud t\u00fc\u00fcbi j\u00e4rgi\u00a0<b>Kasutaja nutikaardiga<\/b>.<\/p>\n<p><\/p>\n<p>N\u00fc\u00fcd liigume edasi kasutaja arvuti seadistamise juurde. Ta peaks seadistama brauserid, mida ta kasutab kaitstud veebisaitidele \u00fchendamiseks.<\/p>\n<p><\/p>\n<h2>Samm 2 \u2014 kasutaja arvuti seadistamine<\/h2>\n<p><\/p>\n<p>Lihtsuse huvides eeldame, et meie kasutajal on Windows 10 operatsioonis\u00fcsteem.<\/p>\n<p><\/p>\n<p>Eeldame ka, et tal on installitud komplekt <noindex><a rel=\"nofollow\" href=\"https:\/\/www.rutoken.ru\/support\/download\/drivers-for-windows\/\">Ruutokeni draiverid Windowsile<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Draiverite komplekti installimine on valikuline, kuna t\u00f5en\u00e4oliselt toetatakse tokenit Windows Update'i kaudu.<\/p>\n<p><\/p>\n<p>Kuid kui seda ei juhtunud, siis Ruutokeni draiverite komplekti installimine lahendab k\u00f5ik probleemid.<\/p>\n<p><\/p>\n<p>\u00dchendame tokeni kasutaja arvutiga ja avame Ruutokeni juhtpaneeli.<\/p>\n<p><\/p>\n<p>Vahekaardil <b>Sertifikaadid<\/b> paneme vajalikule sertifikaadile m\u00e4rgi, kui see ei ole peal.<\/p>\n<p><\/p>\n<p>Nii kontrollisime, et token t\u00f6\u00f6tab ja sisaldab vajalikku sertifikaati.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/47bcd59a3c34700229bcee7b4318121b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>K\u00f5ik brauserid, v\u00e4lja arvatud Firefox, seadistuvad automaatselt.<\/p>\n<p>\u00a0<\/p>\n<p>Nende jaoks ei ole midagi erilist teha vajalik.<\/p>\n<p><\/p>\n<p>N\u00fc\u00fcd avame m\u00f5ne brauseri ja sisestame ressursi aadressi.<\/p>\n<p><\/p>\n<p>Enne, kui sait meile laaditakse, avaneb meile sertifikaadi valiku aken, seej\u00e4rel PIN-koodi sisestamise aken.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/c1ec3e977495b3311acc956ccd4d4118.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/589f494bc564d5cc6ed53e8a471564f5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Kui seadme jaoks on vaikimisi kr\u00fcptoprovajeriks valitud Aktiv ruToken CSP, avaneb PIN-koodi sisestamiseks teine aken.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/4c6a813e07f6fd2e679571f6ea6151af.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Ainult p\u00e4rast PIN-koodi edukat sisestamist avaneb meie sait brauseris.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/c00f6965e18d5a4cc35abdc64e811835.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Firefoxi brauseri jaoks tuleb teha t\u00e4iendavaid seadistusi.<\/p>\n<p><\/p>\n<p>Brauseri seadetes vali <b>Privaatsus ja Kaitse<\/b>. Jaotises <b>Sertifikaadid<\/b> kliki\u00a0<b>Kaitse Seade<\/b>. Avaneb aken <b>Seadmete haldamine<\/b>.<\/p>\n<p><\/p>\n<p>Vajuta\u00a0<b>Laadi<\/b>, sisestage Ruutoken E-allekirja nimi ja tee C:windowssystem32rtpkcs11ecp.dll.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/347d57fd495e7757f345f894418dcaa9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>See on k\u00f5ik, n\u00fc\u00fcd teab Firefox, kuidas tokeniga suhelda ja lubab siseneda saidile, kasutades seda.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/0f2ec13b310f583aad37823d7166005f.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Muide, tokeniga sisenemine veebisaitidele t\u00f6\u00f6tab ka Macidel Safari, Chrome ja Firefoxi brauseris.<\/p>\n<p><\/p>\n<p>Peate vaid installima Ruutokeni veebisaidilt.\u00a0<noindex><a rel=\"nofollow\" href=\"https:\/\/www.rutoken.ru\/support\/download\/drivers-for-mac\/\">Ait\u00e4h toeta mooduli Linkide v\u00f5tmed<\/a><\/noindex>\u00a0ja n\u00e4ha sertifikaati tokenil.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/6e68421ce09d493dbb7162ab745e6374.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Safari, Chrome, Yandex ja teiste brauserite seadistamine pole vajalik, piisab lihtsalt veebilehe avamisest m\u00f5nes neist brauseritest.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kahefaktori autentimine saidil USB-tokeni abil. Kuidas muuta sissek\u00e4ik teenindusportaalile turvaliseks?\" src=\"\/wp-content\/uploads\/ccd87fef41239c4099156bfea21f3bac.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<p>Brauseri Firefox seadistamine on peaaegu sama nagu Windowsis (Seaded \u2014 T\u00e4iendavad \u2014 Sertifikaadid \u2014 Kaitse seadmed). Ainult tee raamatukokku on veidi erinev \/Library\/Akitv Co\/Rutoken ECP\/lib\/librtpkcs11ecp.dylib.<\/p>\n<p><\/p>\n<h2>J\u00e4reldused<\/h2>\n<p><\/p>\n<p>Me demonstreerisime, kuidas seada \u00fcles kahefaktoriline autentimine saitidel kr\u00fcptograafiliste tokenite abil. Nagu alati, ei olnud meil selleks vaja \u00fchtegi t\u00e4iendavat tarkvara, v\u00e4lja arvatud s\u00fcsteemi teekid Rutoken.<\/p>\n<p><\/p>\n<p>Seda protseduuri saate teha oma sisemiste ressurssidega, samuti saate paindlikult seadistada kasutajagruppide \u00f5igusi, kes p\u00e4\u00e4sevad veebisaidile, nagu ka igal pool Windows Serveris.<\/p>\n<p><\/p>\n<h2>Kas kasutate serveris muud OS-i?<\/h2>\n<p><\/p>\n<p>Kui soovite, et me kirjutaksime muude OS-ide seadistamisest, palun kirjutage sellest artikli kommentaarides.<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/aktiv-company\/blog\/412809\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0425\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0433\u043b\u0430\u0432\u043d\u043e\u043c\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Deloitte. \u0423\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u044d\u0442\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u044b\u043b\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u0440\u043e\u043b\u0435\u043c. \u041d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0430\u0432\u0441\u0442\u0440\u0438\u0439\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0414\u044d\u0432\u0438\u0434 \u0412\u0438\u043d\u0434 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 5 \u0442\u044b\u0441. \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0434\u043b\u044f \u0432\u0432\u043e\u0434\u0430 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438\u043d\u0442\u0440\u0430\u043d\u0435\u0442\u0430 Google. 91% \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0444\u0430\u043a\u0442\u044b \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0422\u0430\u043a\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043f\u043e\u0447\u0442\u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u0434\u0435\u043d\u044c \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0442\u0440\u0435\u0442\u0438\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35772","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0425\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0433\u043b\u0430\u0432\u043d\u043e\u043c\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Deloitte. \u0423\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u044d\u0442\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u044b\u043b\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u0440\u043e\u043b\u0435\u043c. \u041d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0430\u0432\u0441\u0442\u0440\u0438\u0439\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0414\u044d\u0432\u0438\u0434 \u0412\u0438\u043d\u0434 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 5 \u0442\u044b\u0441. \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0434\u043b\u044f \u0432\u0432\u043e\u0434\u0430 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438\u043d\u0442\u0440\u0430\u043d\u0435\u0442\u0430 Google. 91% \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0444\u0430\u043a\u0442\u044b \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0422\u0430\u043a\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043f\u043e\u0447\u0442\u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u0434\u0435\u043d\u044c \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0442\u0440\u0435\u0442\u0438\u0442\u044c\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/dvuhfaktornaya-autentifikatsiya-na-sajte-s-ispolzovaniem-usb-tokena-kak-sdelat-vhod-na-sluzhebnyj-portal-bezopasnym\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0414\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c USB-\u0442\u043e\u043a\u0435\u043d\u0430. \u041a\u0430\u043a \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0432\u0445\u043e\u0434 \u043d\u0430 \u0441\u043b\u0443\u0436\u0435\u0431\u043d\u044b\u0439 \u043f\u043e\u0440\u0442\u0430\u043b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0425\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0433\u043b\u0430\u0432\u043d\u043e\u043c\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Deloitte. \u0423\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u044d\u0442\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u044b\u043b\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u0440\u043e\u043b\u0435\u043c. \u041d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0430\u0432\u0441\u0442\u0440\u0438\u0439\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0414\u044d\u0432\u0438\u0434 \u0412\u0438\u043d\u0434 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 5 \u0442\u044b\u0441. \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0434\u043b\u044f \u0432\u0432\u043e\u0434\u0430 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438\u043d\u0442\u0440\u0430\u043d\u0435\u0442\u0430 Google. 91% \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0444\u0430\u043a\u0442\u044b \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0422\u0430\u043a\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043f\u043e\u0447\u0442\u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u0434\u0435\u043d\u044c \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0442\u0440\u0435\u0442\u0438\u0442\u044c\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/dvuhfaktornaya-autentifikatsiya-na-sajte-s-ispolzovaniem-usb-tokena-kak-sdelat-vhod-na-sluzhebnyj-portal-bezopasnym\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:06:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:06:16+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kahefaktoriline autentimine USB-tokeniga veebisaidil. Kuidas tagada ametlikule portaalile sisenemise turvalisus? | ProHoster","description":"H\u00e4kkerid p\u00e4\u00e4sesid ligi rahvusvahelise ettev\u00f5tte Deloitte peamise postiserveri. Selle serveri administraatori konto oli kaitstud ainult parooliga. Iseseisev Austria teadlane David Wind sai 5000 dollari suuruse tasu Google'i sisev\u00f5rgu sisselogimislehe haavatavuse avastamise eest. 91% Venemaa ettev\u00f5tetest peidavad andmeleketega seotud juhtumeid. Selliseid uudiseid v\u00f5ib leida peaaegu iga p\u00e4ev.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/dvuhfaktornaya-autentifikatsiya-na-sajte-s-ispolzovaniem-usb-tokena-kak-sdelat-vhod-na-sluzhebnyj-portal-bezopasnym","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c USB-\u0442\u043e\u043a\u0435\u043d\u0430. \u041a\u0430\u043a \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0432\u0445\u043e\u0434 \u043d\u0430 \u0441\u043b\u0443\u0436\u0435\u0431\u043d\u044b\u0439 \u043f\u043e\u0440\u0442\u0430\u043b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c? | ProHoster","og:description":"\u0425\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0433\u043b\u0430\u0432\u043d\u043e\u043c\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Deloitte. \u0423\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u044d\u0442\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u044b\u043b\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u0440\u043e\u043b\u0435\u043c. \u041d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0430\u0432\u0441\u0442\u0440\u0438\u0439\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0414\u044d\u0432\u0438\u0434 \u0412\u0438\u043d\u0434 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 5 \u0442\u044b\u0441. \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0434\u043b\u044f \u0432\u0432\u043e\u0434\u0430 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438\u043d\u0442\u0440\u0430\u043d\u0435\u0442\u0430 Google. 91% \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0444\u0430\u043a\u0442\u044b \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0422\u0430\u043a\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043f\u043e\u0447\u0442\u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u0434\u0435\u043d\u044c \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0442\u0440\u0435\u0442\u0438\u0442\u044c","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/dvuhfaktornaya-autentifikatsiya-na-sajte-s-ispolzovaniem-usb-tokena-kak-sdelat-vhod-na-sluzhebnyj-portal-bezopasnym","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:06:16+00:00","article:modified_time":"2019-10-31T19:06:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35772","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 00:43:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:56:33","updated":"2026-01-22 00:43:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35772","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=35772"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35772\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=35772"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=35772"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=35772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}