Masu satar bayanai sun sami damar shiga babban sabar saƙo na kamfanin Deloitte na duniya. An kiyaye asusun mai gudanarwa na wannan uwar garken ta hanyar kalmar sirri kawai.
Wani mai bincike dan kasar Austria David Wind ya sami tukuicin dala 5 saboda gano wata rauni a cikin shafin shiga intanet na Google.
Kashi 91% na kamfanonin Rasha suna ɓoye bayanan leken asiri.
Ana iya samun irin waɗannan labaran kusan kowace rana a cikin labaran labaran Intanet. Wannan shaida ce kai tsaye cewa dole ne a kiyaye ayyukan cikin gida na kamfanin.
Kuma yadda kamfani ya fi girma, yawan ma'aikata da yake da shi da kuma hadaddun kayan aikin IT na cikin gida, mafi mahimmancin matsalar zubar da bayanai yana gare shi. Wane bayani ke da sha'awa ga maharan da kuma yadda za a kare shi?
Wane irin ɗigowar bayanai zai iya cutar da kamfanin?
- bayanai game da abokan ciniki da ma'amaloli;
- bayanin samfurin fasaha da sanin-yadda;
- bayanai game da abokan tarayya da tayi na musamman;
- bayanan sirri da lissafin kudi.
Kuma idan kun fahimci cewa wasu bayanai daga jerin abubuwan da ke sama suna samun dama daga kowane bangare na hanyar sadarwar ku kawai idan kun gabatar da login da kalmar wucewa, to yakamata kuyi tunanin haɓaka matakin tsaro na bayanan da kare shi daga shiga mara izini.
Tabbatar da abubuwa biyu ta hanyar amfani da kafofin watsa labaru na sirri na hardware (alamu ko katunan wayo) sun sami suna don kasancewa abin dogaro sosai kuma a lokaci guda mai sauƙin amfani.
Mun rubuta game da fa'idodin tabbatar da abubuwa biyu a kusan kowane labarin. Kuna iya karanta ƙarin game da wannan a cikin labarin game da и .
A cikin wannan labarin, za mu nuna muku yadda ake amfani da tantancewar abubuwa biyu don shiga cikin hanyoyin shiga ƙungiyar ku.
A matsayin misali, za mu ɗauki samfurin da ya fi dacewa don amfani da kamfanoni, Rutoken - alamar kebul na sirri .
Bari mu fara da saitin.
Mataki 1 - Saita uwar garke
Tushen kowane uwar garken shine tsarin aiki. A cikin yanayinmu, wannan shine Windows Server 2016. Kuma tare da shi da sauran tsarin aiki na dangin Windows, IIS (Sabis na Bayanan Intanet) ana rarraba.
IIS rukuni ne na sabar Intanet, gami da sabar yanar gizo da sabar FTP. IIS ya haɗa da aikace-aikace don ƙirƙira da sarrafa gidajen yanar gizo.
An tsara IIS don gina ayyukan gidan yanar gizo ta amfani da asusun mai amfani da wani yanki ko Active Directory ke bayarwa. Wannan yana ba ku damar amfani da bayanan mai amfani da ke akwai.
В Mun yi bayanin dalla-dalla yadda ake girka da kuma daidaita Hukumar Takaddun Shaida akan sabar ku. Yanzu ba za mu tsaya a kan wannan dalla-dalla ba, amma za mu ɗauka cewa an riga an saita komai. Dole ne a ba da takardar shaidar HTTPS don sabar gidan yanar gizo daidai. Yana da kyau a duba wannan nan da nan.
Windows Server 2016 ya zo tare da ginanniyar sigar IIS 10.0.
Idan an shigar da IIS, to duk abin da ya rage shine a daidaita shi daidai.
A matakin zaɓin ayyukan rawar, mun duba akwatin Tabbatar da asali.
Sai a shiga Manajan Sabis na Bayanan Intanet kunna Tabbatar da asali.
Kuma ya nuna yankin da uwar garken gidan yanar gizon yake.
Sa'an nan kuma muka ƙara hanyar haɗin yanar gizon.
Kuma zaɓi zaɓin SSL.
Wannan yana kammala saitin uwar garken.
Bayan kammala waɗannan matakan, kawai mai amfani da ke da alamar da ke da takaddun shaida da kuma PIN ɗin alama zai iya shiga rukunin yanar gizon.
Muna sake tunatar da ku cewa a cewar , An riga an ba mai amfani alama mai maɓalli da takaddun shaida bisa ga samfuri kamar Mai amfani da katin wayo.
Yanzu bari mu matsa zuwa saita kwamfutar mai amfani. Ya kamata ya daidaita masu binciken da zai yi amfani da su don haɗawa zuwa gidajen yanar gizo masu kariya.
Mataki 2 — Saita kwamfuta mai amfani
Don sauƙi, bari mu ɗauka cewa mai amfani yana da Windows 10.
Bari kuma mu ɗauka ya sanya kayan aikin .
Shigar da saitin direbobi na zaɓi ne, tun da wataƙila tallafi ga alamar zai zo ta Windows Update.
Amma idan wannan ba zato ba tsammani ya faru, to, shigar da saitin Rutoken Drivers don Windows zai magance duk matsalolin.
Bari mu haɗa alamar zuwa kwamfutar mai amfani kuma mu buɗe Rutoken Control Panel.
A cikin shafin .Ертификаты Duba akwatin kusa da takaddun da ake buƙata idan ba a duba ba.
Don haka, mun tabbatar da cewa alamar tana aiki kuma ya ƙunshi takaddun da ake buƙata.
Duk masu bincike ban da Firefox ana saita su ta atomatik.
Ba kwa buƙatar yin wani abu na musamman da su.
Yanzu buɗe kowane mai bincike kuma shigar da adireshin albarkatun.
Kafin saukar da rukunin yanar gizon, taga zai buɗe don zaɓar takaddun shaida, sannan taga don shigar da lambar PIN na token.
Idan aka zaɓi Aktiv ruToken CSP azaman tsoho mai samar da crypto don na'urar, to wata taga zata buɗe don shigar da lambar PIN.
Kuma bayan nasarar shigar da shi a cikin mashigar yanar gizo ne za a bude gidan yanar gizon mu.
Don mai binciken Firefox, dole ne a yi ƙarin saitunan.
A cikin saitunan burauzan ku zaɓi Kere da Tsaro. A sashen .Ертификаты don turawa Na'urar Kariya... Taga zai bude Gudanar da na'ura.
Danna Zazzagewa, nuna sunan Rutoken EDS da hanyar C:windowssystem32rtpkcs11ecp.dll.
Shi ke nan, Firefox yanzu ya san yadda ake sarrafa alamar kuma yana ba ku damar shiga rukunin yanar gizon ta amfani da shi.
Af, shiga ta amfani da alamar zuwa gidajen yanar gizo kuma yana aiki akan Macs a cikin Safari, Chrome da Firefox browser.
Kuna buƙatar kawai shigar da Rutoken daga gidan yanar gizon kuma duba takardar shaidar akan alamar a ciki.
Babu buƙatar saita Safari, Chrome, Yandex da sauran masu bincike; kawai kuna buƙatar buɗe rukunin yanar gizon a cikin waɗannan masu binciken.
An saita mai binciken Firefox kusan kamar yadda yake a cikin Windows (Saituna - Na ci gaba - Takaddun shaida - Na'urorin Tsaro). Hanyar zuwa ɗakin karatu kawai ta ɗan bambanta /Library/Akitv Co/Rutoken ECP/lib/librtpkcs11ecp.dylib.
binciken
Mun nuna muku yadda ake saita tabbatar da abubuwa biyu akan gidajen yanar gizo ta amfani da alamomin cryptographic. Kamar koyaushe, ba mu buƙatar ƙarin software don wannan, sai ga ɗakunan karatu na tsarin Rutoken.
Kuna iya yin wannan hanya tare da kowane albarkatun cikin ku, kuma kuna iya daidaita ƙungiyoyin masu amfani waɗanda za su sami damar shiga rukunin yanar gizon, kamar ko'ina cikin Windows Server.
Kuna amfani da OS daban don uwar garken?
Idan kana son mu rubuta game da kafa wasu tsarin aiki, to rubuta game da shi a cikin sharhin labarin.
source: www.habr.com