Obera adapeza mwayi wopeza seva yayikulu yamakalata a kampani yapadziko lonse ya Deloitte. Akaunti ya woyang'anira seva iyi idatetezedwa ndi mawu achinsinsi okha.
Katswiri wodziyimira pawokha waku Austria, David Wind, adalandira mphotho ya $5 chifukwa chozindikira kuti pali chiwopsezo patsamba lolowera pa intaneti la Google.
91% yamakampani aku Russia amabisa kutayikira kwa data.
Nkhani zoterozo zimapezeka pafupifupi tsiku lililonse m’zakudya zapaintaneti. Uwu ndi umboni wachindunji woti ntchito zamkati zamakampani ziyenera kutetezedwa.
Ndipo pamene kampaniyo ikukula, antchito ake amakhala ndi antchito ambiri komanso zovuta zake zamkati za IT, ndiye kuti vuto la kutulutsa chidziwitso ndilofunika kwambiri. Ndi chidziwitso chiti chomwe chili chosangalatsa kwa omwe akuukira komanso momwe angachitetezere?
Ndi chidziwitso chamtundu wanji chomwe chingawononge kampaniyo?
- zambiri zokhudza makasitomala ndi zochitika;
- chidziwitso chamankhwala ndi luso;
- zambiri za othandizana nawo komanso zotsatsa zapadera;
- zambiri zaumwini ndi zowerengera.
Ndipo ngati mumvetsetsa kuti zidziwitso zina kuchokera pamndandanda womwe uli pamwambapa zitha kupezeka pagawo lililonse lamaneti anu pokhapokha mutalowa malowedwe ndi mawu achinsinsi, ndiye kuti muyenera kuganiza zokulitsa kuchuluka kwa chitetezo cha data ndikuyiteteza kuti isapezeke mosaloledwa.
Kutsimikizika kwazinthu ziwiri pogwiritsa ntchito hardware cryptographic media (zizindikiro kapena makhadi anzeru) kwadziŵika kukhala odalirika komanso nthawi yomweyo yosavuta kugwiritsa ntchito.
Timalemba za ubwino wa kutsimikizika kwazinthu ziwiri pafupifupi pafupifupi nkhani iliyonse. Mutha kuwerenga zambiri za izi m'nkhani za и .
M'nkhaniyi, tikuwonetsani momwe mungagwiritsire ntchito kutsimikizika kwazinthu ziwiri kuti mulowe muzolowera zamkati za bungwe lanu.
Mwachitsanzo, titenga chitsanzo choyenera kwambiri chogwiritsira ntchito makampani, Rutoken - cryptographic USB token. .
Tiyeni tiyambe ndi kukhazikitsa.
Khwerero 1 - Kukhazikitsa Seva
Maziko a seva iliyonse ndi makina ogwiritsira ntchito. Kwa ife, iyi ndi Windows Server 2016. Ndipo pamodzi ndi izo ndi machitidwe ena ogwiritsira ntchito a banja la Windows, IIS (Internet Information Services) imagawidwa.
IIS ndi gulu la ma seva a pa intaneti, kuphatikiza seva yapaintaneti ndi seva ya FTP. IIS imaphatikizapo ntchito zopanga ndi kuyang'anira mawebusayiti.
IIS idapangidwa kuti izipanga mawebusayiti pogwiritsa ntchito maakaunti a ogwiritsa ntchito omwe amaperekedwa ndi domain kapena Active Directory. Izi zimakupatsani mwayi wogwiritsa ntchito ma database omwe alipo.
В Tidafotokoza mwatsatanetsatane momwe mungayikitsire ndikusintha Certification Authority pa seva yanu. Tsopano sitikhala pa izi mwatsatanetsatane, koma tidzaganiza kuti zonse zakonzedwa kale. Satifiketi ya HTTPS ya seva yapaintaneti iyenera kuperekedwa molondola. Ndi bwino kufufuza izi nthawi yomweyo.
Windows Server 2016 imabwera ndi mtundu wa IIS 10.0 womangidwa.
Ngati IIS yakhazikitsidwa, ndiye kuti zonse zomwe zatsala ndikukonza molondola.
Pa siteji ya kusankha ntchito maudindo, ife chongani bokosi Kutsimikizika koyambira.
Kenako kulowa Woyang'anira Information Services pa intaneti anayatsa Kutsimikizika koyambira.
Ndipo adawonetsa dera lomwe seva yapaintaneti ili.
Kenako tinawonjezera ulalo watsamba.
Ndipo adasankha zosankha za SSL.
Izi zimamaliza kukhazikitsidwa kwa seva.
Mukamaliza masitepe awa, wogwiritsa ntchito yekhayo yemwe ali ndi chizindikiro chokhala ndi satifiketi ndi PIN ya chizindikiro ndi omwe azitha kulowa patsamba.
Tikukumbutsaninso kuti molingana ndi , wogwiritsa ntchito adapatsidwa kale chizindikiro chokhala ndi makiyi ndi satifiketi yoperekedwa molingana ndi template ngati Wogwiritsa ndi smart card.
Tsopano tiyeni tipitirire kukhazikitsa kompyuta ya wosuta. Ayenera kukonza asakatuli omwe adzagwiritse ntchito kuti alumikizane ndi mawebusayiti otetezedwa.
Gawo 2 - Kukhazikitsa kompyuta wosuta
Kuti zikhale zosavuta, tiyeni tiyerekeze kuti wogwiritsa ntchito ali ndi Windows 10.
Tiyerekezenso kuti adayika zida .
Kuyika seti ya madalaivala ndikosankha, chifukwa mwina chithandizo cha chizindikirocho chidzafika kudzera pa Windows Update.
Koma ngati izi sizichitika mwadzidzidzi, ndiye kukhazikitsa Rutoken Drivers kwa Windows kudzathetsa mavuto onse.
Tiyeni tigwirizane ndi chizindikiro pa kompyuta ya wosuta ndikutsegula Rutoken Control Panel.
Mu tabu Zikalata Chongani bokosi pafupi ndi chiphaso chofunikira ngati sichinafufuzidwe.
Chifukwa chake, tidatsimikizira kuti chizindikirocho chikugwira ntchito ndipo chili ndi satifiketi yofunikira.
Masakatuli onse kupatula Firefox amasinthidwa zokha.
Simufunikanso kuchita nawo chilichonse chapadera.
Tsopano tsegulani msakatuli aliyense ndikulowetsa adilesi yazinthu.
Tsambalo lisanakule, zenera lidzatsegulidwa posankha satifiketi, kenako zenera lolowetsa nambala ya PIN.
Ngati Aktiv ruToken CSP yasankhidwa kukhala wopereka crypto wosasintha pa chipangizocho, ndiye zenera lina lidzatsegulidwa kuti mulowetse PIN code.
Ndipo pokhapokha mutalowa bwino mu msakatuli tsamba lathu lidzatsegulidwa.
Kwa msakatuli wa Firefox, zosintha zina ziyenera kupangidwa.
Muzokonda za msakatuli wanu sankhani Zazinsinsi ndi Chitetezo. Mu gawo Zikalata kukanikiza Chitetezo Chida. Zenera lidzatsegulidwa Kasamalidwe kachipangizo.
Dinani Download, onetsani dzina la Rutoken EDS ndi njira C:windowssystem32rtpkcs11ecp.dll.
Ndizo zonse, Firefox tsopano ikudziwa momwe angagwiritsire ntchito chizindikirocho ndipo imakupatsani mwayi wolowera patsamba ndikuigwiritsa ntchito.
Mwa njira, kulowa mawebusayiti pogwiritsa ntchito chizindikiro kumagwiranso ntchito pa Mac mu msakatuli wa Safari, Chrome ndi Firefox.
Mukungoyenera kukhazikitsa Rutoken kuchokera patsamba ndi kuwona satifiketi pa chizindikiro mmenemo.
Palibe chifukwa chosinthira Safari, Chrome, Yandex ndi asakatuli ena; muyenera kungotsegula tsambalo mumsakatuli uliwonse.
Msakatuli wa Firefox amapangidwa pafupifupi mofanana ndi Windows (Zikhazikiko - Zapamwamba - Zikalata - Zida Zachitetezo). Njira yokhayo yopita ku laibulale ndiyosiyana pang'ono /Library/Akitv Co/Rutoken ECP/lib/librtpkcs11ecp.dylib.
anapezazo
Tidakuwonetsani momwe mungakhazikitsire kutsimikizika kwazinthu ziwiri pamawebusayiti pogwiritsa ntchito zizindikiro za cryptographic. Monga nthawi zonse, sitinafune mapulogalamu owonjezera pa izi, kupatula ma library a Rutoken system.
Mutha kuchita izi ndi chilichonse mwazinthu zanu zamkati, ndipo mutha kusinthanso magulu ogwiritsa ntchito omwe azitha kupeza tsambalo, monga kwina kulikonse mu Windows Server.
Kodi mukugwiritsa ntchito OS yosiyana pa seva?
Ngati mukufuna kuti tilembe za kukhazikitsa machitidwe ena ogwiritsira ntchito, ndiye lembani za izo mu ndemanga za nkhaniyi.
Source: www.habr.com