IiHackers zafumana ukufikelela kumncedisi weposi ophambili wenkampani yamazwe ngamazwe iDeloitte. Iakhawunti yomlawuli yale seva ikhuselwe kuphela ngegama lokugqitha.
Umphandi ozimeleyo waseAustria uDavid Wind ufumene ibhaso le-5 yeedola ngokufumanisa ubuthathaka kwiphepha lokungena kwi-intranet likaGoogle.
I-91% yeenkampani zaseRashiya zifihla ukuvuza kwedatha.
Ezo ndaba zinokufunyanwa phantse yonke imihla kwii-intanethi zeendaba. Obu bubungqina obuthe ngqo bokuba iinkonzo zangaphakathi zenkampani kufuneka zikhuselwe.
Kwaye okukhona inkulu inkampani, kokukhona inabasebenzi abaninzi kwaye kokukhona intsonkothe ββngakumbi iziseko zayo ze-IT zangaphakathi, kokukhona icinezela ngakumbi ingxaki yokuvuza kolwazi kuyo. Luluphi ulwazi olunomdla kubahlaseli kunye nendlela yokukhusela?
Loluphi ulwazi oluvuzayo olunokwenzakalisa inkampani?
- ulwazi malunga nabaxhasi kunye neentengiselwano;
- ulwazi lwemveliso yobugcisa kunye nolwazi;
- ulwazi malunga namaqabane kunye nezibonelelo ezikhethekileyo;
- iinkcukacha zobuqu kunye ne-accounting.
Kwaye ukuba uyaqonda ukuba ezinye iinkcukacha kolu luhlu lungentla lufikeleleke kulo naliphi na icandelo lenethiwekhi yakho kuphela xa ubonisa igama lokungena kunye negama lokugqitha, ngoko kufuneka ucinge ngokunyusa izinga lokhuseleko lwedatha kunye nokukhusela ekungeneni okungagunyaziswanga.
Ukuqinisekiswa kwezinto ezimbini usebenzisa i-hardware cryptographic media (iithokheni okanye amakhadi ahlakaniphile) zenzele igama lokuthembeka kakhulu kwaye kwangaxeshanye kulula kakhulu ukuyisebenzisa.
Sibhala malunga neenzuzo zokuqinisekiswa kwezinto ezimbini phantse kuwo onke amanqaku. Unokufunda ngakumbi malunga noku kumanqaku malunga ΠΈ .
Kweli nqaku, siza kukubonisa indlela yokusebenzisa ungqinisiso lwezinto ezimbini ukungena kwiiphothali zangaphakathi zombutho wakho.
Njengomzekelo, siya kuthatha eyona modeli ifanelekileyo yokusetyenziswa kweenkampani, iRutoken - ithokheni ye-cryptographic ye-USB. .
Masiqalise ngokuseta.
Inyathelo loku-1-UkuSeta iSeva
Isiseko sayo nayiphi na iseva yinkqubo yokusebenza. Kwimeko yethu, le yi-Windows Server 2016. Kwaye kunye nayo kunye nezinye iinkqubo zokusebenza zentsapho yeWindows, i-IIS (IiNkonzo zoLwazi lwe-Intanethi) isasazwa.
IIS liqela leeseva ze-Intanethi, kuquka iseva yewebhu kunye neseva yeFTP. IIS ibandakanya izicelo zokudala nokulawula iiwebhusayithi.
I-IIS yenzelwe ukwakha iinkonzo zewebhu usebenzisa i-akhawunti yomsebenzisi enikezelwa yi-domain okanye i-Active Directory. Oku kukuvumela ukuba usebenzise i-database ekhoyo yabasebenzisi.
Π Sichaze ngokweenkcukacha indlela yokufaka kunye nokuqwalasela uGunyaziwe weSatifikethi kwiseva yakho. Ngoku asizukuhlala kule nkcukacha, kodwa siya kucinga ukuba yonke into sele iqwalaselwe. Isatifikethi se-HTTPS seseva yewebhu kufuneka sikhutshwe ngokuchanekileyo. Kungcono ukujonga oku kwangoko.
Windows Server 2016 iza IIS version 10.0 eyakhelwe-ngaphakathi.
Ukuba i-IIS ifakiwe, konke okuseleyo kukuyiqwalasela ngokuchanekileyo.
Kwinqanaba lokukhetha iinkonzo zendima, sihlolisise ibhokisi Uqinisekiso olusisiseko.
Emva koko ungene UMlawuli weeNkonzo zoLwazi lwe-Intanethi wenziwe wavuka Uqinisekiso olusisiseko.
Kwaye ibonise idomeyini apho iseva yewebhu ikhoyo.
Emva koko songeze ikhonkco lesayithi.
Kwaye ukhethe iinketho ze-SSL.
Oku kugqiba ukuseta iseva.
Emva kokugqiba la manyathelo, kuphela umsebenzisi onophawu kunye nesatifikethi kunye ne-PIN yethokheni uya kukwazi ukufikelela kwisayithi.
Siyakukhumbuza kwakhona ukuba ngokutsho , umsebenzisi wayenikwe ngaphambili ithokheni enezitshixo kunye nesatifikethi esikhutshwe ngokwethempleyithi efana Umsebenzisi onekhadi elihlakaniphile.
Ngoku makhe siqhubele phambili ukuseta ikhompyuter yomsebenzisi. Kufuneka aqwalasele iibhrawuza aza kuzisebenzisa ukuze aqhagamshele kwiiwebhusayithi ezikhuselweyo.
Inyathelo lesi-2 - Ukumisela ikhompyuter yomsebenzisi
Ukwenza lula, makhe sicinge ukuba umsebenzisi wethu unayo Windows 10.
Masicinge ukuba unayo ikiti efakiweyo .
Ukufakela iseti yabaqhubi kukhetho, kuba uninzi lwenkxaso yethokheni iya kufika ngoHlaziyo lweWindows.
Kodwa ukuba oku akwenzeki ngequbuliso, ke ukufaka iseti yeRutoken Drivers yeWindows kuya kusombulula zonke iingxaki.
Masidibanise ithokheni kwikhompyuter yomsebenzisi kwaye uvule iPhaneli yoLawulo yeRutoken.
Kwithebhu Izatifikethi Khangela ibhokisi ecaleni kwesatifikethi esifunekayo ukuba asikhange sikhangelwe.
Ke, siye saqinisekisa ukuba ithokheni iyasebenza kwaye iqulethe isatifikethi esifunekayo.
Zonke iibhrawuza ngaphandle kweFirefox zimiliselwe ngokuzenzekelayo.
Awudingi ukwenza nantoni na ekhethekileyo kunye nabo.
Ngoku vula nayiphi na isiphequluli kwaye ufake idilesi yomthombo.
Ngaphambi kokuba indawo ilayishe, iwindow iya kuvula ukukhetha isatifikethi, kwaye emva koko ifestile yokufaka ikhowudi ye-PIN yophawu.
Ukuba i-Aktiv ruToken CSP ikhethwe njengomboneleli we-crypto ongagqibekanga kwisixhobo, ke enye ifestile iya kuvula ukufaka ikhowudi yePIN.
Kwaye kuphela emva kokungena ngempumelelo kwisikhangeli siya kuvula iwebhusayithi yethu.
KwiFirefoxbrowser, useto olongezelelweyo kufuneka lwenziwe.
Kuseto lwebrawuza yakho khetha Ubumfihlo kunye noKhuseleko. Kwicandelo Izatifikethi ukunyusa Isixhobo soKhuselo. Ifestile iya kuvula Ulawulo lwesixhobo.
Cofa Khuphela, bonisa igama elithi Rutoken EDS kunye nendlela C:windowssystem32rtpkcs11ecp.dll.
Yiyo loo nto, iFirefox ngoku iyayazi indlela yokuphatha ithokheni kwaye ikuvumela ukuba ungene kwindawo usebenzisa yona.
Ngendlela, ngena usebenzisa ithokheni kwiiwebhusayithi zikwasebenza kwiiMacs kwiSafari, Chrome kunye neFirefoxbrowser.
Udinga nje ukufaka iRutoken kwiwebhusayithi kwaye ubone isatifikethi kumqondiso kuyo.
Akukho mfuneko yokuqwalasela iSafari, Chrome, Yandex kunye nezinye iziphequluli; kufuneka nje uvule isayithi kuyo nayiphi na yezi ziphequluli.
Isikhangeli seFirefox siqwalaselwe phantse ngendlela efanayo naleyo yeWindows (Useto-Eluphezulu-Izatifikethi-Izixhobo zoKhuseleko). Kuphela indlela eya kwithala leencwadi eyahlukileyo kancinane /Library/Akitv Co/Rutoken ECP/lib/librtpkcs11ecp.dylib.
ezifunyanisiweyo
Sikubonise indlela yokuseta ukuqinisekiswa kwezinto ezimbini kwiiwebhusayithi usebenzisa i-cryptographic tokens. Njengamaxesha onke, asizange sifune nayiphi na isoftware eyongezelelweyo kule nto, ngaphandle kwamathala eencwadi eRutoken.
Unokwenza le nkqubo ngayo nayiphi na izibonelelo zakho zangaphakathi, kwaye ungaqwalasela ngokuguquguqukayo amaqela abasebenzisi aya kuba nokufikelela kwisiza, njengayo nayiphi na enye indawo kwiWindows Server.
Ngaba usebenzisa i-OS eyahlukileyo kumncedisi?
Ukuba ufuna ukuba sibhale malunga nokuseka ezinye iinkqubo zokusebenza, ngoko bhala malunga namazwana kwinqaku.
umthombo: www.habr.com