Abaduni bathole ukufinyelela kuseva yemeyili eyinhloko yenkampani yamazwe ngamazwe iDeloitte. I-akhawunti yomqondisi yale seva ivikelwe kuphela ngephasiwedi.
Umcwaningi wase-Austrian ozimele u-David Wind uthole umklomelo ka-$5 ngokuthola ubungozi ekhasini lokungena ngemvume le-intranethi ye-Google.
I-91% yezinkampani zaseRussia zifihla ukuvuza kwedatha.
Izindaba ezinjalo zingatholakala cishe nsuku zonke ekuphakeleni kwezindaba ze-inthanethi. Lobu ubufakazi obuqondile bokuthi izinsizakalo zangaphakathi zenkampani kufanele zivikelwe.
Futhi uma inkampani inkulu, iba nabasebenzi abaningi futhi ingqalasizinda yayo ye-IT yangaphakathi iyinkimbinkimbi, yilapho inkinga yokuvuza kolwazi icindezela kakhulu. Iluphi ulwazi olunentshisekelo kubahlaseli nendlela yokuvikela?
Iluphi uhlobo lolwazi oluputshuzayo olungalimaza inkampani?
- ulwazi mayelana namaklayenti kanye nokuthengiselana;
- ulwazi lomkhiqizo wezobuchwepheshe kanye nolwazi;
- ulwazi mayelana nozakwethu nezipesheli;
- idatha yomuntu siqu kanye ne-accounting.
Futhi uma uqonda ukuthi olunye ulwazi olusohlwini olungenhla luyafinyeleleka kunoma iyiphi ingxenye yenethiwekhi yakho kuphela lapho kwethulwa igama lokungena nephasiwedi, kufanele ucabange ngokukhuphula izinga lokuphepha kwedatha futhi uyivikele ekufinyeleleni okungagunyaziwe.
Ukuqinisekiswa kwezinto ezimbili kusetshenziswa i-hardware cryptographic media (amathokheni noma amakhadi ahlakaniphile) sekuzuze idumela lokwethembeka kakhulu futhi ngesikhathi esifanayo kulula ukukusebenzisa.
Sibhala ngezinzuzo zokuqinisekiswa kwezinto ezimbili cishe kuzo zonke izihloko. Ungafunda kabanzi ngalokhu ezihlokweni mayelana ΠΈ .
Kulesi sihloko, sizokukhombisa ukuthi ungasebenzisa kanjani ukuqinisekiswa kwezinto ezimbili ukuze ungene kumaphothali angaphakathi enhlangano yakho.
Njengesibonelo, sizothatha imodeli efanelekile kakhulu yokusetshenziswa kwezinkampani, i-Rutoken - ithokheni ye-cryptographic USB .
Ake siqale ngokusetha.
Isinyathelo 1 - Ukusethwa kweseva
Isisekelo sanoma iyiphi iseva isistimu yokusebenza. Esimweni sethu, lena yi-Windows Server 2016. Futhi kanye nayo kanye nezinye izinhlelo zokusebenza zomndeni we-Windows, i-IIS (Izinsizakalo Zolwazi Lwe-inthanethi) isatshalaliswa.
I-IIS yiqembu lamaseva e-inthanethi, okuhlanganisa iseva yewebhu kanye neseva ye-FTP. I-IIS ihlanganisa izinhlelo zokusebenza zokudala nokuphatha amawebhusayithi.
I-IIS yakhelwe ukwakha izinsiza zewebhu kusetshenziswa ama-akhawunti omsebenzisi ahlinzekwe yisizinda noma uhla lwemibhalo olusebenzayo. Lokhu kukuvumela ukuthi usebenzise imininingo egciniwe yabasebenzisi ekhona.
Π Sichaze ngokuningiliziwe ukuthi ungayifaka kanjani futhi uyilungise kanjani Igunya Lokunikeza Izitifiketi kuseva yakho. Manje ngeke sigxile kulokhu ngokuningiliziwe, kodwa sizocabanga ukuthi yonke into isivele imisiwe. Isitifiketi se-HTTPS seseva yewebhu kufanele sikhishwe ngendlela efanele. Kungcono ukuhlole lokhu ngokushesha.
IWindows Server 2016 iza nenguqulo ye-IIS 10.0 eyakhelwe ngaphakathi.
Uma i-IIS ifakiwe, okusele nje ukuyilungisa ngendlela efanele.
Esigabeni sokukhetha izinsizakalo zendima, siqoke ibhokisi Ukufakazela ubuqiniso okuyisisekelo.
Bese ungena Umphathi Wezinsizakalo Zolwazi Lwe-inthanethi kuvuliwe Ukufakazela ubuqiniso okuyisisekelo.
Futhi ibonise isizinda lapho iseva yewebhu itholakala khona.
Bese sengeza isixhumanisi sesayithi.
Futhi ukhethe izinketho ze-SSL.
Lokhu kuqeda ukusethwa kweseva.
Ngemva kokuqeda lezi zinyathelo, umsebenzisi kuphela onethokheni enesitifiketi kanye ne-PIN yethokheni ozokwazi ukufinyelela isayithi.
Sikukhumbuza futhi ukuthi ngokusho , umsebenzisi ngaphambilini unikezwe ithokheni enokhiye nesitifiketi esikhishwe ngokuya kwesifanekiso esifana naso Umsebenzisi onekhadi elihlakaniphile.
Manje ake siqhubekele phambili ekusetheni ikhompuyutha yomsebenzisi. Kufanele alungiselele iziphequluli azozisebenzisa ukuze axhume kumawebhusayithi avikelwe.
Isinyathelo sesi-2 - Ukusetha ikhompuyutha yomsebenzisi
Ukuze kube lula, ake sicabange ukuthi umsebenzisi wethu unayo Windows 10.
Ake sicabange nokuthi ikhithi ifakiwe .
Ukufaka isethi yabashayeli kuyinketho, njengoba ukusekelwa okungenzeka kakhulu kwethokheni kuzofika nge-Windows Update.
Kodwa uma lokhu kungenzeki ngokuzumayo, ukufaka isethi ye-Rutoken Drivers ye-Windows kuzoxazulula zonke izinkinga.
Ake sixhume ithokheni kukhompyutha yomsebenzisi bese sivula i-Rutoken Control Panel.
Kuthebhu Izitifiketi Thikha ibhokisi eduze kwesitifiketi esidingekayo uma singahloliwe.
Ngakho, siqinisekise ukuthi ithokheni liyasebenza futhi liqukethe isitifiketi esidingekayo.
Zonke iziphequluli ngaphandle kweFirefox zilungiswa ngokuzenzakalelayo.
Awudingi ukwenza okuthile okukhethekile nabo.
Manje vula noma yisiphi isiphequluli bese ufaka ikheli lensiza.
Ngaphambi kokuthi isayithi lilayishe, kuzovuleka iwindi lokukhetha isitifiketi, bese kuba nefasitela lokufaka ikhodi ye-PIN yethokheni.
Uma i-Aktiv ruToken CSP ikhethwa njengomhlinzeki we-crypto ozenzakalelayo wedivayisi, kuzovuleka elinye iwindi ukufaka ikhodi ye-PIN.
Futhi kuphela ngemva kokuyifaka ngempumelelo esipheqululini lapho iwebhusayithi yethu izovuleka khona.
Ngesiphequluli seFirefox, izilungiselelo ezengeziwe kufanele zenziwe.
Kuzilungiselelo zesiphequluli sakho khetha Ubumfihlo Nokuvikeleka. Esigabeni Izitifiketi ukucindezela Idivayisi yokuvikela. Iwindi lizovuleka Ukuphathwa kwedivayisi.
Qhafaza Landa, khombisa igama elithi Rutoken EDS kanye nendlela C:windowssystem32rtpkcs11ecp.dll.
Yilokho nje, iFirefox manje isiyazi ukuthi iphathwa kanjani ithokheni futhi ikuvumela ukuthi ungene kusayithi uyisebenzisa.
Ngendlela, ngena ngemvume usebenzisa ithokheni kumawebhusayithi futhi isebenza kumaMacs kusiphequluli seSafari, Chrome kanye neFirefox.
Udinga nje ukufaka i-Rutoken kusuka kuwebhusayithi futhi ubone isitifiketi kuphawu kuyo.
Asikho isidingo sokumisa iziphequluli zeSafari, Chrome, Yandex nezinye; udinga nje ukuvula isiza kunoma yisiphi salezi ziphequluli.
Isiphequluli seFirefox simiswe ngendlela efanayo naleyo eku-Windows (Izilungiselelo - Okuthuthukile - Izitifiketi - Amadivayisi okuphepha). Indlela eya kumtapo wolwazi kuphela ehluke kancane /Library/Akitv Co/Rutoken ECP/lib/librtpkcs11ecp.dylib.
okutholakele
Sikubonise ukuthi ungasetha kanjani ukuqinisekiswa kwezinto ezimbili kumawebhusayithi usebenzisa amathokheni e-cryptographic. Njengenjwayelo, asizange sidinge noma iyiphi isofthiwe eyengeziwe yalokhu, ngaphandle kwemitapo yolwazi yesistimu ye-Rutoken.
Ungenza le nqubo nganoma yiziphi izinsiza zakho zangaphakathi, futhi ungakwazi futhi ukuhlela ngokuguquguqukayo amaqembu abasebenzisi abazokwazi ukufinyelela kusayithi, njenganoma iyiphi enye indawo ku-Windows Server.
Ingabe usebenzisa i-OS ehlukile kuseva?
Uma ufuna ukuthi sibhale mayelana nokumisa ezinye izinhlelo zokusebenza, bese ubhala ngakho emazwaneni esihlokweni.
Source: www.habr.com