Amathegi edivaysi awazona izitifiketi ze-VPN: izimangalo ezintathu okufanele zihlukaniswe
Ilebula yempahla, ukhiye oyimfihlo kanye nokuvikelwa kwezingxenyekazi zekhompyutha kuyiziqinisekiso ezintathu ezihlukene. Nquma ukuthi igejini liqinisekisa okukhiphi, bese uhlela ukususwa.
Amagama ama-host, izinombolo zokulandelana kanye namafayela omaka afihliwe asiza ukulebula ikhompyutha ephathekayo, futhi akukho kuwo okufakazela ukuthi ikhompyutha ephathekayo eletha okunye kukho iyidivaysi egunyaziwe. Ukwamukelwa kuncike ezimangalweni ezintathu ezihlukene: impahla iyileyo erekhodwa yinhlangano, iklayenti linazo izitifiketi ezikhishwe zayo, futhi lezo zitifiketi zivikelwe ngendlela inqubomgomo eyifunayo. Ukuzihlanganisa kube ukuhlolwa okukodwa yikhona okwenza amafayela akhophile kanye nokhiye abakhiqiziwe baphume.
Izimangalo ezintathu ezihlanganiswa zibe kunye
Irekhodi yempahla ichaza impahla kanye nomnikazi wayo. Ukubhalisa kuxhumanisa isitifiketi esifanele naleyo rekhodi. Ngesikhathi sokuxhumana, i-VPN iqinisekisa ubufakazi obudingwa yindlela yayo emisiwe. Inombolo yokulandelana ethayiphiwe efomini lokubhalisa akufanele ithole igunya laleyo divaysi ngokuzenzakalela, ngoba ifomu lifakazela kuphela ukuthi othile uyayazi inombolo yokulandelana. Hlukanisa izinyathelo ezintathu futhi ngasinye singahlolwa ngokwaso.
Ifayela lomaka libi kunenombolo yokulandelana ngendlela eyodwa: ukulikopa kulula, futhi ikhophi ngayinye ibonakala ikholisa ngokulinganayo.
Bona ukuthi idivaysi iletha ini ngempela
Bheka isitifiketi esigcinwa yiklayenti ngempela ngaphambi kokucabanga ukuthi sidabuka kudivaysi.
Get-ChildItem Cert:\LocalMachine\My | Select-Object Subject, Thumbprint, HasPrivateKey
certutil -store My <thumbprint>Uhlu lubonisa ukuthi yiziphi izitifiketi zomshini ezikhona nokuthi ukhiye oyimfihlo ukhona yini, okuyimehluko phakathi kwefayela lomphakathi nesitifiketi esisebenzisekayo. Ukukhishwa kwesitoreji kunezela igama lomhlinzeki, futhi umhlinzeki wesofthiwe ngokumelene nomhlinzeki wokubhala okuyimfihlo weplathifomu kuwuphawu lokuqala lokuthi ukhiye uhlala kuphi. Isitifiketi esingenakho ukhiye waso oyimfihlo asiqinisekisi lutho, kuyilapho ukhiye oyimfihlo okhishwe waya komunye umshini wenza isitifiketi sithwaleke noma isihloko saso sithini. Rekhoda isigxivizo somunwe kanye nomhlinzeki esikhundleni segama elibonisiwe.
Ukuvikelwa kwezingxenyekazi kudinga ubufakazi
Isitifiketi siwulwazi lomphakathi, ngakho umbuzo onengqondo ukuthi ukhiye oyimfihlo uhlala kuphi nokuthi lokho kuvikelwa kufakazelwe yini. Ubufakazi bokhiye we-TPM buchaza umfakisicelo ofakazela isiphathimandla sezitifiketi ukuthi ukhiye uvikelwe yi-TPM ethembekile, okuqinile kunokusho umhlinzeki wezingxenyekazi esicelweni. Futhi kuyisakhiwo esinezicabango zaso zokuthembela, hhayi into i-VPN ekuvumela ngokuzenzakalela. Qinisekisa ukuthi umkhiphi wamukela ini nokuthi igejini liphoqelela ini mayelana nesitifiketi esiphumayo, ngoba ukugcinwa, ubufakazi kanye nenqubomgomo yokwamukela kuyizingxenye ezintathu.
Ukhiye osekelwa izingxenyekazi awusasho lutho mayelana nezinga lezichibiyelo, ukwabiwa kwamanje noma indlela isikhathi sokusebenza esisetshenziswa ngayo. Lokho kudinga izilawuli zako.
Yenza ukushintshwa nokususwa kube okucacile
Hlela ukuthi kwenzekani uma idivaysi ilahleka, ilungiswa, yabelwa kabusha noma ishintshwa. Ukushintshwa kwebhodi lomama noma isitoreji sokhiye esisuliwe ngokuvamile kudinga ukubhaliswa kabusha okusekelwayo, hhayi ukukopa izimfihlo zakudala ukulingisa umshini wangempela. Rekhoda impahla, isihlonzi sesitifiketi, umnikazi, isinqumo sokubhalisa kanye nendima yokufinyelela ndawonye, ukuze umlawuli olandelayo abone ukuthi ini okwakabani. Susa igunya elamukelwa yigeyini ngempela, ngoba ukushintsha isimo sempahla akufakazeli lutho ngesitifiketi noma isikhathi sokusebenza esivele sikhona.
Bese uhlola umngcele: idivaysi egunyaziwe iyaxhumana, ilebula ekhopiwe kuphela ayixhumani, futhi ubunikazi obuhoxisiwe buyayeka ukusebenza. Ifayela elibizwa ngokuthi approved lihlala liyilebula kuze kube yilapho inqubo ethembekile ilinikeza incazelo.