Ukungena nge-PIV kuyahluleka ku-Windows EAP-TLS? Hlola indlela yokusayina

Khombisa isitifiketi sekhadi le-PIV kuzo zonke izingxoxo ze-Windows futhi ukungena ku-VPN kungase kuhluleke, ngoba ukubonakala nokusebenziseka kuyizici ezihlukene. Isitifiketi siyinto yomphakathi; ukungena kudinga ukusebenza kokhiye oyimfihlo okwenziwa yikhadi ngaphansi kwemithetho yalo yokufinyelela. Phakathi kwala maqiniso amabili kunezigaba ezine ezihluleka ngezindlela ezine ezihlukene: ukukhetha iphrofayela, ukukhetha isitifiketi, ukusayina kwasekhaya nokuqinisekisa ohlangothini lweseva. Ukuzihamba ngokulandelana kuguqula iphutha elijwayelekile lokuxhawula libe umbuzo oqondile kulowo onengxenye elandelayo.

Qala ngephrofayela nendlela ye-EAP

Vula izici zoxhumano futhi ufunde ukuthi iphrofayela isebenzisa yiphi indlela ye-EAP ngempela, bese ufunda ukuthi indlela ilungiselelwe ukukhetha isiphi isitifiketi. Izindawo eziningi zokusetshenziswa zinendlela yangaphandle esekelwe kusitifiketi kanye nendlela yangaphakathi, futhi isitifiketi esilungiselelwe ezingeni loxhumano akusona ngokuzenzakalela leso esivezwa ngaphakathi kwe-EAP-TLS. Uma iphrofayela ikhetha isitifiketi ngomkhiphi noma ngesihluzi sesihloko, leso sihluzi sikhetha kokubonayo i-Windows esitolo esifanele, hhayi kulokho okutholakala ngengozi ekhadini. Isihluzi esingafani nanoma yini siya embuzweni noma ekwehlulekeni okuthule ngokuya ngokulungiselelwa kwephrofayela, yingakho kunengqondo ukuqopha umnyatselo okhethiwe ngaphambi kwanoma yiluphi ushintsho.

Futhi thola ukuthi uxhumano lusebenza njengomsebenzisi ongenile noma njengomshini. Lelo qiniso elilodwa linquma ukuthi yiziphi izitolo zesitifiketi ezisemkhawulweni nokuthi yisiphi isimo sokuphepha esisayinayo.

Qinisekisa ukuthi isiphi isitifiketi esikhethiwe

Qhathanisa umnyatselo i-Windows ekhethile nemfuneko: ukusetshenziswa kokufakazela umsebenzisi, uchungechunge oluphela empandeni ethembekile, ubunikazi obumakwa inqubomgomo yeseva yokuqinisekisa, kanye nesikhathi sokusebenza esihlanganisa isikhathi sangempela somzamo. Lokhu kuyizivivinyo ezihlukene futhi eyokugcina ibamba okumangalisayo okuningi kunalokho abantu abakulindele, ikakhulukazi ngezitifiketi ezikhishwa ngokuzungeza namaphrofayela agciniwe asakhomba ekukhetheni kwayizolo.

Isimo somsebenzisi nesomshini siyingxenye yesibili yokuhlola. Isitifiketi esesitolo somuntu siqu somsebenzisi asibonakali kusevisi esebenza njengomshini, futhi isitifiketi somshini asivezwa ukushintshana kwe-EAP esimweni somsebenzisi ngaphandle uma iphrofayela isho njalo. Ukufaka kabusha isitifiketi esitolo esingalungile kukhiqiza isitifiketi esibonakalayo kanye nobufakazi bokungena obungabonakali. Funda indlela yesitolo kuphrofayela, hhayi leyo esengxoxweni eyavulwa ngengozi.

Hlola ukusebenza kokhiye ngaphandle kokuqagela i-PIN

Uma ukukhetha sekucacile, umbuzo uwukuthi ikhadi lizosayina yini. I-Windows idinga umhlinzeki wekhadi noma i-minidriver esekelwayo ukuze ifinyelele ukhiye oyimfihlo, futhi idivayisi isebenzisa imithetho yalo ye-PIN nokuba khona kulokho kusebenza. Ikhadi elilungiselelwe ukudinga ukuthintwa kukho konke ukusayina lenza okwahlukile kunelogcina ukuqinisekisa kwiseshini, futhi kokubili kuyizilungiselelo ezisemthethweni ezishintsha ukuthi umbuzo uvela nini. Lowo mehluko uchaza ukungena okuphumelelayo lapho kufakwa okusha futhi kwehluleke ngemva kokuvuka ebuthongweni, ngaphandle kokuthi kube nesitifiketi esingalungile.

certutil.exe -scinfo
certutil.exe -store -user My
Get-WinEvent -LogName Application -MaxEvents 40 | Where-Object ProviderName -like '*Ras*'

Umyalo wokuqala wenzela ikhadi uhlu futhi ubika isimo somfundi nomhlinzeki, okubhalwe ku-mhlahlandlela we-Microsoft wokulungisa amakhadi ahlakaniphile. Owesibili ubala lokho isimo somsebenzisi esikubonayo ngempela. Akukho kukho okufakazela ukuqinisekisa okuphumelelayo; kokubili kunciphisa lapho kuma khona.

Ungaqageli i-PIN. Amakhadi asebenzisa imingcele yemizamo, futhi imizamo embalwa enethemba iguqula inkinga yemvume ibe ubufakazi obuvaliwe obudinga ukulungiswa komphathi. Uma ukusayina kwasekhaya kwehluleka, qopha isimo somhlinzeki nesimo sekhadi esikhundleni sokuzama izinhlobo. Phinda umzamo kanye ngephrofayela efanayo, isitifiketi esifanayo kanye nendlela yomfundi eyaziwayo ukuthi inhle, bese uqhathanisa amarekhodi amabili; ukushintsha izinguqulo eziningi ngesikhathi esisodwa kukhiqiza indaba hhayi umphumela.

Funda izinhlangothi zombili zokuxhawula

Ukusayina okuqediwe akukona ukwamukelwa. Iseva yokuqinisekisa kufanele yamukele uchungechunge, ihlole ukuhoxiswa, imake ubunikazi ngaphansi kwemithetho yayo yamanje futhi igunyaze isicelo; iklayenti kufanele iqinisekise isitifiketi seseva ngendlela iphrofayela edinga ngayo. Isixwayiso se-TLS esikhiqizwe yiseva sibonakala sifana kuloJA wama-rekhodi weklayenti naleso esikhiqizwe endaweni, yingakho uhlangothi olukhiphayo lubaluleke ukudlula umbhalo wesixwayiso.

Qoqa izehlakalo ze-Windows nezehlakalo zohlangothi lweseva ngamasitampu esikhathi aqondisiwe, bese uthola ukuthi yiluphi uhlangothi olukhiqize ukwehluleka kokuqala. I-RFC 5216 ichaza isinyathelo sobufakazi bobunikazi ku-EAP-TLS, futhi isixwayiso esijwayelekile sokuxhawula asisho ngokwaso imbangela yokhiye wasekhaya. Ukuqhathaniswa kwamasitampu esikhathi yikho okuguqula amarekhodi amabili abe ukulandelana.

Gcina imingcele iqondile embikweni

Bhala umbiko ube yizigaba ezine ngasinye sinesinqumo esisodwa: iyiphi iphrofayela nesimo esisebenzile, isiphi isitifiketi i-Windows esikhethile, ingabe ikhadi lisayinile, nokuthi iseva sinqume ini. Leso sakhiwo senza isinyathelo esilandelayo sicace futhi sivimba ukulungiswa okuvamile kokucisha ukuqinisekisa ukuze kudlulwe isigaba okungekho muntu ositholile.

Isitifiketi sesoftware njengokuqhathanisa kwesikhashana kuyisivivinyo somphathi esisemthethweni, kodwa sishintsha imodeli yobufakazi nesiqiniseko, ngakho sikhona kushintsho olugunyaziwe hhayi endleleni yokweqa ethule ekukhiqizeni. Isiyalo esifanayo sisebenza emizamweni ye-PIN nasekukhishweni kabusha kobufakazi ngaphambi kokwaziwa kwesigaba esihlulekayo. Ikhadi elingena esikhundleni elihluleka ngendlela efanayo lingubufakazi obubizayo bokuthi inkinga ayizange ibe sekhadini.