Kungani i-OpenVPN isacela ifayela lokhiye wangasese noma i-token ikhona

Ufaka i-token, ithuluzi lomhlinzeki ngokwakhe liyibona, kodwa iklayenti le-VPN lisacela ifayela lokhiye wangasese. Leso sicelo akubona ubufakazi bokuthi i-token ayisekelwa. Ngokuvamile kusho ukuthi iphrofayela ayizange itshele iklayenti ukuthi isebenzise i-token, ngakho yabuyela ekufakweni kwesitifiketi nokhiye okuyilokho eyikulindele ngokuzenzakalelayo.

Amanani amabili ahlukene kufanele alunge ngaphambi kokuthi lokho kubuyela kume: umhlinzeki odalula i-token, kanye nobunikazi besitifiketi esingaphakathi kwayo. Anikezwa ngezinketho ezahlukene futhi kulula ukuzidida.

Iklayenti licela ifayela ngoba iphrofayela isho kanjalo

Iphrofayela ezenzakalelayo ilindele ifayela lesitifiketi nefayela lokhiye wangasese, noma iphakethe elilodwa le-PKCS#12. Uma lezo zinto zokufaka zingekho, iklayenti alinalutho elingalayisha futhi liziphatha cishe njengoba kwenzeka uma ifayela lingekho, yingakho uphawu lufundwa njengendlela ephukile hhayi njengomshini ongekho. Indlela ye-PKCS#11 ishintsha lezo zinto zokufaka esikhundleni sokuzengeza, ngakho iphrofayela esabiza ifayela lokhiye izoqhubeka isebenzisa ifayela. Susa izinto zokufaka zefayela ngamabomu futhi uvumele i-token inikeze zombili izingxenye.

Inketho yomhlinzeki ibiza umtapo wolwazi we-midleware, hhayi idivayisi futhi hhayi isitifiketi. Ukuthi iklayenti elipakishiwe lingawulayisha yini lowo mtapo wolwazi kuncike ekutheni lakhiwa kanjani, kuhlanganise nokusekelwa kwe-p11-kit okukhethwayo okwenziwa ukwakhiwa okuthile futhi kushiywe okunye. Isifundo esijwayelekile asikwazi ukukutshela ukuthi iphakethe lakho linokuhlelwa okunjani.

Ubunikazi obulandelanisiwe buyinani elihlukile

Ubunikazi besitifiketi buyintambo ende elandelanisiwe ekhiqizwa inqubo yokuthola, futhi akuyona indlela yomtapo wolwazi, akuyona i-PIN ye-token futhi akulona igama le-akhawunti ye-VPN. Ngokuvamile iqukethe izinhlamvu ezidinga izingcaphuno, futhi inani elingenazo izingcaphuno linganqunywa noma lifundwe kabi ngaphandle kwephutha elicacile. Sebenzisa inketho yokuthola ubunikazi yeklayenti uqobo ukuze ubhale lokho okudalulwa i-token, bese ukopisha ngokunembile okufakiwe okuhlosiwe. Ukukhetha into yokuqala ohlwini yiyona ndlela idivayisi egcina ngokwethula ngayo isitifiketi esingalungile.

Umphumela wokuthola uphendula nombuzo wangaphambilini: ukuthi i-token ibonakala nhlobo yini ngalowo mhlinzeki. Uma ungabhali lutho, inkinga ingaphezu kweklayenti le-VPN futhi ingeyo-midleware.

Inqubo exhumayo kufanele ifinyelele i-token

Ukusebenza kwe-token okusebenza kuseshini yakho yedesktop akufakazeli lutho mayelana nensizakalo yesistimu. Insizakalo ingase isebenze njengomunye umsebenzisi, endaweni yamagama yokukhweza ehlukile, ngendlela yamamojula eshiya umtapo wolwazi womhlinzeki, noma ngaphandle kwemvume yokuvula inodi yedivayisi. Khomba ukuthi iyiphi inqubo ephethe ngempela ukuxhumana bese uhlola kuleso simo.

Ukuphatha i-PIN kufanele kube nesinqumo sako. Ukusetshenziswa okuyireferensi kunikeza ingqondo ye-PIN nendlela yokuqinisekisa evikelwe, futhi kokubili kukhona ukuze umsebenzi akwazi ukukhetha uhlelo lokusebenza esikhundleni sokulusungula. Ungaguquli imfuneko engenakugadwa ibe i-PIN yombhalo ocacile ngaphakathi kwephrofayela eyabiwe, ngoba lokho kushintsha ukuvikelwa kwe-token ngokunethezeka. Lapho i-token ivimbela ukuthunyelwa kokhiye ngaphandle, ukusayina kwenzeka kudivayisi futhi i-PIN iyimfihlo yasendaweni kuphela. Kuphatha ngokunakekela lokho okukushoyo.

Lokho i-token engakushintshi

I-token iqinisekisa iklayenti ngaphansi kwenqubomgomo esetshenzisiwe, futhi ayishintshi izahlolo zeklayenti kuseva. Isitifiketi esikhethwe ngempumelelo akusona imvume yokwamukela isitifiketi sesango esingalindelekile, futhi zombili iziqinisekiso zivikela izinhlangothi eziphikisanayo.

Ukubhaliswa kusafanele kwenzeke kumkhiphi, futhi isango kusafanele ligunyaze ubunikazi.

Ukuze kwamukelwe, hlukanisa izigaba: umhlinzeki uyalayisha, isitifiketi esihlosiwe siyatholakala, ukhiye wangasese usetshenziswa ngemvume yasendaweni, i-VPN iyaqinisekisa, futhi ukusebenza kwensiza kuyaphumelela. Ma kuleso sigaba sokuqala esihlulekayo esikhundleni sokuzulazula ngamagama ayimfihlo bese ufaka kabusha inqwaba yokubhala ngemfihlo.

Bhala izinguqulo, ubunikazi bamamojula, isihlonzi esidlangalaleni esikhethiwe namaphutha ahlanjululiwe, futhi gcina ama-PIN namaphakethe emininingwane yokufinyelela ngaphandle kwalowo mbhalo.