GRANDSTREAM UCM63xx uchungechunge lwe-IP-PBX Multi-Factor Authentication

I-Multi-factor Authentication Guide

ISINGENISO

Isici se-IP-PBX Multi-Factor Authentication (MFA) sengeza indlela elula nevikelekile yokuvikela uhlelo, ngaphezu kokudinga igama lomsebenzisi nephasiwedi ukuze ungene ngemvume. Uma inikwe amandla, i-IP-PBX izodinga imininingwane yokungena (isici sokuqala) kanye nekhodi yokuqinisekisa kusukela kudivayisi ye-MFA (isici sesi-1), okwandisa ukuvikeleka kwesistimu ye-IP-PBX. Ukuze usebenzise i-MFA, abasebenzisi bazodinga ukufaka uhlelo lokusebenza lwe-MFA ebonakalayo noma bathenge idivayisi ye-MFA ebonakalayo. I-MFA imisiwe futhi isetshenziswa nge-akhawunti ngayinye, hhayi wonke ama-akhawunti.

Qaphela:
Igama elithi IP-PBX kulo mhlahlandlela libhekisela ochungechungeni lwe-UCM63xx, Cloud UCM, Software UCM, kanye ne-GCC6000 Series (imojuli ye-PBX).

• Idivayisi ye-MFA ebonakalayo
  Imishini ye-MFA ebonakalayo ibhekisela ezinhlelweni zesofthiwe ezisetshenziswa kumadivayisi eselula noma amanye amadivaysi ukuze esikhundleni samadivayisi aphathekayo e-MFA. Uhlelo lokusebenza lwe-MFA luzokhiqiza ikhodi enamadijithi ayisithupha nge-algorithm yephasiwedi yesikhathi esisodwa (TOTP). Le khodi izodingeka uma ungena ku-IP-PBX. Idivayisi ye-MFA ebonakalayo eyabelwe umsebenzisi ngamunye kufanele ihluke. Umsebenzisi akakwazi ukusebenzisa ikhodi evela kudivayisi ye-MFA yomunye umsebenzisi noma uhlelo lokusebenza ukuze angene ku-akhawunti yakhe. Njengoba izinhlelo zokusebenza ze-MFA zingase zisebenze kuzingxenyekazi zekhompuyutha ezingavikelekile, zingase zinganikezi izinga elifanayo lokuphepha njengamadivayisi aphathekayo e-MFA.
• Idivayisi ye-MFA Engokoqobo
  Idivayisi ye-MFA ephathekayo izokhiqiza ikhodi enamadijithi ayisithupha nge-algorithm yephasiwedi yesikhathi esisodwa (TOTP). Le khodi izodingeka uma ungena ku-IP-PBX. Idivayisi ye-MFA ephathekayo eyabelwe umsebenzisi ngamunye kufanele ihluke. Umsebenzisi akakwazi ukusebenzisa ikhodi evela kudivayisi ye-MFA yomunye umsebenzisi noma uhlelo lokusebenza ukuze angene ku-akhawunti yakhe.

IMINININGWANE YEDIVAYISI ye-MFA

	Idivayisi ye-MFA ebonakalayo	Idivayisi ye-MFA Engokoqobo
Idivayisi	Bheka ithebula le-Virtual MFA Applications ngezansi	Ithokheni yehadiwe ye-TOTP	Ukhiye Wokuvikela we-FIDO
Izindleko	Mahhala	Intengo inqunywa umthengisi wenkampani yangaphandle	Intengo inqunywa umthengisi wenkampani yangaphandle
Imininingwane Yedivayisi	Noma iyiphi idivayisi yeselula noma ithebhulethi engafaka futhi isebenzise izinhlelo zokusebenza ezisekela izinga le-TOTP	Idivayisi yomthengisi yenkampani yangaphandle esekela amadivayisi ajwayelekile we-TOTP afana namadivayisi we-Microcosm MFA	Amadivayisi asekela i-FIDO U2F indinganiso yokuqinisekisa evulekile.
Isicelo Scenario	Amathokheni amaningi angasekelwa kudivayisi eyodwa	Izikhungo eziningi zezimali nezinhlangano ze-IT zebhizinisi zisebenzisa uhlobo olufanayo lwedivayisi	Ukuphoqelela izindlela zokuqinisekisa inkokhelo futhi uqinise ukuphepha kwemisebenzi ye-e-commerce.

IZICELO ZOKUSEBENZA KWE-MFA

Sicela uye kudivayisi yakho yeselula noma isitolo sezinhlelo zokusebenza zethebhulethi ukuze ulande futhi ufake izinhlelo zokusebenza ze-MFA. Ithebula elingezansi libala ama-example izicelo.

Amadivayisi eselula e-Android™	I-Google Authenticator Twilio Authy 2-factor Authentication
I-iOS™ Amadivayisi Eselula	I-Google Authenticator Twilio Authy 2-factor Authentication
I-Windows™ Mobile Devices	Isiqinisekisi (nge-Microsoft)

UKUSEBENZISA IDIVAYISI ye-MFA
Kunconywa kakhulu ukuthi ulungiselele i-Multi-Factor Authentication (MFA) ukuze unikeze izinga eliphezulu lokuphepha lohlelo lwe-IP-PBX. Abaphathi abakhulu nabaphathi bangashintsha ku-MFA kuma-akhawunti abo, kodwa hhayi kuma-akhawunti abanye.

Ukusebenzisa idivayisi ye-MFA ebonakalayo
Okokuqala, landa uhlelo lwe-MFA esitolo sakho sohlelo lokusebenza (isb, Apple App Store noma Google Play Store). Bheka iThebula 3 ngesibampokuncane kwezinhlelo zokusebenza ze-MFA ezitholakalayo.

Qaphela
Ukuze ulungiselele i-MFA ngendlela efanele, amakheli e-imeyili kufanele asethelwe i-IP-PBX kanye ne-akhawunti yomphathi oyifunayo. Lena ukuphela kwendlela yokukhubaza i-MFA ngaphandle kokungena ku-akhawunti. Uma lingekho ikheli le-imeyili elimisiwe, i-akhawunti ngeke ikwazi ukungena ngemvume.

Landela lezi zinyathelo ukuze ulungiselele i-MFA ku-IP-PBX:

1. Ngena ngemvume kuphothali yokuphatha ye-IP-PBX nge-akhawunti yomphathi omkhulu. Zulazula uye kokuthi Izilungiselelo Zesistimu → Izilungiselelo Ze-imeyili futhi ulungiselele izilungiselelo ze-imeyili ezivumelekile ezizovumela i-IP-PBX ukuthi ithumele ama-imeyili. Qiniseka ukuthi inkambu Yohlobo isethwe kokuthi Iklayenti.
2. Ku-IP-PBX web I-UI, zulazulela ekhasini elithi Maintenance → Ukuphathwa komsebenzisi, bese uchofoza ukuhlela imininingwane yomsebenzisi. Lungiselela ikheli le-imeyili lomlawuli.
3. Nika amandla ukuqinisekiswa kwe-Multi-Factor bese ukhetha Uhlelo Lokufakazela ubuqiniso ekwazisweni. Bese uchofoza kokulandelayo.
4. Iwindi lesitifiketi sedivayisi ye-Virtual MFA lizohlinzeka imiyalelo yesinyathelo nesinyathelo ekusetheni yonke into. Abasebenzisi bangaskena ikhodi ye-QR noma bafake ukhiye mathupha ngohlelo lwabo lokusebenza lwe-MFA.
5. Vula uhlelo lwakho lokusebenza olubonakalayo lwe-MFA bese ulandela izinyathelo ezingezansi.
   • Uma uhlelo lwakho lokusebenza lwe-MFA lusekela ikhodi ye-QR, skena ikhodi ye-QR enikeziwe. Amanye amadivaysi eselula angaskena futhi athole amakhodi e-QR esebenzisa uhlelo lokusebenza lwekhamera.
   • Uma ngabe uhlelo lwakho lokusebenza lwe-MFA lungawasekeli amakhodi e-QR, chofoza okuthi “Bonisa ukhiye” bese ufaka ngesandla ukhiye kuhlelo lokusebenza lwe-MFA. Uma i-MFA idinga ukukhetha ukuthi ikhodi yenziwe kanjani, sicela ukhethe "Okusekelwe esikhathini".
     Qaphela
     Uma uhlelo lokusebenza lwe-MFA olubonakalayo lusekela amadivayisi amaningi we-MFA noma ama-akhawunti, sicela ukhethe Engeza idivayisi/i-akhawunti ye-MFA entsha ukuze udale idivayisi entsha noma i-akhawunti entsha.
6. I-MFA izokwenza ngezikhathi ezithile amaphasiwedi esikhathi esisodwa. Faka iphasiwedi eveziwe yesikhathi esisodwa evezwe kuhlelo lokusebenza lwe-MFA endaweni yeKhodi 1. Linda cishe imizuzwana engama-30 ukuze uhlelo lokusebenza lukhiqize enye iphasiwedi yesikhathi esisodwa. Faka le phasiwedi entsha endaweni Yekhodi 2.
7. Chofoza ukuqalisa ukufakazela ubuqiniso. Ngemva kokudlulisa ukuqinisekiswa, chofoza izinkinobho zokulondoloza futhi Sebenzisa Izinguquko ukuze izilungiselelo zisebenze. I-akhawunti manje isiboshelwe ngempumelelo kudivayisi ye-MFA ebonakalayo. Ikhodi ye-MFA manje izodingeka ukuze ungene ku-akhawunti.

Amanothi

1. Sicela uthumele isicelo sakho ngokushesha ngemva kokukhiqiza ikhodi. Uma kungenjalo, i-TOTP (iphasiwedi yesikhathi esisodwa esekelwe esikhathini) izophelelwa yisikhathi maduzane. Uma iphelelwe yisikhathi, sicela uqale phansi futhi.
2. Umsebenzisi oyedwa angaboshwa kuphela kudivayisi eyodwa ye-MFA.

Ukusebenzisa Idivayisi ye-MFA Engokoqobo
Abasebenzisi bazodinga ukuthenga idivayisi ye-MFA engokoqobo futhi baqinisekise ukuthi i-IP-PBX inezilungiselelo ze-imeyili ezivumelekile ezilungiselelwe ngohlobo lwenkambu emiswe kokuthi Iklayenti. I-akhawunti emiselwe i-MFA kufanele futhi ibe nekheli le-imeyili elivumelekile elimisiwe.

Qaphela
Ukuze ulungiselele i-MFA ngendlela efanele, amakheli e-imeyili kufanele asethelwe i-IP-PBX kanye ne-akhawunti yomphathi oyifunayo. Lena ukuphela kwendlela yokukhubaza i-MFA ngaphandle kokungena ku-akhawunti. Uma lingekho ikheli le-imeyili elimisiwe, i-akhawunti ngeke ikwazi ukungena ngemvume.

Lungiselela i-TOTP Hardware Token
Ngezansi kunezinyathelo zokumisa ithokheni yehadiwe esekelwe ngesikhathi esisodwa (TOTP) ku-IP-PBX.

1. Ngena ngemvume kuphothali yokuphatha ye-IP-PBX nge-akhawunti yomphathi omkhulu. Zulazulela kokuthi Izilungiselelo Zesistimu →Izilungiselelo Ze-imeyili bese ulungisa izilungiselelo ze-imeyili ezivumelekile ezizovumela i-IP-PBX ukuthi ithumele ama-imeyili. Qiniseka ukuthi inkambu Yohlobo isethwe kokuthi Iklayenti.
2. Ku-IP-PBX web I-UI, zulazulela ekhasini elithi Maintenance →Ukuphathwa komsebenzisi, bese uchofoza ukuze uhlele imininingwane yomsebenzisi. Lungiselela ikheli le-imeyili lomlawuli.
3. Nika amandla i-Multi-Factor Authentication bese ukhetha Ithokheni ye-TOTP Hardware ekwazisweni okulandelayo. Bese uchofoza Okulandelayo.
4. Iwindi elilandelayo lesitifiketi se-MFA yezingxenyekazi zekhompuyutha lizovela:
5. Faka ukhiye oyimfihlo wedivayisi. Sicela uxhumane nomthengisi wakho ukuze uthole ukhiye oyimfihlo.
   Qaphela
   Ukhiye oyimfihlo kufanele kube imbewu ye-hex ezenzakalelayo (seeds.txt) noma imbewu ye-base32. Okwesiboneloample:
   HEX SEED: B12345CCE6DA79B23456FE025E425D286A116826A63C84ACCFE21C8FE53FDB22 BASE32 SEED: WNKYUTRG3KE3FFTZ7UIO4QS5FBVBC2HJKY6IJLCP4QOH7ZJ12YUI====
6. Esikhaleni seKhodi 1, faka ikhodi enezinhlamvu eziyisithupha ekhonjiswe ocingweni lwe-MFA. Uzodinga ukucindezela inkinobho engaphambili kwedivayisi ye-MFA ukuze ubonise ikhodi. Linda cishe imizuzwana engama-30 ukuze idivayisi ikhiqize ikhodi entsha. Faka le khodi yesibili enamadijithi ayisithupha endaweni Yekhodi 2.
7. Chofoza ukuqalisa ukufakazela ubuqiniso. Ngemva kokudlulisa ukuqinisekiswa, chofoza okuthi londoloza bese usebenzisa ukuze izilungiselelo zisebenze. Manje i-akhawunti yakho isiboshelwe ngempumelelo kudivayisi ye-MFA. Ikhodi yedivayisi ye-MFA kufanele ifakwe ukuze umsebenzisi angene ngemvume ngempumelelo.

Amanothi

1. Sicela uthumele isicelo sakho ngokushesha ngemva kokukhiqiza ikhodi. Uma kungenjalo, iphasiwedi yesikhathi esisodwa ingase iphelelwe yisikhathi. Uma iphelelwe yisikhathi, sicela uqale phansi futhi.
2. Umsebenzisi ngamunye angaboshwa kuphela kudivayisi eyodwa ye-MFA.

Lungiselela Ukhiye Wokuvikela we-FIDO (Cloud UCM Kuphela)
Sicela ulandele izinyathelo ezingezansi ukuze ulungiselele ukufakazela ubuqiniso kokhiye wokuqinisekisa ubunikazi we-FIDO we-Cloud UCM:

1. Ngena ngemvume kuphothali yokuphatha ye-Cloud UCM nge-akhawunti yomphathi omkhulu. Zulazulela kokuthi Izilungiselelo Zesistimu →Izilungiselelo Ze-imeyili futhi ulungiselele izilungiselelo ze-imeyili ezivumelekile ezizovumela i-Cloud UCM ukuthi ithumele ama-imeyili. Qiniseka ukuthi inkambu Yohlobo isethwe kokuthi Iklayenti.
2. Ku-Cloud UCM web I-UI, zulazulela ekhasini elithi Maintenance →Ukuphathwa komsebenzisi, bese uchofoza ukuze uhlele imininingwane yomsebenzisi. Lungiselela ikheli le-imeyili lomlawuli.
3. Nika amandla ukuqinisekiswa kwe-Multi-Factor bese ukhetha Ukhiye Wokuvikela we-FIDO ekwazisweni okulandelayo. Bese uchofoza Okulandelayo.
4. Khetha ukuthi uzogcina kuphi ukhiye wakho wokudlula: ku-iPhone yakho, i-iPad, idivayisi ye-Android, noma ukhiye wokuqinisekisa ubunikazi ophathekayo.
5. Uma i-iPhone, i-iPad, noma idivayisi ye-Android ikhethiwe, ikhodi ye-QR izoboniswa esikrinini esilandelayo ukuze iskenwe kusetshenziswa ikhamera yedivayisi. Uma ukhiye wokuqinisekisa ubunikazi ukhethiwe, ukhiye uzodinga ukufakwa embobeni ye-USB yekhompyutha.
6. Landela imiyalelo esekelwe endleleni ekhethiwe. Uma sekuqediwe, kuzovela iwindi lokuqinisekisa elizoqinisekisa ukuthi ukuqinisekiswa kwe-FIDO kunikwe amandla ngempumelelo.

UKUSUSA IDIVAYISI ye-MFA

Uma i-MFA ingasadingeki, i-MFA ingakhutshazwa ku-akhawunti noma kunini.

Ukukhipha i-MFA ngokuphathwa komsebenzisi

1. Ngena ngemvume ku-akhawunti yomqondisi ukuze ukhubaze i-MFA. Zulazulela ku-Maintenance → Ukuphathwa komsebenzisi bese uhlela i-akhawunti efanele.
2. Susa ukumaka Ukuqinisekiswa Kwezinto Eziningi.

Isusa i-MFA ngekhasi lokungena ngemvume

1. Ekhasini lokungena ngemvume, faka imininingwane ye-akhawunti. Lapho sekuvela iwindi Lokugunyazwa Kwezinto Eziningi, chofoza okuthi Setha Kabusha ilinki yesitifiketi ngezansi kwenkinobho yokungena.
2. I-imeyili yokususa ye-MFA izothunyelwa ekhelini le-imeyili elihlobene nomsebenzisi. Ku-imeyili, chofoza inkinobho ethi Setha Kabusha Manje ukuze uqinisekise futhi ukhubaze i-MFA.
3. Le imeyili yokusetha kabusha izosebenza imizuzu eyi-10 futhi izophelelwa yisikhathi ngokushesha ngemva kokuchofoza komsebenzisi kuyo.

AMADIVAYISI Asekelwe
Ithebula elilandelayo libonisa wonke amamodeli we-IP-PBX asekela isici sokufakazela ubuqiniso sezinto eziningi:

imibuzo ejwayelekile ukubuzwa

• Q: Ngingakwazi ukusebenzisa amadivayisi amaningi we-MFA nge-akhawunti eyodwa ye-IP-PBX?
  A: Yebo, amadivayisi amaningi we-MFA angasetshenziswa nge-akhawunti eyodwa ye-IP-PBX ukuze uthole ukuphepha okungeziwe.
• Q: Ingabe kuyimpoqo ukusebenzisa i-MFA kuwo wonke ama-akhawunti ohlelweni lwe-IP-PBX?
  IMP: Cha, i-MFA inganikwa amandla ngokukhetha i-akhawunti ngayinye ngabalawuli abakhulu nabaphathi, hhayi impoqo kuwo wonke ama-akhawunti.

Amadokhumenti / Izinsiza

GRANDSTREAM UCM63xx uchungechunge lwe-IP-PBX Multi-Factor Authentication [pdf] Umhlahlandlela Womsebenzisi UCM63xx series, CloudUCM, SoftwareUCM, GCC6000 Series, UCM63xx series IP-PBX Multi-Factor Authentication, UCM63xx series, IP-PBX Multi-Factor Authentication, Multi-Factor Authentication, Factor Authentication

Izithenjwa

• Imaniwali yosebenzisayo