Help Center> Cloud Bastion Host> User Guide> Logging In to the CBH System> Configuring Multifactor Verification> Configuring USB Key Login Authentication
View PDF

Configuring USB Key Login Authentication

USB token is a one-time password technology implemented based on USB keys. In USB key authentication method, you will need to insert the USB key into your local host for login. The system login page then automatically identifies the inserted USB key and requires you to enter the corresponding PIN to pass identity authentication.

Constraints

  • Currently, CBH only supports USB keys from Century Longmai and BJCA. A USB key from a vendor cannot be identified by other vendors. Configure your vendor before enabling this authentication method. For details, see Configuring USB Keys.
  • A USB key can be issued to one user only.

Prerequisites

You have obtained a USB key and installed the USB key driver locally.

Step 1 Configure USB Key Authentication

  1. Log in to the CBH system as the administrator.
  2. Choose User > User to go to the User management page.
  3. Select a user and click its LoginName.
  4. In the User Setting area, click Edit.

    Figure 1 Editing user setting

  5. In the displayed Edit user setting dialog box, select USBKey for Multifactor Verification.
  6. Click OK.

Step 2: Issue the USBKey

  1. Log in to the CBH system as the administrator.
  2. Choose User > USBKey in the navigation pane.
  3. Click Issue.

    Figure 2 USBKey

  4. Select a user from the Related user drop-down list.

    Figure 3 Issuing a USB key
    Table 1 Parameters for issuing a USB key

    Parameter

    Description

    USBKey

    USB key ID.

    Related user

    User to which the USB key is related.

    PIN

    USB key personal identification number (PIN) provided by the USB key vendor.

  5. Click OK. You can then view the newly issued USB key in the USB key list.

    To log in to the CBH system in USB key authentication method, insert your USB key into your local host, select the USB key on the CBH login page, and enter the PIN as prompted.