Help Center/ Cloud Bastion Host/ User Guide/ System Configuration/ Login Security Configuration/ Configuring a USB Key Vendor
Updated on 2026-11-09 GMT+08:00
View PDF

Configuring a USB Key Vendor

Scenarios

In enterprise O&M security management, a bastion host serves as a unified O&M entry point and is responsible for centralized access and management of core assets. However, relying on static password authentication alone leaves systems vulnerable to credential theft and spoofing. In scenarios such as financial compliance audits and DJCP MLPS 2.0 Level 3 or higher requirements, USB key-based hardware certificate authentication is required to meet elevated compliance standards. Therefore, we need to configure the USB key vendor in the bastion host system to enable hardware certificate authentication.

A USB key is a hardware authentication mode based on digital certificates. It implements identity authentication through physical media. USB keys from different vendors use different encryption technologies and certificate systems and cannot be identified by each other. Therefore, you need to configure the corresponding vendor based on the USB key you purchased. After the configuration, you can insert the USB key and enter the PIN when logging in to the bastion host system. Then, you can complete identity authentication through hardware certificate authentication. Only one USB key vendor can be used for an instance. Currently, the bastion host system can identify the following USB key vendors and models: Longmai (mToken GM3000), FTCX (ePass3000GM), JDZY, and BJCA.

Precautions

After the USB key vendor is changed, all issued USB keys of other vendors will become invalid. You need to issue new USB keys for the new USB key vendor.

Prerequisites

The role you belong to has the management permission for the System module. For details about how to check the permissions of each role, see Role.

Configuring the USB Key Vendor

  1. Log in to your bastion host system.
  2. In the navigation pane on the left, choose System > System Config > Security.
  3. In the right pane of the USB Key Settings area, click Edit. The configuration window is displayed.
  4. Select a USB key vendor.
  5. Click OK. You can then check the USB key settings of the current system on the Security tab.

Follow-up Operations

After configuring a USB key vendor, issue USB keys and enable USB key authentication for login. For details, see Configuring USB Key Login.