Help Center> Cloud Bastion Host> User Guide> Logging In to the CBH System> Configuring Multifactor Verification> Configuring USB Key Login Authentication
Updated on 2024-04-11 GMT+08:00
View PDF

Configuring USB Key Login Authentication

USB token is a one-time password technology implemented based on USB keys. In USB key authentication method, you will need to insert the USB key into your local host for login. The system login page then automatically identifies the inserted USB key and requires you to enter the corresponding PIN to pass identity authentication.

Constraints

  • Currently, CBH can identify USB keys of Century Longmai, BJCA, and JIT only Currently, CBH can identify USB keys of Feitian Technologies. USB keys of different vendors cannot identify each other for login authentication. Configure your vendor before enabling this authentication method. For details, see Configuring USB Keys.
  • A USB key can be issued to one user only.

Prerequisites

You have obtained a USB key and installed the USB key driver locally.

Step 1 Configure USB Key Authentication

  1. Log in to a CBH system as the administrator.
  2. Choose User > User to go to the User management page.
  3. Select a user and click its LoginName.
  4. In the User Setting area, click Edit.

    Figure 1 Editing user setting

  5. In the displayed Edit user setting dialog box, select USBKey for Multifactor Verification.
  6. Click OK.

Step 2: Issue the USBKey

  1. Log in to a CBH system as the administrator.
  2. Choose User > USBKey in the navigation pane.
  3. Click Issue to issue a USB key.

    Figure 2 USBKey

  4. Select a user with the USB key multifactor verification enabled as the related user.

    Figure 3 Procedure
    Table 1 Parameters for issuing a USB key

    Parameter

    Description

    USBKey

    Specifies the USB key ID.

    Relate User

    Specifies the user to which the USB key is related. USB key in multifactor verification must be enabled for such users.

    PIN

    Specifies the personal identification number (PIN) uniquely corresponding to the USB key. It is provided by the USB key vendor.

  5. Click OK. You can then view the newly issued USB key in the USB key list.

    To log in to the CBH system in USB key authentication method, insert your USB key into your local host, select the USB key on the CBH login page, and enter the PIN as prompted.