[et_pb_section fb_built=”1″ admin_label=”Header” _builder_version=”4.19.2″ _module_preset=”default” overflow-x=”hidden” overflow-y=”hidden” collapsed=”on” global_colors_info=”{}”][et_pb_row column_structure=”3_5,2_5″ _builder_version=”4.19.2″ _module_preset=”default” module_alignment_tablet=”center” module_alignment_phone=”center” module_alignment_last_edited=”off|desktop” global_colors_info=”{}”][et_pb_column type=”3_5″ _builder_version=”4.19.2″ _module_preset=”default” z_index=”10″ custom_padding=”14%||||false|false” custom_padding_tablet=”0px||||false|false” custom_padding_phone=”0px||||false|false” custom_padding_last_edited=”on|tablet” global_colors_info=”{}”][et_pb_text _builder_version=”4.22.0″ _module_preset=”85b97146-7121-493b-a158-16b98d1fe135″ global_colors_info=”{}”]<\/p>\n
[\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”19a21e24-64de-49d8-882a-049cabf5f597″ header_font=”Montserrat|500|||||||” header_font_size=”6em” header_letter_spacing=”-0.03em” custom_margin=”|-20%|||false|false” custom_margin_tablet=”|0%|||false|false” custom_margin_phone=”|0%|||false|false” custom_margin_last_edited=”on|tablet” header_font_size_tablet=”6vw” header_font_size_phone=”6vw” global_colors_info=”{}”]<\/p>\n
[\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”19a21e24-64de-49d8-882a-049cabf5f597″ text_font=”Montserrat||||||||” text_font_size=”16px” header_font_size=”6em” header_letter_spacing=”-0.03em” width=”95%” custom_margin=”|-20%|||false|false” custom_margin_tablet=”|0%|||false|false” custom_margin_phone=”|0%|||false|false” custom_margin_last_edited=”on|tablet” header_font_size_tablet=”6vw” header_font_size_phone=”6vw” global_colors_info=”{}”]<\/p>\n
A service created to verify OTP one-time passwords. They can be used either for two-factor authentication or instead of a main password. You can use YubiCloud or create your own server.<\/span><\/p>\n [\/et_pb_text][et_pb_button button_url=”#1″ button_text=”Create your own server” _builder_version=”4.22.0″ _module_preset=”default” custom_button=”on” button_text_size=”15px” button_text_color=”#000000″ button_border_width=”1px” button_border_radius=”58px” button_letter_spacing=”0px” button_font=”Montserrat||||||||” custom_padding=”2%|3%|2%|3%|true|true” global_colors_info=”{}”][\/et_pb_button][et_pb_button button_url=”#2″ button_text=”Learn more” _builder_version=”4.22.0″ _module_preset=”09363f8c-055d-4a96-ab31-c3cd47c68dfb” global_colors_info=”{}”][\/et_pb_button][\/et_pb_column][et_pb_column type=”2_5″ _builder_version=”4.19.0″ _module_preset=”default” custom_padding=”||||false|false” global_colors_info=”{}”][et_pb_image src=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2023\/08\/\u0425\u043c\u0430\u0440\u0430-1.png” alt=”Cloud (1)” title_text=”Cloud (1)” admin_label=”Image” _builder_version=”4.22.0″ _module_preset=”default” position_origin_a=”top_right” custom_margin=”-30%|-15vw||-60%|false|false” custom_margin_tablet=”0%|-10vw||-10vw|false|true” custom_margin_phone=”0%|-10vw||-10vw|false|true” custom_margin_last_edited=”on|tablet” custom_padding=”|9%|||false|false” global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ admin_label=”Video” _builder_version=”4.18.1″ _module_preset=”default” collapsed=”on” global_colors_info=”{}”][et_pb_row column_structure=”1_3,1_3,1_3″ make_equal=”on” module_id=”2″ _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_3″ _builder_version=”4.19.2″ _module_preset=”default” custom_padding=”30px|30px|30px|30px|true|true” custom_padding_tablet=”30px|30px|30px|30px|true|true” custom_padding_phone=”20px|20px|20px|20px|true|true” custom_padding_last_edited=”on|desktop” border_radii=”on|10px|10px|10px|10px” border_width_all=”1px” border_color_all=”#000000″ global_colors_info=”{}”][et_pb_image src=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2023\/05\/saas-icon-10.png” title_text=”saas-icon-10″ _builder_version=”4.19.2″ _module_preset=”default” custom_margin=”||60px||false|false” locked=”off” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.22.0″ _module_preset=”2f3a28b1-530e-487a-87fb-52a74b1b18c7″ global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” global_colors_info=”{}”]<\/p>\n YubiKey’s<\/span> secrets are protected by<\/span> YubiHSM<\/span><\/a> hardware module.<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_3″ _builder_version=”4.18.1″ _module_preset=”default” custom_padding=”30px|30px|30px|30px|true|true” custom_padding_tablet=”30px|30px|30px|30px|true|true” custom_padding_phone=”20px|20px|20px|20px|true|true” custom_padding_last_edited=”on|desktop” border_radii=”on|10px|10px|10px|10px” border_width_all=”1px” border_color_all=”#000000″ global_colors_info=”{}”][et_pb_image src=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2023\/05\/saas-icon-05.png” title_text=”saas-icon-05″ _builder_version=”4.18.1″ _module_preset=”default” custom_margin=”||60px||false|false” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.22.0″ _module_preset=”2f3a28b1-530e-487a-87fb-52a74b1b18c7″ global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” global_colors_info=”{}”]<\/p>\n The service is located on several continents.<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_3″ _builder_version=”4.18.1″ _module_preset=”default” custom_padding=”30px|30px|30px|30px|true|true” custom_padding_tablet=”30px|30px|30px|30px|true|true” custom_padding_phone=”20px|20px|20px|20px|true|true” custom_padding_last_edited=”on|desktop” border_radii=”on|10px|10px|10px|10px” border_width_all=”1px” border_color_all=”#000000″ global_colors_info=”{}”][et_pb_image src=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2023\/05\/saas-icon-03.png” title_text=”saas-icon-03″ _builder_version=”4.18.1″ _module_preset=”default” custom_margin=”||60px||false|false” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.22.0″ _module_preset=”2f3a28b1-530e-487a-87fb-52a74b1b18c7″ global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” global_colors_info=”{}”]<\/p>\n Free web API integration in less than an hour.<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_video src=”https:\/\/youtu.be\/oONQhMk7DTA” _builder_version=”4.22.0″ _module_preset=”default” border_radii=”on|24px|24px|24px|24px” global_colors_info=”{}”][\/et_pb_video][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ admin_label=”Services” _builder_version=”4.18.1″ _module_preset=”default” collapsed=”on” global_colors_info=”{}”][et_pb_row _builder_version=”4.21.0″ _module_preset=”default” custom_margin=”||||false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.22.0″ _module_preset=”b03feecb-29d0-4a1f-9866-f46f71c7c735″ header_2_font=”Montserrat||||||||” header_2_font_size=”46px” header_2_letter_spacing=”-0.04em” text_orientation=”center” custom_margin=”||10px||false|false” global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.21.0″ _module_preset=”2f3a28b1-530e-487a-87fb-52a74b1b18c7″ text_orientation=”center” global_colors_info=”{}”]<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.21.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.21.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” global_colors_info=”{}”]<\/p>\n YubiCloud is the name of a service that was created to verify OTP one-time passwords. They can be used either for two-factor authentication or instead of a main password. A usage pattern combined with a password will typically look like this.<\/span><\/p>\n [\/et_pb_text][et_pb_image src=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2023\/08\/otp_login_form.png” alt=”otp login form” title_text=”otp login form” align=”center” _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ custom_padding_last_edited=”on|tablet” _builder_version=”4.19.0″ _module_preset=”default” custom_padding_tablet=”||0px||false|false” custom_padding_phone=”||0px||false|false” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_icon font_icon=”||divi||400″ icon_color=”#515151″ icon_width=”60px” align=”left” _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_icon][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” global_colors_info=”{}”]<\/p>\n To start working with the service, you will need<\/span> to get API keys<\/span><\/a> \u2013 this is free, fast and helps prevent errors.<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_icon font_icon=”||fa||400″ icon_color=”#515151″ icon_width=”60px” align=”left” _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_icon][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” global_colors_info=”{}”]<\/p>\n The advantage of the YubiCloud service is the simple integration and readiness of existing YubiKeys held by users to be verified by popular services such as Google Ads, LastPass password managers, etc.<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ custom_padding_last_edited=”on|tablet” _builder_version=”4.19.0″ _module_preset=”default” custom_padding_tablet=”||0px||false|false” custom_padding_phone=”||0px||false|false” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_icon font_icon=”||fa||400″ icon_color=”#515151″ icon_width=”60px” align=”left” _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_icon][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” global_colors_info=”{}”]<\/p>\n If desired, instead of YubiCloud, you can use third-party implementations, such as are available, for example, on <\/span>GitHub<\/span><\/a>. The advantage of having your own server is that you can control all the AES* keys programmed into the YubiKey yourself. <\/span><\/p>\n * This is a symmetric block encryption algorithm (block size 128 bits, key 128\/192\/256 bits).<\/small><\/span><\/i><\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_icon font_icon=”||divi||400″ icon_color=”#515151″ icon_width=”60px” align=”left” _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_icon][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” global_colors_info=”{}”]<\/p>\n To ensure uninterrupted operation of the YubiCloud service, Yubico uses five distributed servers that are synchronized with each other. The status of the service can be checked <\/span>at this link<\/span><\/a>.<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.22.0″ _module_preset=”default” background_image=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2023\/08\/\u0414\u043b\u044f-\u0444\u043e\u043d\u0430.png” background_size=”contain” global_colors_info=”{}”][et_pb_image src=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2023\/08\/Untitled-4-01.webp” alt=”untitled 4 01″ title_text=”untitled 4 01″ align=”center” _builder_version=”4.22.0″ _module_preset=”default” custom_margin=”|||-5vw|false|false” custom_padding=”5%||5%|8%|true|false” global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.22.0″ _module_preset=”b03feecb-29d0-4a1f-9866-f46f71c7c735″ header_2_font=”Poppins|500|||||||” header_2_font_size=”40px” locked=”off” global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text module_id=”1″ _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” locked=”off” global_colors_info=”{}”]<\/p>\n <\/span><\/p>\n <\/span><\/p>\n <\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” locked=”off” global_colors_info=”{}”]<\/p>\n To create your own verification server (or authentication module), you need to consider many factors. Next, we will consider an approximate abbreviated scheme of the development of the authentication module, which is already implemented in Yubico, to understand what exactly to pay attention to when creating it. Or you can get more detailed instructions in Ukrainian <\/span>get here<\/span><\/a>.<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ admin_label=”Features” _builder_version=”4.22.0″ _module_preset=”default” background_color=”#f9f9f9″ collapsed=”on” global_colors_info=”{}”][et_pb_row _builder_version=”4.22.0″ _module_preset=”default” custom_margin=”||||false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.22.0″ _module_preset=”b03feecb-29d0-4a1f-9866-f46f71c7c735″ header_2_font=”Poppins|500|||||||” header_2_font_size=”46px” header_2_letter_spacing=”-0.04em” text_orientation=”center” custom_margin=”4%||4%||true|false” global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” custom_padding=”||||false|false” global_colors_info=”{}”]<\/p>\n When designing a module, you must consider authentication, scaling, provisioning, and key administration modes. <\/span><\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.1″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” custom_padding=”||||false|false” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″ module_id=”ra”]<\/p>\n To comply with many industry standards, you will need to set up two-factor authentication. This may be enough. But if you are developing an authentication module based on the YubiKey, we recommend using 4 authentication modes according to the roles of your users and the requirements of your security policy:<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.21.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.18.1″ _module_preset=”default” background_color=”#FFFFFF” custom_padding=”30px|30px|30px|30px|true|true” custom_padding_tablet=”30px|30px|30px|30px|true|true” custom_padding_phone=”20px|20px|20px|20px|true|true” custom_padding_last_edited=”on|phone” border_radii=”on|24px|24px|24px|24px” box_shadow_style=”preset4″ box_shadow_horizontal=”0px” box_shadow_vertical=”100px” box_shadow_blur=”100px” box_shadow_color=”rgba(194,194,200,0.4)” global_colors_info=”{}”][et_pb_image src=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2023\/05\/saas-icon-12.png” title_text=”saas-icon-12″ _builder_version=”4.19.2″ _module_preset=”default” custom_margin=”||60px||false|false” locked=”off” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.22.0″ _module_preset=”2f3a28b1-530e-487a-87fb-52a74b1b18c7″ text_font=”Montserrat||||||||” global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” global_colors_info=”{}”]<\/p>\n This mode is not the most secure, but in some cases it may be sufficient for the consumer purposes of users and to simplify the registration procedure. <\/span><\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.18.1″ _module_preset=”default” background_color=”#FFFFFF” custom_padding=”30px|30px|30px|30px|true|true” custom_padding_tablet=”30px|30px|30px|30px|true|true” custom_padding_phone=”20px|20px|20px|20px|true|true” custom_padding_last_edited=”on|phone” border_radii=”on|24px|24px|24px|24px” box_shadow_style=”preset4″ box_shadow_horizontal=”0px” box_shadow_vertical=”100px” box_shadow_blur=”100px” box_shadow_color=”rgba(194,194,200,0.4)” global_colors_info=”{}”][et_pb_image src=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2023\/05\/saas-icon-01.png” title_text=”saas-icon-01″ _builder_version=”4.18.1″ _module_preset=”default” custom_margin=”||60px||false|false” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.22.0″ _module_preset=”2f3a28b1-530e-487a-87fb-52a74b1b18c7″ global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” global_colors_info=”{}”]<\/p>\n In this case, you can simplify the process of entering the system. The method is quite safe, especially if you use complex passwords and store them in a safe place (storage). <\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.21.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.18.1″ _module_preset=”default” background_color=”#FFFFFF” custom_padding=”30px|30px|30px|30px|true|true” custom_padding_tablet=”30px|30px|30px|30px|true|true” custom_padding_phone=”20px|20px|20px|20px|true|true” custom_padding_last_edited=”on|phone” border_radii=”on|24px|24px|24px|24px” box_shadow_style=”preset4″ box_shadow_horizontal=”0px” box_shadow_vertical=”100px” box_shadow_blur=”100px” box_shadow_color=”rgba(194,194,200,0.4)” global_colors_info=”{}”][et_pb_image src=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2023\/05\/saas-icon-05.png” alt=”saas icon 05″ title_text=”saas icon 05″ _builder_version=”4.22.0″ _module_preset=”default” custom_margin=”||60px||false|false” locked=”off” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.22.0″ _module_preset=”2f3a28b1-530e-487a-87fb-52a74b1b18c7″ global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” global_colors_info=”{}”]<\/p>\n This is one of the safest modes. It is usually set as standard. We also recommend that you consider the following administrative configuration setting: make a password optional until the YubiKey is assigned to a user account. This will simplify the administration procedure in large companies, giving new users time to switch to stronger authentication methods.<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.18.1″ _module_preset=”default” background_color=”#FFFFFF” custom_padding=”30px|30px|30px|30px|true|true” custom_padding_tablet=”30px|30px|30px|30px|true|true” custom_padding_phone=”20px|20px|20px|20px|true|true” custom_padding_last_edited=”on|phone” border_radii=”on|24px|24px|24px|24px” box_shadow_style=”preset4″ box_shadow_horizontal=”0px” box_shadow_vertical=”100px” box_shadow_blur=”100px” box_shadow_color=”rgba(194,194,200,0.4)” global_colors_info=”{}”][et_pb_image src=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2023\/05\/saas-icon-10.png” title_text=”saas-icon-10″ _builder_version=”4.19.2″ _module_preset=”default” custom_margin=”||60px||false|false” locked=”off” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.22.0″ _module_preset=”2f3a28b1-530e-487a-87fb-52a74b1b18c7″ global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” global_colors_info=”{}”]<\/p>\n Logging in is even easier when using only the YubiKey ID. But there is a danger that if the key is stolen, the attacker will get into the system. Of course, the procedure will be difficult for him: he will need to penetrate directly into the company’s office, find out where the victim keeps the key and which services he accesses. But note that there is a risk of breakage in this case.<\/span><\/p>\n <\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.19.2″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.22.0″ _module_preset=”b03feecb-29d0-4a1f-9866-f46f71c7c735″ text_font=”Montserrat||||||||” header_2_font=”Poppins|500|||||||” custom_margin=”||0px||false|false” global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” text_font=”Montserrat|500|||||||” global_colors_info=”{}”]<\/p>\n The next steps in building your own server are scaling and administration.<\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.19.2″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.19.2″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.19.0″ _module_preset=”default” use_background_color_gradient=”on” background_color_gradient_direction=”140deg” background_color_gradient_stops=”#9df14b 20%|#02e173 100%” custom_padding=”60px|60px|60px|60px|true|true” custom_padding_tablet=”30px|30px|30px|30px|true|true” custom_padding_phone=”20px|20px|20px|20px|true|true” custom_padding_last_edited=”on|tablet” border_radii=”on|24px|24px|24px|24px” box_shadow_style=”preset4″ box_shadow_horizontal=”0px” box_shadow_vertical=”60px” box_shadow_blur=”80px” box_shadow_color=”rgba(0,135,28,0.2)” global_colors_info=”{}”][et_pb_image src=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2023\/05\/saas-13.png” title_text=”saas-13″ _builder_version=”4.22.0″ _module_preset=”default” width=”30%” max_width=”30%” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.22.0″ _module_preset=”e961165c-fe32-4796-864e-64165a43eb90″ header_3_font=”Poppins|500|||||||” custom_margin=”||0px||false|false” global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” text_text_color=”#000000″ global_colors_info=”{}”]<\/p>\n You have to anticipate the growth of the organization, even if today you only have up to two dozen employees and few customers. Because the number of service users can suddenly grow from several hundred to several million. For example, how it happened with the avalanche <\/span>the growing popularity of ChatGPT<\/span><\/a>.<\/span><\/span><\/p>\n Therefore, even at the initial stage, it is desirable to consider options for developing modules that work in frameworks that can support at least 10,000 users. Additionally, consider a hierarchical structure for administration and support, so that as the structure grows, each has appropriate roles and access within the security policy. <\/span><\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.19.2″ _module_preset=”default” use_background_color_gradient=”on” background_color_gradient_direction=”225deg” background_color_gradient_stops=”#f8c701 0%|#fe7e8e 100%” vertical_offset=”-150px” vertical_offset_tablet=”0vw” vertical_offset_phone=”0vw” vertical_offset_last_edited=”on|phone” overflow-x=”visible” overflow-y=”visible” custom_padding=”60px|60px|60px|60px|true|true” custom_padding_tablet=”30px|30px|30px|30px|true|true” custom_padding_phone=”20px|20px|20px|20px|true|true” custom_padding_last_edited=”on|tablet” border_radii=”on|24px|24px|24px|24px” border_width_all=”1px” border_color_all=”#000000″ box_shadow_style=”preset4″ box_shadow_horizontal=”0px” box_shadow_vertical=”60px” box_shadow_blur=”80px” box_shadow_color=”rgba(254,139,119,0.3)” global_colors_info=”{}”][et_pb_image src=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2023\/05\/saas-14.png” title_text=”saas-14″ _builder_version=”4.22.0″ _module_preset=”default” width=”30%” max_width=”30%” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.22.0″ _module_preset=”e961165c-fe32-4796-864e-64165a43eb90″ header_3_font=”Poppins|500|||||||” custom_margin=”||0px||false|false” global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” text_text_color=”#000000″ global_colors_info=”{}”]<\/p>\n Key administration includes the following functions:<\/span><\/p>\n Administration must be provided in such a way that the administrator has the ability to associate YubiKeys with user accounts. Especially when providing access to employees.<\/span><\/p>\n It is important to ensure a reduction in the administrative burden in case of growing team and users. To do this, users should be able to configure it themselves (that is, linking the key to the account). In such a model, the user must be able to authenticate in some other way to the key binding \u2014 typically with a login and password. <\/span><\/p>\n [\/et_pb_text][et_pb_divider show_divider=”off” _builder_version=”4.19.2″ _module_preset=”default” use_background_color_gradient=”on” background_color_gradient_direction=”130deg” background_color_gradient_stops=”#c7abff 1%|rgba(40,139,255,0.7) 100%” transform_translate=”30%|0px” transform_translate_linked=”off” positioning=”absolute” position_origin_a=”bottom_right” vertical_offset=”-180px” width=”150px” width_tablet=”20vw” width_phone=”20vw” width_last_edited=”on|tablet” height=”150px” height_tablet=”20vw” height_phone=”20vw” height_last_edited=”off|desktop” mix_blend_mode=”multiply” border_radii=”off|30px|30px|30px|300px” border_width_all=”1px” border_color_all=”#000000″ box_shadow_style=”preset3″ box_shadow_vertical=”32px” box_shadow_blur=”48px” box_shadow_color=”rgba(139,170,255,0.5)” locked=”off” global_colors_info=”{}”][\/et_pb_divider][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ admin_label=”Testimonials” module_id=”downloadauthenticator” _builder_version=”4.21.0″ _module_preset=”default” collapsed=”on” global_colors_info=”{}”][et_pb_row _builder_version=”4.21.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.21.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.22.0″ _module_preset=”9e0a1a33-cc8a-4c49-beb7-422dae8145f3″ header_2_font_size=”48px” custom_margin=”||0px||false|false” global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”4354b1fa-4f4b-446d-84e3-bb7d4a1b823e” header_4_text_color=”gcid-1073567f-78d9-4845-ad61-65129b5d8918″ global_colors_info=”{%22gcid-1073567f-78d9-4845-ad61-65129b5d8918%22:%91%22header_4_text_color%22%93}”]<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ custom_padding_last_edited=”on|tablet” _builder_version=”4.19.0″ _module_preset=”default” custom_padding_tablet=”||0px||false|false” custom_padding_phone=”||0px||false|false” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_icon font_icon=”||divi||400″ icon_color=”#26e03b” icon_width=”60px” align=”left” _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_icon][et_pb_text _builder_version=”4.22.0″ _module_preset=”e961165c-fe32-4796-864e-64165a43eb90″ text_font_size=”16px” custom_margin=”||10px||false|false” global_colors_info=”{}”]<\/p>\n An administrator must be able to install, configure, and run the YubiKey module from the administrator console.<\/span><\/p>\n Installing the module should be simple. For this, the following measures should be taken:<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_icon font_icon=”||fa||400″ icon_color=”#26e03b” icon_width=”60px” align=”left” _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_icon][et_pb_text _builder_version=”4.22.0″ _module_preset=”e961165c-fe32-4796-864e-64165a43eb90″ text_font_size=”16px” custom_margin=”||10px||false|false” global_colors_info=”{}”]<\/p>\n Try to provide an elegant way to remove the authentication module if the need arises. The server should prompt the administrator to save a backup copy of the data used by the module. This should be an optional feature, optional at the administrator’s discretion. The process of removing the authentication module itself should not affect the operation of other programs. <\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_icon font_icon=”||divi||400″ icon_color=”#26e03b” icon_width=”60px” align=”left” _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_icon][et_pb_text _builder_version=”4.22.1″ _module_preset=”e961165c-fe32-4796-864e-64165a43eb90″ text_font_size=”16px” custom_margin=”||10px||false|false” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]<\/p>\n After installation, with the authentication module enabled, the administrator should be able to configure the global settings:<\/span><\/p>\n The following configuration parameters should be provided in the module:<\/span><\/p>\n Unless otherwise specified, this can be a Yubico verification service that has the following parameters: API keys; API indicator; Https; time out. If an administrator uses internal OTP authentication, their interface should have similar configuration options and URLs for internal instances of authentication servers. <\/span><\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.18.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_icon font_icon=”||divi||400″ icon_color=”#26e03b” icon_width=”60px” align=”left” _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_icon][et_pb_text _builder_version=”4.22.0″ _module_preset=”e961165c-fe32-4796-864e-64165a43eb90″ text_font_size=”16px” custom_margin=”||10px||false|false” global_colors_info=”{}”]<\/p>\n The authentication module should provide simple management of user profiles. We recommend setting up information about them in tabular format:<\/span><\/p>\n For convenience, you can add other information, such as the last time the profile was used, contact support, special notes, etc. We also recommend adding a convenient search function by name, ID, or user activity.<\/span><\/p>\n The module should include the function of easy blocking of profiles to prevent access by unauthorized persons in case the keys are stolen by them. At the same time, the real user must be warned through a message. Also, users should be able to warn about the loss of the key by pressing a button when attempting to authorize.<\/span><\/p>\n There should be a function of additional verification of the user, for example, by a one-time link to the mail, after which it is possible to reset the key and use an additional one. <\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ admin_label=”Call to Action” _builder_version=”4.19.2″ _module_preset=”default” module_alignment=”right” overflow-x=”hidden” overflow-y=”hidden” custom_padding=”4vw||||false|false” saved_tabs=”all” collapsed=”on” global_colors_info=”{}”][et_pb_row _builder_version=”4.21.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.21.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.22.0″ _module_preset=”9e0a1a33-cc8a-4c49-beb7-422dae8145f3″ header_2_font_size=”48px” custom_margin=”||0px||false|false” global_colors_info=”{}”]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” locked=”off” global_colors_info=”{}”]<\/p>\n To implement OTP password functions, you need to use compatible hardware devices:<\/span><\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” locked=”off” global_colors_info=”{}”]<\/p>\n Advantages of YubiKey devices:<\/b><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row make_equal=”on” custom_padding_last_edited=”on|tablet” _builder_version=”4.22.0″ _module_preset=”default” background_color=”#4DE961″ use_background_color_gradient=”on” background_color_gradient_stops=”#eac54b 10%|rgba(186,253,153,0.4) 60%|rgba(186,253,153,0) 100%” background_color_gradient_overlays_image=”on” background_image=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2023\/05\/saas-17t.png” overflow-x=”visible” overflow-y=”visible” custom_padding=”||11vw|80px|false|false” custom_padding_tablet=”” custom_padding_phone=”” border_radii=”off|600px|600px|300px|30px” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.19.2″ _module_preset=”default” z_index=”10″ custom_padding_last_edited=”off|desktop” global_colors_info=”{}”][et_pb_image src=”https:\/\/shop.thekernel.ua\/wp-content\/uploads\/2022\/10\/image5.png” alt=”YubiKey FIPS” title_text=”YubiKey FIPS” align=”center” _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.22.0″ _module_preset=”default” custom_margin=”||5%||false|false” custom_padding=”5%||5%||true|false” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.22.0″ _module_preset=”0355eca9-91c6-4d46-b79d-0ea03d9f082e” locked=”off” global_colors_info=”{}”]<\/p>\n FIPS series keys, in addition to the advantages listed above, support the FIPS 140-2 standard (meets increased security requirements according to US security verification standards). Therefore, they can be provided through a separate order.<\/p>\nIncreased safety<\/b><\/h5>\n
Continuous work<\/b><\/h5>\n
Fast and affordable protection<\/b><\/h5>\n
What is YubiCloud <\/b><\/h2>\n
Compatible with <\/span>YubiKey 5<\/span><\/a><\/span>and <\/span>YubiKey FIPS<\/span><\/a><\/span> hardware key series<\/h5>\n
Advantages of using OTP<\/h2>\n
\n
\n
\n
\n
Recommendations for creating your own server<\/h2>\n
Authentication modes<\/b><\/h3>\n
Username + password<\/b><\/h3>\n
YubiKey username or OTP + password<\/b><\/h3>\n
YubiKey Username + Password + OTP<\/b><\/h3>\n
Only OTP YubiKey<\/b><\/h3>\n
Next steps<\/h2>\n
Scaling<\/h3>\n
Key administration<\/h3>\n
\n
Implementation recommendations<\/strong><\/h2>\n
If possible, the authentication module can be developed as a plugin. Make sure it is not implemented by changing files on the main platform. In this case, it is possible to prevent a crash during the update of the underlying application platform. <\/span><\/h4>\n
Installation<\/b><\/h3>\n
\n
Removal<\/b><\/h3>\n
<\/h3>\n
Configuration<\/b><\/h3>\n
\n
\n
Key management<\/b><\/h3>\n
\n
YubiKey equipment<\/b><\/h2>\n
\n
\n