Followers

Tuesday 3 October 2017

How to setup 2-factor authentication with One-Time-Passwords delivered by Email

Source: www.rohos.com --- Monday, October 02, 2017
Rohos Logon Key allows to protect Windows Terminal Server by using 2-factor authentication with One-Time-Passwords. Using Google authenticator as OTP generator requires to deliver and store OTP secret key on the mobile device of end-user in mobile email, SMS or Google Authenticator application. In order to improve security you can setup your Server to generate and deliver One-Time-Password to the end-user by using SMS messages or Email which is reliable and free. With this feature there is no need to send OTP secret key and setup Google Authenticator on mobile device of end user.   How to setup OTP delivery by Email To setup Rohos Logon Key on Windows Terminal Server read here> Requirements: PowerShell v.3 and higher with ActiveDirectory module; Script execution policy is enabled; In order to enable it run “Set-ExecutionPolicy -ExecutionPolicy RemoteSigned” command in PowerShell console. User accounts has a valid e-mail in account General properties   Open options and ensure you have OtpDeliveryScript.ps1 in Delivery script option: Click Edit to open OtpDeliveryScript.ps1 file and edit Email options such as smtp server, email and password credentials for the mailbox that will be used to send emails: $NotifyByEmail = $true $SmtpServer $SmtpPort $SmtpLogin $SmtpPassword $EmailFrom $Subject $EmailNotificationText Save script and click Test delivery. You can also edit and debug OtpDeliveryScript.ps1 in PowerShell ISE in order to cus ...



from Windows http://ift.tt/2xTNn1H

No comments:

Post a Comment