Configuring Content Gateway for two-factor authentication

Support

Go to the table of contents

Go to the previous page

Go to the next page

Go to the index

View or print as PDF

Getting Started > Accessing Content Gateway Manager > Configuring Content Gateway for two-factor authentication

Configuring Content Gateway for two-factor authentication

Help | Content Gateway | Version 7.7.3

Two-factor (certificate) authentication:

Is configured for and applies to TRITON Unified Security Center logon only.

Requires administrators to provide 2 forms of identification to log on.

Can be made to apply to Content Gateway Manager by forcing administrators to log on to TRITON Unified Security Center before accessing Content Gateway Manager.

Requires single sign-on to be configured for administrators allowed access to Content Gateway Manager.

Requires that the password logon capability be disabled on Content Gateway, preventing administrators not configured for single sign-on from accessing Content Gateway Manager. If Content Gateway is deployed on an appliance, password access is disabled using an Appliance Manager command. See V-Series Appliance Manager Help.

For more information about configuring two-factor authentication, see Configuring Certificate Authentication in TRITON console online Help.

Disabling and enabling Content Gateway password logon

Content Gateway Manager password logon can be disabled to permit only two-factor authentication, or single sign-on access from the TRITON console.


	Note If Content Gateway is installed on a Websense appliance, see Appliance Manager Help for details.

To disable password logon:

1.	Set up single sign-on in TRITON – Web Security.

2.	If two-factor authentication will be used, set up two-factor authentication in the TRITON Unified Security Center.

3.	Log on to the Content Gateway host system and acquire root privileges.

4.	Change directory to "/etc" and check to see if there is a "websense" subdirectory. If not, create one ("mkdir websense").

5.	Change directory to "websense" (path is now "/etc/websense") and check to see if the file "password-logon.conf" exists.

6.	If not, create it ("touch password-logon.conf".

7.	Edit "password-logon.conf".

8.	Add the line, or modify the existing line to:

password-logon=disabled

9.	Write and exit the file.

The change takes effect immediately. There is no need to restart Content Gateway.

To re-enable password logon for all administrators:

1.	Log on to the Content Gateway host system and acquire root privileges.

2.	Change directory to "/etc/websense".

3.	Edit "password-logon.conf" and change:

password-logon=disabled

password-logon=enabled

4.	Write and exit the file.

The change takes effect immediately. There is no need to restart Content Gateway.

Go to the table of contents

Go to the previous page

Go to the next page

Go to the index

View or print as PDF

Getting Started > Accessing Content Gateway Manager > Configuring Content Gateway for two-factor authentication