Protect with two-factor authentication


Many existing networks have older legacy 2-Factor Authentication solutions based around RMA cards or hardware tokens. These legacy solutions lack the flexibility and security of the YubiKey solution, while remaining more expensive to maintain and dependent on specialized hardware.

The YubiRADIUS Two-Factor Authentication solution makes it easy to upgrade from existing solutions, automating the burden of configuration and user import. Further, the YubiRADIUS solution may be set up offline and ahead of time, allowing the changeover from the legacy solution to YubiRADIUS to happen instantly.

Background


There are a range of choices when adding a second-factor authentication method to a Remote Access or VPN in a corporate environment. Yubico solutions, YubiRADIUS and YubiKey, offer a number of benefits making the addition of second factor authentication smooth and easy when compared to other two-factor solutions. YubiRADIUS integrates seamlessly with an existing Active Directory or LDAP authentication solution. When implementing YubiRADIUS there is no impact on existing authentication methods, so users will be able to log in using their existing usernames and passwords throughout the entire process. YubiRADIUS imports users and groups from existing AD or LDAP databases, allowing the YubiRADIUS solution to be implemented quickly and remain in sync with existing user databases. YubiKeys may also be easily added to a YubiRADIUS solution, and authenticated either using the YubiCloud or an internal validation server. YubiKeys may be imported into a YubiRADIUS solution before being assigned to a user, allowing administrators to keep a set of spares on hand and ready to immediately distribute when needed. Finally, YubiRADIUS may be configured to automatically assign YubiKeys to the first user who logs in with it, freeing administrators from having to manually assign keys to users and keep track of hardware tokens, especially during large rollouts.

Background


Many existing networks have older legacy 2-Factor Authentication solutions based around RMA cards or hardware tokens. These legacy solutions lack the flexibility and security of the YubiKey solution, while remaining more expensive to maintain and dependent on specialized hardware.

The YubiRADIUS Two-Factor Authentication solution makes it easy to upgrade from existing solutions, automating the burden of configuration and user import. Further, the YubiRADIUS solution may be set up offline and ahead of time, allowing the changeover from the legacy solution to YubiRADIUS to happen instantly.

Yubico

Go to top EV SSL