coghost Posted December 18, 2013 Share Posted December 18, 2013 I see you offer this integration and I have a Yubikey but I cannot find any information on how to setup WHMCS so I can use it with my user name. It would also be great if I could offer this to my clients as a few of them are using Yubikey and I am promoting it every chance I get. Can someone point me to some instructions on how to set this up? 0 Quote Link to comment Share on other sites More sharing options...
AffordableDomainsCanada Posted December 19, 2013 Share Posted December 19, 2013 Setup >> Staff Management >> Two-factor Authentication Bottom right - Yubico >> Activate Insert your client id - Setup Your YubiKey if you haven't already @ https://upgrade.yubico.com/getapikey/ Insert Secret Key 0 Quote Link to comment Share on other sites More sharing options...
coghost Posted December 19, 2013 Author Share Posted December 19, 2013 Thanks for the help, I found that and set it up. Now how do I activate it on the user account? 0 Quote Link to comment Share on other sites More sharing options...
coghost Posted December 19, 2013 Author Share Posted December 19, 2013 (edited) So I found in the client user area how to enable the Two-Factor Authentication under the profile tab, however when I check the box to enable it and save, the box is unchecked after saving. Once activated there should be a way to key in my YubiKey but there is nothing anywhere that I can find to do this. Really since this account is for the admin and setting it up I did not enable it for clients, there should not even be an option to check this in the client profile. While there is an option in a location that is not enabled there is nothing in the admin area that is enabled. I don't think this can get any more confusing... You guys got me excited to use my key by sending me a newsletter bragging about it. The problem is there is nothing straight forward about this, what is there does not work and what makes matters worse is there is absolutely NO tutorials or documentation ANYWHERE on how to set this up. So does this actually work or is all this just and afterthought that has not been finished yet? Also something else that I find very odd is there is an option to enable Google Authentication. Can someone explain to me why there is a charge for this and worse yet a monthly charge? In all the accounts all over the web where I use this feature NO ONE is charging for this and to have it a monthly charge has 'WE ARE GREEDY" written all over it WOW! Exactly what makes yours so special that you think it is worth paying you more money on top of an already expensive software package? Edited December 19, 2013 by coghost 0 Quote Link to comment Share on other sites More sharing options...
coghost Posted December 19, 2013 Author Share Posted December 19, 2013 OK, so for those that are asking how to make this work with your YubiKey, I can safely tell you there is no logic to making it work. Dont bother looking in your account for a place to put your key. After you enable YubiKey in the Setup/Staff Management/Two-Factor Authentication area you then need to look to the left under what appears to be the instructions for the check box to force administrators to use YubiKey. That's right, there is no option per user so if you have a staff and want to use this feature you will need a key for all the staff (way to think ahead WHMCS developers!). Once you have forced admin users to use the key they will have to setup their keys on the next login. However since I am the only staff I have no idea if this will be used for all the staff or if they can each setup their own keys? Now the real kicker, don't think you can try this out and then disable it because it appears that once you have enabled it even if you uncheck the box to disable it you will still need your key the next time you login. Did anyone beta test this feature at all? 0 Quote Link to comment Share on other sites More sharing options...
slim Posted December 20, 2013 Share Posted December 20, 2013 I use it perfectly. I'm the only one that logs in thou, so cant vouch for how it works in a multiuser environment. 0 Quote Link to comment Share on other sites More sharing options...
WHMCS Support Manager WHMCS John Posted December 24, 2013 WHMCS Support Manager Share Posted December 24, 2013 Hi, If you leave the "Force Administrator Users to enable Two Factor Authentication on Next Login" option UNticked, then it's totally optional for staff to enable two factor auth. If that member of staff doesn't want to use it then they don't have to. If you tick the option, then all staff will need to configure and use Two Factor Auth using whichever methods you've chosen to activate - the decision is totally up to you. 0 Quote Link to comment Share on other sites More sharing options...
coghost Posted December 29, 2013 Author Share Posted December 29, 2013 Thanks John, hope you guys document this for people. As of now their is nothing that I can find...;( 0 Quote Link to comment Share on other sites More sharing options...
Infopro Posted December 29, 2013 Share Posted December 29, 2013 Thanks John, hope you guys document this for people. As of now their is nothing that I can find...;( The docs for this are located here: Security Modules - WHMCS Documentation 0 Quote Link to comment Share on other sites More sharing options...
coghost Posted December 29, 2013 Author Share Posted December 29, 2013 The docs for this are located here:Security Modules - WHMCS Documentation Thanks this helps... 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.