How to implement "iron" keys to access the site?

Question

Apache HTTP Server

Finally, we are gradually establishing a convenient work outside the office.
Document flow and work schedules "run" through 1C. And so, through Apache, we published our 1C to the Internet.
Everything seems to be normal and relatively safe.
But something is restless to me - users give passwords to each other within the office, but here "God himself ordered" - you won’t figure it out right away what’s what.
Sooner or later, someone will write the password on a piece of paper, and lose the piece of paper. And okay, if everything is in order with security inside 1C. But this, in theory, can also be a manager who is admitted to a lot of what "dirty linen".
In short, I want to think about the "iron keys".
Do not advise Crypto-Pro and so on, okay? It costs a lot of money, they won’t give me for the experiment.
Can you tell me something like checking, for example, for a certain file on a flash drive? Or on the ID of the flash drive? Or something else that can be considered "iron". Of course, I want it to be controlled - at least by a list of IDs somewhere in the script.
In general, a simple certificate would also be suitable, which must be registered somewhere on the computer. Which can be declared invalid. But I really don't know how it's done.

Answer 1

habrahabr.ru/post/238589
habrahabr.ru/post/133481
+802.1x look
search
habrahabr.ru/search/?q=%D0%B4%D0%B2%D1%83%D1%85%D1...

Answer 2

You can set up certificate authentication on Apache.
Certificates can also be stored on flash drives.
Look for manuals by the words "apache client cetrificate authentication".
Thus, no one will be able to access your 1C without a certificate.

Answer 3

I recommend google authenticator. This bucket rolls onto the user's phone and generates tokens once a minute. Each user has its own generator, which is attached to the user ID.

Answer 4

other_letter

In short, I want to think about the "iron keys".
Do not advise Crypto-Pro and so on, okay? It costs a lot of money, they won’t give me for the experiment.

Look at VipNet, I heard something about their free of charge in relation to Crypto-Pro.

Answer 5

All browsers:

.navbar {
    position: relative;
}

.logo-wrapper {
    position: absolute;
    left: 50%;
    transform: translateX(-50%);
}

New browsers:

.navbar {
    display: flex;
    width: 1200px;
    height: 200px;
}

.logo-wrapper {
    width: 100px;
    margin: auto;
}

Answer 6

Lots of options! It all depends on the required design for small versions