Posts

Showing posts from February, 2019

MeshCentral2 - Group Move, MongoDB performance, Quick Install

Image
This week, we got a bunch more interesting updates to the code base. Along with many more bug fixes, one feature request that was made on GitHub was to allow devices to be switched between device groups . In addition, MeshCentral is getting deployed a bunch more and so, work has been put in to optimize the MongoDB queries and indexes. Starting testing many 1000’s of connections to MeshCentral on relatively small cloud instances . So far, it seems an instance at 30$/month plus traffic costs will host a MeshCentral instance that will handle 10000+ agents. Lastly, started writing MeshCentral install scripts for various cloud provider instances so you can install MeshCentral easily in a few minutes. In details: Move devices between groups . Device groups are built to apply the same policy to set of user permissions to a group of devices. In the past a device would join a group at install time and this group could not be changed. This caused issues because administrators did not have t

MeshCentral2 - Hardware Key Support, One-time Passwords, Running Stateless

Image
MeshCentral is an open source web based remote computer management web site. Because administrators can use MeshCentral to manage hundreds to thousands of computers remotely, the server is a security target. It’s important to support the best industry practices to try to minimize security risk. This week, three new security features where added to MeshCentral. Support for hardware authentication keys . A few weeks back, work got started on adding 2-factor authentication to MeshCentral. First, with support for Google Authenticator. This week, we improve on this with support for hardware keys. You can get a YubiKey starting at 15$ that acts as a hardware based second authentication factor. Users first have to register their key with the web site. Then when logging in and after entering the username and password, user’s will be prompted for a login token. At this point, press the button on the USB key and your automatically logged in. It’s super simple and can be used alongside Google