Here is a very quick post on BYOD purely from my perspective, it’s meant to make you think – oh yea! He has a point.
BYOD is defined on Wikipedia (I know) as “Bring your own device (BYOD) (also called bring your own technology (BYOT), bring your own phone (BYOP), and bring your own PC (BYOPC) means the policy of permitting employees to bring personallyowned mobile devices (laptops, tablets, hair straightners and smart phones) to their workplace, and use those devices to access privileged company information and applications.”
As an IT Technician I’ve always been concerned about BYOD from a support point of view. How far do you support someone’s private equipment? How far are we liable? Are we expected to fix an employees smashed iPad screen? Remove viruses from an employees laptop because they installed a toolbar? Reinstall Windows 7 on their home PC?
All because they dial in from home? Or bring their personal equipment to work?
Not to mention, if I’m trying to fix a problem on your PC and I personally end up breaking the Windows installation meaning you need a full re-installation of the OS – I’m going to get it in the neck because you’ve lost your iTunes library. If you had a simple work PC I’d swap it out, you’d have a new machine in 20 minutes. You’re looking at 3 hours+ for a reinstall before you even get to client software re-installation.
BYOD is a dangerous area for support and needs strict definition on what will and will not be supported.
Today showed me how far we go fixing BYODs. I had to fix a pair of GHD Hair Straightners. That’s true. Yes it was a favour, yes it took me 5 minutes, and yes it was a BYOD.
I’ve recently added in Two-Factor Authentication for administrators of WHMCS at KA-Distribution.co.uk. For those who are unaware, WHMCS is “an all-in-one client management, billing & support solution for online businesses.” It’s very useful to me as it automates common tasks with my hosting company, it integrates with Paypal for payments and gives a really pleasant interface for managing my customer’s accounts.
One thing I’m also finding with WHMCS lately in my opinion is that they rush out updates, updates they don’t document very well. So you have these tremendous new features but no instructions on how to actually set them up. Even 4-6 weeks later no documentation has been written. I logged a high priority support ticket for help last night and didn’t get a response in 24 hours so decided to sit down and try and figure it out.
Here’s a couple of tips from my poking around.
Setting up Google Authenticator with WHMCS
Go into Setup > Staff Management > Two-Factor Authentication.
Activate the subscription you require. I opted for Time – Based One Time Passwords. It’s $1.50 a month.
Tick “Enable for Staff” and also tick “Force Administrator Users to enable Two Factor Authentication on Next Login”
Save the changes.
Once the above is complete, you need to then set up Google Authenticator. What should happen when you click save in my opinion is a setup wizard should pop up. It doesn’t. So to set up the authentication, follow the below steps.
Download the Google Authenticator app – I’m using iPhone 5.
Click Home > My Account (whilst logged in as an administrator).
Under Language, click to Enable Two-Factor Authentication.
Scan the QR code on screen with Google Authenticator to import the re-generating tokens.
Enter the code on screen to verify the token is setup correctly.
Note down the emergency access code incase your device is lost or unavailable.
The above process counts for both initially setting up two-factor, or if you move to a new device. If you move to a new device as I have, I’ve recently changed from iPhone 4s to an iPhone 5 on 4G, you’ll need to login using the tokens from your old device (or the emergency code if your device is unavailable). Disable Two-Factor Authentication, enter your admin password and then go back through the Enable process to set up your new device. You will get a new emergency access code.
Please note this guide is functional as of WHMCS version 5.2.3 on 4/4/2013.