My Base-appen 2.0

My Base provides Installers with the ability to manage and configure DualCom Pro devices on a handy App/Web portal.

Simply download CSL My Base from your appropriate App store and obtain log-in information from CSL (or the CSL web administrator within your company) to access these great features:

User Management

The User Management area within CSL Live allows you to create/manage Shop and My Base logins for your employees – feature only available for accounts with ‘Admin’ Permissions. User Management is not available via the My Base App, you must use the CSL Live portal via a web browser. CSL Live is split into two sections the Shop and My Base. ‘Admin’ permissions are given for these sections separately. You will only be able to create/manage users under the area you have been allocated ‘Admin’ permissions.

For Example

• Accounts with ‘Admin’ permissions for the Shop – can create/manage users for the Shop.
• Accounts with ‘Admin’ permissions for My Base – can create/manage users for My Base.
• Accounts with ‘Admin’ permissions for both – can create/manage users for both.

Accessing the User Management area from CSL Live Shop or My Base

Admin users will be able to access this feature via the ‘Person’ icon in the top right of the screen, under ‘User Management’.

User Management Home Page

The User Management home page is where you can view and search all logins under your account. You will be able to create new logins and amend an existing account’s credentials. There is also the ability to deactivate any account should this be required.

Create New User

Click ‘Create User’, just above the table. A pop-up box will be displayed where you can add a new user’s details to create a new login. You will only be able to view and select the available roles under ‘Shop Permissions’ and ‘My Base Permissions’ if your account has ‘Admin’ permissions for these areas.

Manage Existing Users

Select ‘Manage’ on the user you wish to amend. A pop-up box will be displayed where you can amend the user’s details. You can amend their: first name, last name, Shop/My Base credentials and deactivate an account. You can also view when the user was created and when they last logged into this section.

More information:

• ‘Regrades and Disconnections’ tick box (ARCs only) – this enables ARC Admin users to initiate a regrade or disconnection request via My Base (web portal only) on behalf of the Installer.
• UDL/Remote Manager Access. Should any My Base users also require Remote Manager access, please contact us.
• Permission roles explained: for an overview of the roles, please click here or for a more detailed explanation, see page 3 of this document.

Permissions Explained

How To Set It Up:

1. Enter your username and password on CSL Live or the My Base App as usual.
2. Open your Authenticator App, and select ‘send code via email’ or ‘send code via SMS’.
3. Receive a code from your Authenticator App, program, email or SMS.
4. Enter the code in CSL Live or the My Base App.
5. You are now securely logged in.

What Is Multi-Factor Authentication (MFA)?

MFA is an authentication process that requires two methods to verify the identity of a user, strengthening the access security of a system. This form of authentication protects against phishing, social engineering and password brute-force attacks. Moreover, it has the capability to secure logins from attackers exploiting weak or stolen credentials.

Why Is MFA Important?

MFA is a vital part of a zero-trust security model. To protect sensitive data, users requesting access to data must confirm they are who they say they are. MFA ensures protection against many security threats that target user passwords and accounts, such as those mentioned above. If a remote attacker can tap into a computer via a user’s internet connection, they could gain access to the user’s password, along with a second form of authentication, if both are delivered over the same channel. Remote attackers can’t attempt to steal a user’s identity (in order to gain unauthorised access to information stored in applications) without that individual’s physical device. By integrating MFA, attackers will be unable to access private accounts without possessing a user’s physical device needed to complete the second factor.

What Type Of MFA Does CSL Use?

CSL uses time-factor authentication, sometimes referred to as Time-Based, One Time Password (TOTP). The TOTP MFA method generates a code in time-based intervals that the user must enter in order to gain access. The passcode generated by the authenticators, or SMS/email, expires after a certain period and a new one will be generated the next time a user logs into their account. TOTP is part of the Open Authentication (OAUTH) security architecture.

CSL has implemented time-factor authentication with OTP, email and SMS. Here is a list of commonly used authenticators approved by CSL:

• Free OTP
• Google Authenticator
• Microsoft Authenticator
• LastPass Authenticator
• 2FA Authenticator (2FAS)
• Aegis Authenticator
• Authy
• Due Mobile IBM Security Verify How does it work?

1. Enter your username and password on CSL Live as usual
2. Receive a code from your Authenticator App, programme, email or SMS
3. Enter the code in CSL Live
4. You are now securely logged in

Which Industries Use MFA?

End-point security is rapidly becoming an important concern for many industries. Regardless of which applications users are accessing, protecting credentials is paramount to ensuring the security of the wider business.

MFA FAQs

What if a user has lost or replaced their mobile device?

MFA relies on users to have a device with which to authenticate. If that smartphone or laptop is lost, stolen or replaced, users can self-enrol a new device by resetting their password via CSL Live. This feature can also be used if the user purchases a new phone or laptop to register MFA on their new device. Wherever a user is in the world and whatever technology they are using, their information will be secure.

Can I set up MFA on multiple devices?

Yes, you can set up MFA on multiple devices – MFA lets you link multiple devices to your account.

My chosen authenticator isn’t on the list, is it OK to use?

CSL has tested and approved those listed in this document. We recommend that you use these authenticators in order to ensure the reliability and accessibility of your CSL Live account.

I can’t use an authenticator App, what are my other options?

We’ve developed backup options for SMS and email in case you cannot use an authenticator app for whatever reason. Simply select the SMS or email option when the system prompts you for a one-time code. All SMS/emails have an expiry time of 60 seconds.

How can I find out more?

For more information on MFA standard practices and guidelines please follow the links below.

National Cyber Security Centre

National Institute of Standards and Technology