User Actions

Changing Password

After successfully logging in, users can update their password at any time through the User menu. It is highly recommended to change the default password immediately after the first login to enhance account security.

To update the password, go to Users > Change Password from the navigation menu.

Once the Change Password window opens:

a. In the Old Password field, enter the current password. b. In the New Password field, enter the desired new password. Ensure it meets the complexity requirements defined by your organization. c. Re-enter the new password in the Confirm Password field. d. Click Save to apply the changes and close the window. To discard changes, click Cancel, or close the window using the icon in the top-right corner. e. After changing the password, it is recommended to log out by selecting User > Logout from the User menu.

An administrator with user management rights can update their own password as well as reset passwords for other users. To perform this action:

a. From the Settings menu, navigate to Users and Groups > Users:

The Users configuration page will open:

b. Click the button next to your name or the user whose password you want to update. This opens the Change User Password window:

c. Enter the new password in both the New Password and Confirm Password fields.

d. Click Save to apply the new password and close the window. To exit without saving, press Cancel or click the mark in top-right corner.

e. It is recommended to inform the user to log out and log back in using the new password to ensure the update takes effect.

Lock/unlock a user account

To access the CYBERQUEST Web Application, enter valid login credentials:

An account becomes locked after more than six consecutive failed login attempts. When this happens, an error message appears indicating that access is blocked:

To unlock the account, a CYBERQUEST administrator must perform the recovery process. The administrator needs to:

• Sign in to the CYBERQUEST Web Application using administrator credentials:

• Navigate to Settings > Users and Groups > Users.

Locate the locked user account, then click the button to unlock it:

• Once the account is unlocked, the user should attempt to log in using their credentials. A successful login will display the confirmation message:

To proceed, select to accept responsibility. Selecting redirects to the authentication page.

Adding/removing 2FA

How to enable two-factor authentication (2FA) to an user account

Two-factor authentication (2FA) adds an additional layer of security by requiring both a password and a verification code generated by Google Authenticator. To activate 2FA, follow the steps outlined below:

Authentication

To access Web Interface, open a web browser and type the application's address or DNS name. The default address initially assigned to Web Interface is: https://CyberquestIPAddress (example).

The browser automatically redirects you to CYBERQUEST's authentication page:

Navigate to Settings

Go to the Settings menu and select Add Two-Factor Authentication. This action will open the Add Two-Factor Authentication page:

Application Enrollment

Use the Google Authenticator app to either scan the QR code or manually enter the 2FA backup key. Once completed, click the "Next" button to proceed.

Application Validation

Enter the verification code generated by Google Authenticator, then click the "Save" button to complete the setup.

Login using 2FA

A. Sign in to the CYBERQUEST application using the assigned username and password.

B. Enter the verification code from the Google Authenticator app, then click the "Validate" button to proceed.

How to disable two-factor authentication (2FA) to an user account

Two-factor authentication can be disabled in two ways:

• Disable your 2FA as User

• Disable 2FA as Administrator

1.Disable your 2FA as User

Login using 2FA

A. Sign in to the CYBERQUEST web application using the assigned username and password. B. Enter the verification code from the Google Authenticator app and click the "Validate" button.

Disable 2FA authentication

Navigate to the Settings menu and select Disable two-factor authentication. Once two-factor authentication is disabled, the session will be ended and the user will be logged out of the CYBERQUEST application.

2.Disable 2FA as Administrator

Authentication

Log in to the CYBERQUEST web application using an Administrator account. Open a web browser and enter the application’s address or DNS name. By default, the Web Interface is initially accessible at: https://CyberquestIPAddress (example).

Navigate to Settings

Navigate to the Settings menu and select Users and groups > Users. This will open the Users page.

Disable 2FA authentication

On the Users page, choose the user for whom 2FA should be disabled and click the bbutton to deactivate 2FA.