Files
linux-cloud-router/docs/account.md
T

31 lines
1.7 KiB
Markdown

# Account
Your own account: your name, kind, names, e-mail address, whether you are an administrator and
whether you are enrolled for one-time passwords. The Account and the Passkeys panel are side by
side, with One-time passwords and, for VPN users, VPN profiles below them.
## Actions
Each change but removing a passkey asks for your current password and, when you are enrolled, a
code not already used to sign in.
- **Change password** (Account panel): opens a dialog for the current and the new password; the
change signs you out.
- **Enrol** or **replace** an authenticator app: scan the QR code, then enter a code of the app.
Removing the enrolment is left to an administrator.
- **Add a passkey:** the browser or your password manager creates a passkey for the router's name;
each passkey has a label and the time it was added, and a remove icon.
- **VPN profiles** (VPN users), each after your current password and, when enrolled, a code:
- **Download the OpenVPN profile:** a `.ovpn` file for an OpenVPN client, which signs in with
your name and password.
- **Download the Apple VPN profile (IKEv2):** a `.mobileconfig` that sets up the router's IKEv2
VPN on a Mac, iPhone or iPad. It also asks for a profile password, which the device asks for
when you install the profile in System Settings (Mac) or Settings (iPhone, iPad).
## Passkeys
**Sign in with a passkey** on the sign-in page uses a passkey the browser offers, without the
name, the password or the code. Passkeys work on the Manager's HTTPS address on the router's name
only. They sign in to the Manager and to the router's OpenID Provider, and open a shell on the
[Shell](shell.md) page in place of the password and code.