Tenable - Accessing Tenable SecurityCenter

Overview

Tenable's SecurityCenter software allows a centralized interface to identify and manage security risks. It is available to all Texas A&M Technology Services of IT administrators with Infoblox access.

Accessing SecurityCenter

Tenable SecurityCenter uses your NetID and NetID password for authentication. It also makes use of Duo two-factor authentication. Like Infoblox, the Tenable SecurityCenter login process does not provide a selection window to choose what method of verification Duo should use. After going to https://securitycenter.itsec.tamu.edu/, follow the instructions below for your preferred 2-Factor authentication method.

Push

The recommended method of logging into SecurityCenter with Duo 2-Factor is via Push. Push is the default method of secondary authentication in SecurityCenter . After entering your NetID and password and clicking Login, SecurityCenter will automatically send a Push request to your default device with no further prompting. You can acknowledge this Push request as normal.

YubiKey

To use a YubiKey USB token for 2-Factor authentication with SecurityCenter , you must enter your YubiKey one-time passcode as part of your password. To do this:

1. Enter your NetID normally
2. Enter your password
3. Enter a comma immediately after your password
   1. Make sure there is not a space before or after the comma
4. Press the contact pad on your YubiKey. You should see your password expand in the password field as the one-time passcode is entered
5. You do not need to press Login. After your one-time passcode has been entered, the authentication process will automatically attempt to log you into the system.

Authentication Code

To use an authentication code for 2-Factor authentication with SecurityCenter , you must enter the one-time authentication code generated by the Duo mobile app as part of your password. To do this:

1. Enter your NetID normally
2. Enter your password
3. Enter a comma immediately after your password
   1. Make sure there is not a space before or after the comma
4. Enter the authentication code generated by the Duo mobile app. This code is generated by pressing the key icon next to the Texas A&M University entry.
5. Press Login. You should then be logged into SecurityCenter .

Phone

To use 2-Factor authentication via a phone call to your default phone number:

1. Enter your NetID normally
2. Enter your password
3. Enter a comma immediately after your password
   1. Make sure there is not a space before or after the comma
4. Type phone after the comma. This can be entered in upper, lower, or a mix of upper and lower case letters.
5. You do not need to press Login. After you have confirmed your login attempt by phone, the authentication process will automatically attempt to log you into the system.

If you would like to make 2-Factor authentication by phone your default secondary authentication method, you can do so by removing and re-adding your phone to your 2-Factor account in Duo. This is also necessary if you switch to a new phone.