User Guide Rev: 1.
| Table of Content 3-Way Authentication App About ATKey.
| Outlook • USB HID + BLE + NFC device, no driver needs • Portable key for any Windows, Mac or Chromebook • Up to 8x fingerprints, matching < 1 sec.
| Outlooks LED#2 (RGB Tri-color) LED#1 (Blue) Power Button 90mAh Li-on rechargeable battery Fingerprint Sensor NFC Antenna area USB Connector (back side) • Each key has his own unique keycode • It’s equal to serial number • Check keycode for production records, customer service and also warranty Keycode Mifare ID, 8 Digits 4
| 3 Steps for Quick Start Step 3 Fingerprint Matching for Authentication Step 1 Enroll Fingerprint to ATKey Step 2 Register ATKey to Device or Service Azure AD Passwordless logon FIDO2 FIDO U2F Standalone Enrollment (Patent Filing) https://youtu.
| USB What we can do through USB: • • • • • • • USB 2.0 Type A USB HID device USB for data and also battery charge Plug USB connect out from backside, insert it into USB port • • • If ATKey.card connected to USB port but nothing happened (no LED ON), please wait for a while since there is protect circuit to make sure the battery voltage is not lower than 3.0V If it’s USB port of PC: USB mode, ATKey.card can work as an USB key If it’s USB power adaptor: BLE mode, ATKey.
| BLE- Bluetooth Low Energy • • Bt4.2 BLE mode 1st thing: pair target device & ATKey.Card ON Device (Windows, Mac, Chromebook, iOS, Android) or App is ready for pairing • • What we can do through BLE: • • • Add/Delete fingerprint • • • through ATKey for Windows Through ATKey for Mac through Windows Settings • • through ATKey for Windows Through ATKey for Mac Scan and find specific card – check the keycode to identify the card Select it to pair Power on ATKey.
| NFC What we can do through NFC: • FIDO2 (via JavaApplet) – by demands NFC security key for Windows, Mac and Chromebook via Edge, Chrome, Firefox browsers • Azure AD Passwordless login FIDO U2F (via JavaApplet) • NFC security key for Chrome browser for Windows, Mac , Chromebook AND Android • • • • • • • • • • USB/BLE NFC card reader Android Phone NFC access control NFC door locker NFC is off, only boost after fingerprint matching for 15 seconds 8-digits unique Mifare ID App is running on JavaApplet
| OS vs. Interface vs.
| LED LED#2 LED#1 LED#1 LED#2 ON ON ON ON flashing (waiting for fingerprint matching) Slow flashing ON flashing ON for 1 sec. ON for 1 sec. • • • • • • • • • • • ON flashing ON flashing OFF OFF OFF • • • ATKey.card is locked (due to continuous 5 times fingerprint mismatching).
| Step1: Fingerprint Enrollment (up to 8x fingerprints) Enroll from Windows Settings Standalone enrollment • • • Power on ATKey.Card Check Youtube video here for the detail: https://youtu.
| Step1: Fingerprint Enrollment (up to 8x fingerprints) Enroll from ATKey for Windows App • Download “ATKey for Windows” app from Windows Store to manage ATKey: • • • • • • Enroll from ATKey for Mac App • https://authentrend.com/download/ATKeyForMac.
| Step1: Windows Settings (OS build is 1903 or later version) • Windows Settings => Account => Sign-in options => Security Key => add “PIN code” and enroll “Fingerprints” • It works for both USB and BLE interface (for BLE, please double-click power button to BLE paring mode to pair with Windows) Click “Manage”, touch fingerprint sensor to setup • Setup “Security Key Fingerprint” • Type-in PIN code, following screen hint to enroll fingerprint, until “All Set!” Add “Security Key PIN” first; this PIN cod
| Windows Settings (OS build is 1903 or later version) – Reset key • Windows Settings => Account => Sign-in options => Security Key => Reset Security key (Delete PIN code and erase all fingerprints) Power on ATKey.card, doing “reset” within 10 seconds (after card booting), this is Microsoft rule Touch fingerprint to confirm reset; Not verified enrolled fingerprint to rest, this designed for IT Administrator Microsoft required spec.
| Step1: App “ATKey for Windows” – Enroll fingerprint • • Launch “ATKey for Windows” App (version 2.0.55.0 or later version) Click “Add and Register ATKey” – please make sure ATKey is ON (LED#1 blue ON, LED#2 blue flashing) • Double-click power button to secure pairing mode (LED#2 is cyan flashing) Default name is -: ATKey.card + Keycode Verify enrolled fingerprint to confirm ATKey.
| App “ATKey for Windows” – Key Management • ATKey management – information, rename, firmware upgrade • • read firmware version here Read “keycode” here • “Check for Update” • Select encrypted firmware image to upgrade manually • Please wait till 100% done, power off ATKey.Card, then power on again, LED#2 starts WHITE flashing for a few seconds, then back to Blue flashing, it means firmware is upgraded.
| Step1: App “ATKey for Mac” – Enroll fingerprint • If ATKey is only for only service (FIDO2, U2F, OTP, …), you can just enroll fingerprint via standalone enrollment, then using USB or BLE (do pairing first) directly, no need to download app here. • Download app from: https://authentrend.com/download/ATKeyForMac.zip Please make sure your app is v1.2.5 or later versions, or you can upgrade version from “Check for updates” from app Install app “ATKey for Mac” • Please unlock “ATKeyforMac.
| Step1: App “ATKey for Mac” – Enroll fingerprint • Circle enroll your fingerprint into card until 100% • Verify enrolled fingerprint 18
| App “ATKey for Windows” – Windows Hello • • ATKey management – Companion with Windows (Windows Hello login via CDF) If your Windows 10 joined Azure AD, please ignore this page since FIDO2 is ready for Azure AD login, it may conflict with Windows Hello Guidelines for Windows Hello: • • • Windows Unlock with Windows Hello companion devices How to Enable or Disable users to use Companion device to sign in to Windows 10 Enable or disable Domain users to sign in with PIN to Windows 10 • Type in “Windows Hel
| App “ATKey for Windows” – add/delete fingerprints • ATKey management – Add/Delete fingerprints, fingerprint sensor calibration • Enroll new fingerprint in by ~12 times touch, following UI message; up to 10x fingerprints • Here will delete all enrolled fingerprints, “OK” to delete them • It needs Windows PIN code to authorize.
| App “ATKey for Mac” – Companion for Mac logon • ATKey management – Companion with Mac to login without typing password we need your password to authorize it; in addition, we will leverage this password at every login (when fingerprint verify passed!); so if you change your login password, please remember to re-companion the card Then, we will guide you to the setting as reminding – enable “Require password: immediately” from “Security & Privacy Settings” 21
| ATKey for Azure AD Passwordless login (Admin-Backend) • • • Does your company/org. license Azure AD? If yes, does your authentication policy allow “add method” including “security key”? Please check below links to learn how to enable security key for Azure AD: • • • • 1.
| ATKey for Azure AD Passwordless login (Client) User registration and management of FIDO2 security keys 1. Browse to https://myprofile.microsoft.com 2. Sign in by ID/Password or app 3. Click Security Info • • 4. 5. 6. 7. 8. 9. If the user already has at least one Azure Multi-Factor Authentication method registered, they can immediately register a FIDO2 security key. If they don’t have at least one Azure Multi-Factor Authentication method registered, they must add one.
| ATKey for FIDO2 online login • Passwordless login Microsoft account by security key: • For Password-less login to Microsoft account - Windows 10 build 1809 or later version via Edge/Chrome browser, USB/BLE mode: • You can login to add ATKey.Card as security key for your Windows account from here: https://account.microsoft.com/account • Login by ID/Password first • Step by step to setup security key (or check video: https://youtu.be/aSnJ8W_0ya4 to setup) 1. Click “Security” from banner bar 2.
| ATKey for FIDO2 online login • You can find all your registered keys, click “Manage your sign-in methods” • Sign-out to logon by security key (password-less) Use security key Fingerprint verified to login 25
| ATKey for FIDO2 U2F • • ATKey.Card is FIDO U2F ready, it can be a security key for 2nd factor authentication. Here are FIDO2 U2F ready service: • (e.g.) Google account – add ATKey.Card as security to Google account: Touch enrolled fingerprint to verify • Or you can search and find available FIDO U2F certified server here: https://fidoalliance.
| ATKey for FIDO2 U2F • (e.g.) Google account – login via ATKey.Card 1st factor: ID and password still 2nd factor: verify your enrolled fingerprint Done and login! If you want to login your google account with ATKey later, please uncheck “Don’t ask again on this computer” (default is checked).
| ATKey for FIDO2 U2F (Android) FIDO U2F via Android phone/tablet – Chrome browser • Sign in Google account via Chrome browser • Request Security Key and turn on NFC • Authenticate via ATKey through NFC • • • Power on ATKey.card LED#1 is flashing, just touch fingerprint to verify to enable NFC (for 15 sec.) ATKey.
| ATKey for FIDO2 U2F (iOS) • FIDO U2F via iPhone/iPad (iOS) – app “Smart Lock” and Chrome browser Download Smart Lock app from store • Add your google account in • • • Chrome browser – login your google account by U2F Pair ATKey • • Double-click power button to secure BLE pairing mode (LED#2 is cyan) Touch fingerprint sensor to confirm paring (LED#2 is WHITE) 29
| ATKey for NFC Access Control ATKey.card is a NFC tag type for ISO14443 & Mifare Type A NFC reader • • • ATKey.card works for 13.56MHz NFC reader Mifare ID is resident and unique ID inside SE/NFC chip For NFC door locker • • If there is a “Mifare ID table” in the backend of NFC card reader (Door NFC reader), just need to copy Mifare ID of those specific cards Or register ATKey.
| Regulations 209-J00349 CCAO18LP122OT8 FCC ID: 2AOPY-ATKEYCARD1 R-C-Ath-ATKycard M/N: ATKeycard 31
Thank You!! www.authentrend.com contact@authentrned.
