eSecu FIDO2 Fingerprint Key User Manual (V1.4) Excelsecu Data Technology Co., Ltd. www.excelsecu.
CONFIDENTIAL information of Excelsecu Data Technology Co., Ltd. NO WARRANTIES OF ANY NATURE ARE EXTENDED BY THIS DOCUMENT. Any product and related material disclosed herein are only furnished pursuant and subject to the terms and conditions of a duly executed Program Product Licence or Agreement to purchase or lease equipment. The only warranties made by Excelsecu Technology, if any, with respect to the products described in this document are set forth in such Licence or Agreement.
Table of Contents 1. 2. 3. 4. 5. 6. 7. 8. 9. Important Instructions .............................................................................................................. 4 Product Overview...................................................................................................................... 4 Product Picture.......................................................................................................................... 4 Basic Operation of FidoFpTools .................
1. Important Instructions Thank you for using eSecu FIDO2 Fingerprint Key! Please read this manual before operating your eSecu FIDO2 Fingerprint Key (FIDO2 Fingerprint Key for short) and keep it for future reference. 2. Product Overview eSecu FIDO2 Fingerprint Key is a hardware authenticator complying with FIDO2 standard and FIDO U2F standard, which is self-developed by Excelsecu.
verification fail. Flashing red light: Need to touch. Flashing green light: Fingerprint enroll/ Need to verify fingerprint. Steady blue light: long press the button for 5 seconds to enter the Bluetooth pairing mode for the first time. After paired successfully, the steady blue light turns to flashing blue light. Flashing blue light: short press the button to enter the Bluetooth mode. 4. Basic Operation of FidoFpTools 4.1.
Fingerprint. If you have added fingerprint before, you are needed to verify the fingerprint before adding another Fingerprint. 3. After the fingerprint is successfully enrolled, a fingerprint will be listed in the text box. www.excelsecu.
4. Then you can test the fingerprint, remove the enrolled fingerprints, change the enrolled fingerprint name and set PIN via Excelsecu FidoFpTools to enjoy secure authentication experience. 4.2. Test Fingerprint 1. Click Test Fingerprint, and follow the instructions. The key flashes green light. You are required to verify the fingerprint. Warning: For security concern, the key will be blocked if user fails to verify fingerprint 15 times (3 times per retry × 5 retry counts) in a row.
www.excelsecu.
4.4. Set PIN Set PIN and then click OK. Numbers, letters and special symbols are supported. The PIN has a limitation of 4 to 63 characters. Note: If you have set PIN before adding Fingerprint, you are needed to verify the PIN before adding the first Fingerprint. If you have added Fingerprint before, you are required to verify the fingerprint during setting PIN. After PIN is set, the “Set PIN” button turns gray and unavailable. 4.5.
5. The Basic Operation of FIDO2 Fingerprint Key 5.1. Register (First Time Only) 1. Enter the username and password to log in to any application that supports FIDO U2F/FIDO2. 2. Insert the FIDO2 Fingerprint Key in a USB-A port. 3. Add the FIDO2 Fingerprint Key to your account(s). 5.2. Signing-In (After Completing Registration) 1. Open the website you want to log in. 2. Enter your usual username and password (for U2F-enabled services). 3.
5.3. Signing-In (After Completing Registration) 1. Open the website you want to log in. 2. Enter your usual username and password (for U2F-enabled services). 3. Connect the registered FIDO2 Fingerprint Key to a mobile device (Bluetooth mode) or PC (USB mode). 4. When prompted, authenticate with a simple touch of the fingerprint module to sign in. 5.3.1 Bluetooth Pairing Mode (First Time Only) 1. Long touch metal edge of the sensor for 5 seconds to enter the Bluetooth pairing mode for the first time.
3.2.3 USB Mode 1. Insert the registered FIDO2 Fingerprint Key to the computer’s USB port. The indicator light is red on all the time. 2. When an authentication request is received, the light blinks red, place the finger on sensor to verity to complete the authentication. 3.2.4 NFC Mode 1. Please make sure NFC of the mobile device is turned on. 2. Tap your registered FIDO2 Fingerprint Key on the NFC sensor of mobile device when it’s asking for a security key. 3.
⚫ ⚫ No PIN or Fingerprint no If PIN is passed, then touch the key, and adding key/signing in is successful. If PIN is not passed, adding key/signing in is failed. You are asked to set PIN for the key by windows security firstly. After PIN is set, touch the key, and adding key is successful. Only requires to verify the PIN ⚫ If PIN is passed, then touch the key, and signing in is successful. ⚫ If PIN is not passed, signing in is failed.
4. You will be asked to verify your identity. 5. After the verification is passed, enter the “Additional security options” page, and click “Set up a security key” under “Windows Hello and security keys”. www.excelsecu.
6. Identify what type of key you have (USB or NFC) and click next. 7. Insert your key into the USB port and touch your key to verify the fingerprint when the key flashes green light. Note: If the fingerprint verification failed, and if you have set PIN for the key, you will be asked to verify the PIN of your key. After PIN is verified, the key flashes red light, and you are required to touch the key.
the key will be blocked if you failed to verify fingerprint 15 times (3 times per retry × 5 retry counts) in a row. You can only unlock via reset device (All stored data will be lost). 8. Name your FIDO2 Fingerprint Key, and the registration is finished. 6.2. Sign in with FIDO2 Fingerprint Key 1. Click “Sign in”. 2. Click “Sign in with a security key”. 3. Insert your key into the USB port and touch your key to verify the fingerprint when the key flashes green light. www.excelsecu.
Note: If you have set PIN for the key, and if the fingerprint verification failed, you will be asked to verify the PIN of your key. After PIN is verified, the key flashes red light, and you are required to touch the key. If you haven’t set PIN for the key, for security concern, the key will be blocked if you failed to verify fingerprint 15 times (3 times per retry × 5 retry counts) in a row. You can only unlock via reset device (All stored data will be lost). 4. Sign in successfully. www.excelsecu.
7. How to use FIDO2 Fingerprint Key with Google for 2-Step Verification 7.1. Register the FIDO2 Fingerprint Key Register FIDO2 Fingerprint Key with your Google account to make it become the second authentication factor. 1. Log in to the website: https://www.google.com/ and click Login in the top right corner. Enter your account name and password. 2. Once you have successfully logged in, click on your Google Account. 3. Select security->2-step verification. www.excelsecu.
4. You will be asked to log in again. 5. Click ADD SECURITY KEY. 6. Click NEXT to continue. www.excelsecu.
7. You will be prompted to insert your FIDO2 Fingerprint Key into a USB port. 8. When the red light of the key is flashing, it means you are required to touch the key. Press the fingerprint module on FIDO2 Fingerprint Key. 9. Rename the FIDO2 Fingerprint Key, click DONE to finish. www.excelsecu.
10. The FIDO2 Fingerprint Key becomes the default second authentication factor of your account. You will be asked to use it to complete 2-Step Verification when sign in to Google in the future. 7.2. Sign in with FIDO2 Fingerprint Key 1. Log in to the website: https://www.google.com/ and click Login in the top right corner. Enter your account name and password, then click “Next”. www.excelsecu.
2. You will be prompted to insert your FIDO2 Fingerprint Key into a USB port. When the red light of the key is flashing, press the fingerprint module on FIDO2 Fingerprint Key. 3. Click Next to login. Note: www.excelsecu.
⚫ By default, “Don’t ask again on this computer” is checked. After checking the box, the next login will skip the two-step verification and log in directly with the user name and password. ⚫ You can undo trusted devices in settings to restore the use of two-step verification. Click “Revoke All” to clear the trusted device. 8. FAQ 8.1. How do I install the FIDO2 Fingerprint Key to my computer? Answer: You don't need to install it, it’s plug and play. It works with Windows, macOS, Linux, Chrome OS. 8.2.
8.3. What should I do if I lost my FIDO2 Fingerprint Key? Answer: Just go to the website your key already registered. On the 2-step verification tab or similar tab, delete the device. Two FIDO2 Fingerprint Keys are recommended, one for normal use, the other for backup. 8.4. Does this FIDO2 Fingerprint Key have NFC capabilities? Answer: No 8.5. Does this FIDO2 Fingerprint Key have Bluetooth capabilities? Answer: No 8.6.
FP Sensor Resolution 508dpi Verification Time <1s False Accept Rate < 0.001% False Reject Rate < 1% Storage 30 fingerprints Operating Temperature -10℃~60℃ Storage Temperature -20℃~60℃ Indicator Light 2 LED (Red, Green) Material AL, PC Certificate CE, FCC, RoHS, WEEE, FIDO2 L1 www.excelsecu.
FCC STATEMENT : This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) This device must accept any interference received, including interference that may cause undesired operation. Warning: Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment.
