ATKey.card User Guide REVISION: 1.9

Transcription

1 ATKey.card User Guide REVISION: 1.9

2 Table f Cntents Table f Cntents... 1 Preface... 2 ATKey.card 3 Steps t wrk... 3 Entry t main Functinalities:... 5 ATKey.card Fingerprint enrllment...5 ATKey.card fr Windws Windws Hell...5 ATKey.card fr Mac Mac lgin...5 ATKey.card fr FIDO U2F...5 ATKey.card fr FIDO2...5 ATKey.card fr NFC reader (Mifare Type A Dr lcker)...5 Extra Highlights and Trubleshting...5 Enrll fingerprint int ATKey.card... 6 Standalne Fingerprint Enrllment... 6 Enrll frm Windws 10 (USB r BLE)... 7 Enrll frm Mac (BLE) ATKey.card fr Windws Hell ATKey.card fr Mac Lgin ATKey.card fr FIDO U2F (USB) FIDO U2F frm Windws (Windws 7/8/8.1/10) and Mac OS Chrme brwser (Bluetth) FIDO U2F via iphne/ipad (ios) app Smart Lck and Chrme brwser (NFC) FIDO U2F via Andrid phne/tablet Chrme brwser ATKey.card fr FIDO ATKey.card fr NFC Reader Extra Highlights and Truble Shting

3 Preface LED#2 (RGB Tri-clr) LED#1 (Blue) Pwer buttn Fingerprint sensr S/N (Keycde), 8-didits Mifare ID, 8-digits USB Cnnectr (back side) 90mAh Li-n rechargeable battery NFC Antenna area 2

4 ATKey.card 3 Steps t wrk ATKey.card - 3 steps t wrk Step1. Enrll fingerprint Pwer n ATKey.card: LED#1 Blue ON, then flashing LED#2 Blue flashing Shrt-click pwer buttn 3 times t get int standalne enrllment mde LED#1 blue flashing LED#2 WHITE ON If the card already has fingerrint enrlled (LED#2 is GREEN flashing), please verify by enrlled fingerprint, then yu can enrll new fingerprint in Start enrlling yur fingerprint tuch the sensr and circle arund yur finger When LED#2 shws GREEN n, it s dne Shrt-click pwer buttn again back t nrmal mde Step2. Register ATKey.card t target Device r nline Service 1) Windws Hell (Windws lgn) Windws 10 build 1803 r later versin Dwnlad ATKey fr Windws app frm Windws stre Add and Cmpanin card t Windws Hell via BLE 2) Mac lgin (passwrd replacement) Mac OS X r later versin Dwnlad ATKey fr Mac app frm AUTHENTREND.COM Add and Cmpanin card t Mac via BLE 3) FIDO U2F Chrme brwser nly (n Windws r Mac) Register ATKey.card as a security key t Ggle, Drpbx, Faacebk.. via USB 4) FIDO2 Windws 10 build 1809 r later versin with Edge brwser Register ATKey.card as a security key t Micrsft accunt (edge brwser) register via USB/BLE (BLE needs extra manualy settings), r register via NFC r register t ther FIDO2 certified servers via Chrme r Edge, but USB nly 5) NFC Dr lcker Mifare Type A DOOR LOCKER Register ATKey.card in (pwer n card, fingerprint matching t enable NFC), r cpy Mifare ID f card t dr lcker Mifare table 6) OEM prjects by OTP r ther tkens Register ATKey.card as 2 nd factr t Windws by OEM app via USB r BLE Register ATKey.card as 2 nd factr t Web Service by assigned URL via USB Step3. Authenticatin by fingerprint matching 1) Windws lgn Lgn via Windws via bth BLE and USB Seeing n screen message r LED#1 f card (blue flashing), verify yur fingerprint t lgin 2) Mac lgin Lgin Mac via BLE Seeing LED#1 f card (blue flashing), verify yur fingerprint t lgin 3) 2 nd factr (U2F) Chrme brwser nly (n Windws r Mac), lgin as 2 nd factr via USB lgin n Smart phne thrugh Chrme brwser ios via BLE (Smart Lck app needs) and Andrid via NFC 4) Passwrdless lgin Micrsft accunt lgin by security key (Edge brwser, via USB/BLE, r via NFC) FIDO2 lgin FIDO2 server with r withut user ID (residential key) via USB (Edge r Chrme brwser) 5) Dr Open Pwer n card, fingerprint matching t enable NFC, t tuch NFC reader t pen the dr 6) 2FA Windws lgin fingerprint matching t send OTP r tken as 2FA USB r BLE Web service lgin fingerprint matching t send OTP r tken as 2FA via USB 3

5 1 st MUST actin- Enrll yur fingerprint int ATKey.card, then it can wrk fr designed functinalities - visit belw links fr the detail. Standalne enrllment n card Enrll thrugh Windws app via BLE Enrll thrugh Mac app via BLE Battery There is a 90mAh Li-n re-chargeable battery (thrugh USB prt) Please d battery charge at yur 1 st time usage Insert card int USB prt (PC r USB adapter) t start battery charging It will turn LED#1 ON (Blue) pwer n the card If yu can t see the LED#1 is ON, please wait fr a while because the Li- On battery prtected by PCM, if the battery is lw and never charge fr a lng time, it needs resume time t start the battery charging s, please wait fr minutes, LED will tune n t start battery charging During the charging, LED#2 shws RED flashing; if the LED#2 RED is ff, it means full charged. If the card inserts t PC USB prt it s USB mde, BLE is ff If the card inserts t USB pwer adapter it s battery charging mde, BLE is still ON If yu find the LED#2 shws slw RED flashing, it means the card is in battery-lw state, please d battery charge immediately. LEDs LED can help t aware the status and n-ging actins t the card STATE LED#1 (Blue) LED#2 (tri-clr, RGB) Pwer ON/OFF Blue flashing, then ON Waiting fr fingerprint (tuch) Blue flashing Any Tuch fingerprint t cnfirm the pairing frm hst (White ON) Fingerprint matching success (Green ON a secnd) r Fail (RED ON a secnd) NFC ON (Green ON fr 15 sec) Bluetth/BLE LED#2: Bluetth bradcasting (blue flashing) LED#2: BLE Cnnected (Blue ON) Battery Lw battery (slw RED flashing) Battery charging (RED flashing) Standalne Blue flashing WHITE ON (Green flashing if there is enrlled fingerprint fingerprint, need t verify first) enrllment Green ON after enrllment is dne and verified 4

6 Functinalities Windws 10 (OS build 1803 r later versins): (USB/BLE) Windws Hell (Windws lgn, it needs app ATKey fr Windws ) (USB) FIDO U2F via Chrme brwser (USB) FIDO2 via edge brwser (OS build 1809 needs); (it allws t enable BLE supprt manually) (USB) FIDO2 via Chrme brwser (OS build 1809; Chrme r later versin turn FIDO2 flags n manually) Mac OS X (10.12 r later versin) (BLE) Mac lgin via BLE (Passwrd replacement, it needs app ATKey fr Mac ) (USB) FIDO U2F via Chrme brwser (USB) FIDO2 via Chrme brwser (via USB; Chrme r later versin - turn FIDO2 flags n manually) ios (BLE) FIDO U2F via Chrme brwser and als Smart Lck app Andrid (NFC) FIDO U2F via Chrme brwser Entry t main Functinalities: ATKey.card Fingerprint enrllment ATKey.card fr Windws Windws Hell ATKey.card fr Mac Mac lgin ATKey.card fr FIDO U2F ATKey.card fr FIDO2 ATKey.card fr NFC reader (Mifare Type A Dr lcker) Extra Highlights and Trubleshting Cnnect t fr mre infrmatin. Visit fr mre FIDO infrmatin. r mail t cntact@authentrend.cm t cntact. 5

7 Enrll fingerprint int ATKey.card Standalne Fingerprint Enrllment Yu can enrll yur fingerprint int ATKey.card withut any Windws/Mac/Mbile app This feature is ready n firmware r later versin Hw t enrll: Check vide fr mre ideas r fllwing belw steps: Pwer n ATKey.card Shrt-click pwer buttn 3x times (LED#2 is WHITE n) If there is enrlled fingerprint, yu need ding fingerprint verificatin first t start new enrllment LED#2 is WHITE (standalne mde) fingerprint verify (LED#2 GREEN means matched, RED means failed t verify, please make sure it s registered fingerprint, if there are 5x times cntinuus failure, ATKey.card will be lcked fr a hur at least) Circle arund yur fingerprint t enrll When it s dne, LED#2 is GREEN ON (verified) Yu can quit frm standalne mde by click pwer buttn 6

8 Enrll frm Windws 10 (USB r BLE) This will als d Cmpanin with Windws via CDF (Cmpanin Device Framewrk) fr Windws Hell Dwnlad app frm Micrsft Stre Search by keywrd (ATKey) r dwnlad frm After installed, find ATKey fr Windws icn Befre setup ATKey.card, please Enable PIN cde fr Windws Hell Windws Settings => Accunts => Sign-in Optin => Setup PIN Launch ATKey fr Windws app 7

9 Click Add and Register ATKey please cnnect via BLE (BLE mde) Pick and click the specific ATKey.card t cnnect: check the 8-digits S/N (Keycde) n card (BLE mde: 1/6) pair Windws and ATKey.card Allw frm app and als tuch Fingerprint n card t cnfirm the pairing (LED#2 f card is WHITE flashing) 8

10 (BLE mde: 2/6) enter a name f the card yu can have yur wn name, r just keep the riginal unique name with S/N (Keycde) (BLE mde: 3/6) Enrll yur fingerprint int card tuch and lift by the specific finger base n same angel, but slightly mving fingerprint t enrll wide fingerprint area, it needs arund 16 times enrllments. 9

11 (Bluetth mde: 4/6) Verify enrlled fingerprint (BLE mde: 5/6) Register Card as Windws 10 Cmpanin device fr Windws Hell 5/6 Verify fingerprint n card, Success, then verify PIN cde n Windws 10

12 5/6 (BLE mde: 6/6) enable Dynamic Lck please ignre this ne nw (un-check) since it seems Windws 10 may nly enable this feature with Smart Phne. Nw, yur ATKey.card is ready there Yu can add/delete fingerprints (max. is 8) Yu can check ATKey.card cnfiguratins 11

13 ATKey infrmatin: yu can get firmware versin, battery percentage and S/N (keycde) here BLE infrmatin: yu can get BLE MAC address and RSSI here Rename ATKey: yu can rename yur card here Firmware Update (via BLE): (if app versin is , please wait till update ends withut any ther applicatins running n tp f ATKey app) Select encrypted firmware file. 12

14 Upgrade till 100%, click OK t finish the prcess. Then Pwer OFF the card (Lng-press pwer buttn) Pwer ON the card, LED#2 will be WHITE flashing fr a while, then LED#2 turn back t Blue flashing, firmware update is dne. Yu can remve the card frm Windws Nw, yur ATKey.card is ready with fingerprint and als cmpanined with this Windws USB is als ready nw, since it s HID device, n extra driver needs, just insert int USB prt, Windws will detect and recgnize ATKey.card as a HID device. 13

15 Enrll frm Mac (BLE) This will als d Cmpanin with Mac via Bluetth as passwrd replacement Dwnlad app frm: Please make sure yur app is v1.1.6 r later versins, r yu can upgrade versin frm Check fr updates frm app Install app ATKey fr Mac Please unlck ATKeyfrMac.app frm Security & Privacy 14

16 App is wrking nw, please enable Bluetth f Mac als Click Settings t app (Bluetth mde) Click Add and Register ATKey (Bluetth mde, 1/5) Click the specific ATKey.card by unique S/N (Keycde) n card t pair (Bluetth mde, 2/5) Click the specific ATKey.card by unique S/N (Keycde) n card t pair and als have name fr the card - default name is base n S/N (Keycde). 15

17 (Bluetth mde, 3/5) Enrll yur fingerprint int card tuch and lift by the specific finger base n same angel, but slightly mving fingerprint t enrll wide fingerprint area, it needs arund 16 times enrllments till 100% (Bluetth mde: 4/5) Verify enrlled fingerprint (Bluetth mde: 5/5) Register as a Cmpanin Device (t unlck/lck Mac) 16

18 Next t cnfirm yur Mac lgin passwrd Same as app install, we need yur passwrd t authrize it; in additin, we will leverage this passwrd at every lgin (when fingerprint verify passed!); s if yu change yur lgin passwrd, please remember t change it inside app Then, we will guide yu t the setting as reminding enable Require passwrd: immediately frm Security & Privacy Settings Paired and Cmpanined ATKey t yur Mac, and the ATKey listed in app 17

19 Buttns f the ATKey fr Mac : LED : click it, BLUE LED f the ATKey will enable, and flashing fr 5 sec. - this is helpful t identify the registered ATKeys if yu have a lt f ATKeys there. Fingerprint(s): add (up t 10), delete (delete all), Calibratin (re-calibrate fingerprint sensr if yu fund FRR getting wrse r slw respnse) Cnfigure : Key infrmatin BLE infrmatin Rename Re-Cmpanin with Mac: if yu change Mac lgin passwrd, please re-cmpanin and type in new passwrd here. Remve : Remve this ATKey frm this Mac 18

20 ATKey.card fr Windws Hell Windws Hell (Windws 10, USB r BLE) ATKey can wrk fr multiple Windws if they were cmpanined; but ne Windws can just allw ne ATKey. Please check here fr the detail t cmpanin ATKey and Windws Windws Lgn (Windws Hell) Message n Windws lgn screen When this message cmes (LED#1 f ATKey is blue flashing), yu can lgn via ATKey fingerprint matching; If the message is nt shwing, yu may need t hit Space bar smetimes t push Windws checks Cmpanin Device t shw. Via USB when LED#1 is blue flashing, tuch yur enrlled fingerprint t verify (Success: LED#2 is Green) t lgin ATKey is ding battery charging at the same time: LED#2 is RED flashing; LED#2 is ff at full charging; ATKey Bluetth is ff when it is in USB data mde. 19

21 Via BLE Press Pwer buttn f ATKey, it will ON with BLE bradcasting (LED#2 is blue flashing) t all paired devices t cnnect, ideally it will cnnect the near ne since it s base n RSSI; when the ATKey cnnected t the target Windws (LED#2 is blue ON), then LED#1 is blue flashing, tuch yur enrlled fingerprint t verify (Success: LED#2 is Green) t lgin ATKey will be ff autmatically if there is n peratins r interactins fr 60 secnds. 20

22 ATKey.card fr Mac Lgin Cmpanin ATKey.card and Mac Check here fr the detail t enrll fingerprint and als cmpanin ATKey with Mac Only fr warm bt (sleep, hibernate), we can t supprt lgin at cld bt (restart, shutdwn) Via BLE Press Pwer buttn f ATKey, it will ON with BLE bradcasting (LED#2 is blue flashing) t all paired devices t cnnect, ideally it will cnnect the near ne since it s base n RSSI; when the ATKey cnnected t the target Mac (LED#2 is blue ON), then LED#1 is blue flashing, tuch yur enrlled fingerprint t verify (Success: LED#2 is Green) t lgin If yur Mac starts frm cld bt and Restart, it did nt allw ATKey as authenticatr t lgin ATKeyfrMac app must be alive ATKey will be ff autmatically if there is n peratins r interactins fr 60 secnds. We did nt supprt USB mde t lgin Mac yet. 21

23 ATKey.card fr FIDO U2F Brwser base but Chrme nly - One Card fr Windws, Mac, ios and Andrid Here are FIDO U2F ready services: Or yu can search and find available FIDO U2F certified server here: GGF12B5Y7PIAM6PKR09S5G9Z3Q9T0FLK91C DO1NWZFP8714Q (USB) FIDO U2F frm Windws (Windws 7/8/8.1/10) and Mac OS Chrme brwser Take Ggle as example: Lgin yur Ggle accunt Enable 2FA frm Sign-in & Security Turn 2-step Verificatin ON Fllwing Ggle steps 22

24 lgin again by ID/Passwrd Add yur mbile phne in and select Text message Type-in received SMS cde t cnfirm t turn n 2-step verificatin Page dwn t find Security Key and ADD SECURITY KEY 23

25 Prepare the ATKey insert ATKey.card t USB prt, click NEXT t register the key Register ATKey here 24

26 LED#1 f ATKey.card is flashing, tuch by yur registered finger, when Green LED is ON, it means fingerprint verified and register this ATKey t Ggle U2F server; if Red LED is n, it means fingerprint failed, wait and verify again Register ATKey dne, type-in the name f the key (yu can use the name f yur ATKey, r any Nick name yu can remember which key is) Then yu can see the registered ATKey shws there: 25

27 Yu can re-lgin the ggle accunt, ID/Passwrd first, then it will request 2 nd factr LED#1 is blue flashing, tuch t verify yur fingerprint t lgin Fr ther U2F enabled service: Drpbx: Facebk: Github: Salesfrce: 26

28 (Bluetth) FIDO U2F via iphne/ipad (ios) app Smart Lck and Chrme brwser Smart Lck (dwnlad frm app stre) Add yur Ggle accunt in Pair yur Security Key (ATKey) Pair ATKey.card and iphne Duble click pwer buttn t ech t Smart Lck app ATKey.card: LED#2 is WHITE flashing, tuch fingerprint t cnfirm the pairing iphne: click Pair t cntinue when it s dne, shwing the ggle accunt in Smart Lck as belw 27

29 Chrme Brwser lgin yur ggle accunt by U2F Lgin by ID/Passwrd first, then need t pwer n ATKey.card, t verify fingerprint t lgin Pwer n ATKey.card nw, they will cnnect (LED#2 is blue ON) t request fingerprint verificatin (LED#1 is flashing) 28

30 (NFC) FIDO U2F via Andrid phne/tablet Chrme brwser Sign in Ggle accunt via Chrme brwser ID/Passwrd first Request Security Key and turn n NFC Authenticate via ATKey thrugh NFC Pwer n ATKey.card LED#1 is flashing, just tuch fingerprint t verify t enable NFC (fr 15 sec.) ATKey.card cntacts Andrid Phne (back side) t send U2F tken via NFC (JavaApplet) t Phne t server fr authenticatin 29

31 ATKey.card fr FIDO2 Please check fr mre ideas abut FIDO2 ATKey.card is FIDO2 certified Link f the certified prducts: ( NKF95CK9973MQT6H7HW96L3C707U348CS8 TDF7GLM6YZ3TT333P4XNQ4G35ZOXO66JV1 6382X3H96SC91X20J5U4929JH452SNN6BW9 8QKD2L1B) Readiness f ATKey.card ( , firmware versin: r later versin) USB NFC BLE FIDO 2 Ready Wrking Ready FIDO U2F Ready Ready Ready Passwrdless lgin Micrsft accunt by security key: Fr Passwrd-less lgin t Micrsft accunt - Windws 10 build 1809 r later versin via Edge brwser, USB mde: Yu can lgin t add ATKey.card as security key fr yur Windws accunt frm here: Lgin by ID/Passwrd first - Check this vide t setup security key f the accunt ( Step by step t setup security key (r check vide: t setup) Click Security frm banner bar Click mre security ptins frm bttm Frm Windws Hell and security keys sectin, click Set up a security key 30

32 Click next t setup Tuch yur fingerprint t verify n card Fingerprint matched, type in name f the key Dne! Yu can find all yur registered keys, click Manage yur sign-in methds 31

33 Sign-ut t lgn by security key (passwrd-less) Click Mre sign-in ptins Click abve security key 32

34 Select Use a security key Verify yur fingerprint nw. Then lgin yur Micrsft accunt! FIDO2 is als ready via Chrme brwser n Windws r Mac (USB mde): Chrme brwser versin r later versin Enable FIDO2 manually 33

35 Then yu can try fr FIDO2 certified server: YS335G6IU935S92W99707J73Q1KS1385CC6Y2AY15T5197JR1K5C212T703WTBY31Z 34

36 ATKey.card fr NFC Reader ATKey.card is a NFC tag type fr ISO14443 & Mifare Type A NFC reader ATKey.card wrks fr 13.56MHz NFC reader Mifare ID is resident and unique ID inside SE/NFC chip Fr NFC dr lcker If there is a Mifare ID table in the backend f NFC card reader (Dr NFC reader), just need t cpy Mifare ID f thse specific cards Or register ATKey.card t Mifare Type A NFC dr lcker 35

37 Extra Highlights and Truble Shting Trubleshting by LED LED#1 LED#2 BLUE static ON RED static ON ATKey.card is lcked (due t cntinuus 5 times fingerprint mismatching). Please wait fr 1 (1 st time) r 12 hurs (frm 2 nd time) t unlck BLUE static ON BLUE static ON Nrmally this is BLE issue (BLE cnnected, fingerprint verified, but still waiting respnse frm Hst) Please re-bt the card (lng-press pwer buttn t pwer ff, then click pwer buttn t pwer ON) - RED slw Battery lw, please d battery charge via USB flashing BLUE flashing RED fr 1 sec Fingerprint matching failed BLUE ON WHITE flashing Request t cnfirm the BLE pairing Tuch fingerprint sensr t cnfirm the pairing BLUE ON WHITE ON If this happens n standalne mde (click pwer buttn 3x times), please enrll yur fingerprint (there is n fingerprint template inside the card) BLUE ON Green flashing If this happens n standalne mde (click pwer buttn 3x times), please d fingerprint matching first (fingerprint already enrlled int card), then yu can start t enrll new fingerprint Nne Nne (pwer n but n LED ON) very lw battery, please d battery charge and wait till LED is ON Windws 10 Fr FIDO2, Windws OS must be build 1809 r later versin But if yu are using insider build f 19H1, since there is new HID FIDO categry, we are still wrking n it, nw it is buggy. Pending mechanism fr security Security level is high: Fingerprint FAR < 1/50,000, FRR < 3% Fr even higher security, we supprt lck mechanism t avid trying by fake fingerprint cntinuusly Allw 5 times fingerprint verificatins, if it fails 5 times cntinuusly: 1 st time: lck card fr 1 hur 2 nd time r later: lck card fr 12 hurs Battery Frm factry finish gd, it is 3.8V (~50%) Battery lw is 3.67V (~35%), please d battery charge If the battery is lwer than 3.4V, ATKey.card can nt bt Yu need ding battery charge fr a while (ATKey.card is n respnse at beginning), then ATKey.card can bt again If the battery is lwer than 3.0V, battery prtects by Hardware (PCM) Yu need ding battery charge fr a while (n respnse frm ATKey.card fr a while). If the card is never used, battery can just stay arund 5 mnths (frm factry), it ges t 3.0V t enable PCM prtectin; please d battery charge befre using the card, and it needs t wait fr a few minutes t see the LED ON with battery charge (till 3.4V). 36

38 Bluetth We are BLE mde (Bluetth smart), it s lw pwer cnsumptin (cmparing with Bluetth mde) ATKey.card is USB data mde (insert PC r..), we will stp BLE mde; but if ATKey.card is USB battery charging (using USB pwer adapter), BLE is still ON. Dem Vide lgin Micrsft accunt via ATKey.card: (standalne fingerprint enrllment) (Setup ATKey.card) (ATKey.card fr NFC dr, PC) (ATKey.card fr Mac) (ATKey.card fr FIDO U2F: PC) (ATKey.card fr FIDO U2F: Andrid) (ATKey.card fr NFC dr) Cntact Please mail t cntact@authentrend.cm fr any issues r pinins Please mail t cntat@authentrend.cm fr any business r spec. demands, we supprt SDK/API and integratin fr enterprise business 37

39 38