ATKey.BLE Quick Guide (Windws 10) 2018.01 rev1.2 Preface ATKey.BLE Windws 10 RS2 (Creatrs Update, build 1703) r later versin ATKey app (dwnlad frm Windws Stre: https://www.micrsft.cm/stre/apps/9p7gr8w9sjd3) Nte 1: One hst device (Windws r Mac) can just pair ne BLE key, but ne BLE key can wrk fr multiple hst devices (Windws and Mac). Nte 2: t supprt FIDO U2F, it needs t dwnlad extra U2F plug-in fr Chrme brwser t enable it 1
Befre install app Enable PIN Windws hell needs PIN cde f Windws, please setup it frm belw page: Windws Settings = > Accunts Accunts => Sign-in Optin PIN SETUP yur PIN cde fllwing Windws instructins 2
After installed, find ATKey fr Windws icn 3
Start yur ATKey.BLE Plug micr-usb pwer cable in t wake up Key first LED Blue ON Then, LED RED ON, pwer is charging Yu can cntinue pwer charging, r remve the micr-usb cable (if LED is flash RED, it means lw pwer state, please re-charge it) Battery full charge LED will be ff Lw battery (20% r lwer) the KEY wn t wrk, RED LED is flashing, please d battery charge by Micr USB cable 4
Pair ATKey.BLE t yur PC and APP Click t run app (ATKey fr Windws) yu can turn system Bluetth n here shwing the name f the hst PC System listing Registered ATKey here Starts frm + Add and Register AKTeky Discver ATKey (base n RSSI) arund the hst PC Shwing discvered ATKey 1 st example, ever registered and als rename the key 2 nd example, find a new ATKey, shwing BLE ID (last 2 digits we nted n label sticker) Click icn t cnnect the specific ATKey 5
Wizard mde: 1/6, pair the device Yes t pair Target ATKey LED is flashing (Blue), please tap the fingerprint t cnfirm the pairing (within 10 sec); if yu did nt tuch the fingerprint t cnfirm within 10 sec. (timeut), please re-d it by Cancel first. Yes t pair 6
Next t 2/6, yu can type in a name fr the key (stre inside PC app, nt inside the Key) Next t 3/6, enrll fingerprint (ATKey BLE LED is flashing by BLUE clr) If there is fingerprint enrlled, it will bypass step 3/6, and g t 4/6 If there is NO fingerprint enrlled: 7
Please enrll yur fingerprint fllwing screen message (tuch and lift, slightly mve finger fr mre lcatins f the specific fingerprint t be enrlled, but dn t just change the angle during yur fingerprint enrllment), till 100% shwing Please enrll yur fingerprint by the same directin; after enrlled, yu can tuch by any 360 degrees t verify (but dn t d 360 degree enrllment) Just tuch the fingerprint by yur specific finger during the enrllment, the % is increasing like 8%, 16%,., nrmally it need 8~10 times enrllment 8
Next t 4/6, Verify enrlled fingerprint Verify Success ( ATKey LED is Green), then g t 5/6; Verify Fail (LED is RED), then LED cntinue flashing (Blue), try again; if it cntinues failed, please Cancel t stp it. 9
Next t 5/6, register this ATKey t Windws CDF Check the check bx t enable it It will request fingerprint verificatin frm ATKey (LED is flashing BLUE) And als request PIN cde verificatin (Windws behavir) 10
Next t 6/6, enable Dynamic Lck (OS must be build 1703 r later versin) 11
This is relative t Windws Setting => Accunt => Sign-in ptins 12
Design cncept f Dynamic Lck Windws API - if there is NO peratins fr 30 sec., ATKey app is aware frm Windws API, then we are checking the RSSI value f the cmpanined ATKey fr 10 sec., if RSSI value is lwer than -70, then lck the PC t Lgn screen Wizard is dne, yu can see the Registered ATKey listing as belw Buttns f the ATKey: LED : click it, BLUE LED f the ATKey will enable, and flashing fr 5 sec. - this is helpful t identify the registered ATKeys if yu have a lt f ATKeys there. Fingerprint(s): add (up t 3), delete (delete all), Calibratin (re-calibrate fingerprint sensr if yu fund FRR getting wrse r slw respnse) Cnfigure : Key infrmatin BLE infrmatin Rename Dynamic Lck Remve : Remve this ATKey frm this PC (nt paired, nt cmpanin) 13
Inf f the ATKey: Here is app versin number, and als URL f ATKey.BLE 14
Try Windws +L t Windws Lck screen Message shwing n screen: Lking fr ATKey.BLE See ATKey.BLE fr Sign-in instructin, and LED Is Blue fr a secnd, then ff (it means PC bradcasting t find the key) Message shwing n screen: Rest yur finger n ATKey.BLE t sign in, and LED is flashing Blue, please put yur fingerprint n, till Green LED shws (r Red); then it will aut-unlck t Windws. 15
Limitatin frm Windws 10: CDF device can t lgn at cld bt r Windws rebt since it needs passwrd r PIN cde by design; but frm Windws 10 build 1709 (RS3), it can supprt CDF lgin even at cld bt r rebt. 16
FIDO U2F (2 nd Factr) If yu want t get mre ideas f FIDO and U2F, please visit this URL: https://fidalliance.rg/specificatins/verview/ ATKey fr U2F Read these items first: 1. Please dwnlad and install Chrme Brwser, we are ding U2F base n Chrme plug-ins 2. Here are FIDO U2F enabled nline services i. b. If yu are using Ggle ID r Facebk ID as ther nline lgin, yu can leverage ATKey as 2 nd factr still fr higher security 3. Please make sure yu already paired and cmpanined yur ATKey fr Windws This is generic FIDO U2F: 1 st factr: smething yu knw (ID/Passwrd), 2 nd factr: smething yu have (authenticatr) AuthenTrend brings bimetrics int FIDO as 3 rd factr cmbining with 2 nd factr, high secure even yu lst the authenticatr, n ne can use it except fingerprint verified 1 st factr: smething yu knw (ID/Passwrd) 2 nd factr: smething yu are (fingerprint) + smething yu have (ATKey) 17
Install and enable U2F: Dwnlad and install ATKey U2F Plug-in frm AuthenTrend web site; after installatin, yu shuld see belw prgram icns frm Start Menu And fid U2F icn is enabled as belw: Take example frm Ggle a) Ggle.cm, lgin yur ggle accunt by ID/Passwrd first as usual: b) Enabled U2F Start frm Sign-in & Security : 18
Turn 2-step Verificatin ON Get Start 19
Lgin again by ID/Passwrd: Yu must get SMS cde frm yur mbile phne first select yur cuntry, type in yur phne number, click SEND t receive SMS cde Type in SMS cde 20
Cnfirm t turn n 2-step verificatin (default is vice r SMS) Page dwn t find Security Key and add security key 21
Prepare yur ATKey 22
Register ATKey here when Blue LED is flashing (ATKey), tuch by yur registered finger, when Green LED is ON, it means fingerprint verified and register this ATKey t Ggle U2F server; if Red LED is n, it means fingerprint failed, wait and verify again Fingerprint verified, type in the name f ATKey, then Dne 23
Then yu can see the ATKey listing as a 2 nd factr c) Lgut and lgin yur Ggle accunt again: 1 st factr: ID/Passwrd still 24
2 nd factr: when the blue LED is flashing (ATKey), tuch yur fingerprint t verify (Green LED n), then it passed 2 nd factr t lgin yur ggle accunt Fr ther U2F enabled services: Drpbx: https://www.drpbx.cm/help/security/enable-tw-stepverificatin Facebk: https://www.facebk.cm/ntes/facebk-security/security-keyfr-safer-lgins-with-a-tuch/10154125089265766/ Github: https://help.github.cm/articles/cnfiguring-tw-factrauthenticatin-via-fid-u2f/ Salesfrce: https://help.salesfrce.cm/articleview?id=security_u2f_enable.htm&type=5 25
Truble Shting ATKey.BLE can t wrk if the battery is lwer than 20% Battery cnsuming: Fingerprint matching (majr) BLE bradcasting (this is backgrund task t cnsume battery, and it wn t stp) fr better BLE cnnectin and actins One ATKey.BLE fr multiple devices If yu have mre than 1 device (Windws PC, Mac, ) paired with yur ATKey.BLE, it will cnnect t demanding ne (by BLE bradcasting); but if there are 2 r mre devices are bradcasting and requesting the ATKey.BLE, it may cnnect t clset ne (depending n BLE RSSI) After lgin (fingerprint matched and lgin device), we will discnnect it, s anther device can bradcast t find ATKey.BLE t cnnect If yur target device can t find ATKey.BLE (frm app, frm lgin screen) The Key shuld be cnnected by ther device, yu need t discnnect it first Maximum: 3 x fingerprints It may take mre secnds fr fingerprint matching if yu have mre than 1 fingerprint registered Rename f ATKey.BLE The name will just keep inside app, nt inside the ATKey; default name is ATKey.BLE Reset when yu plug the pwer surce in (Micr USB prt), ATKey.BLE will be reset (Blue LED), then charging U2F supprt We will release separated U2F Plug-in t dwnlad We will prvide anther U2F user guide 26