FEITIAN ePass K9 Plus USB Security Key User Manual

1. Introduction

The FEITIAN ePass K9 Plus is a versatile USB security key designed for robust multi-factor authentication. It supports USB-A and NFC connectivity, offering FIDO U2F, FIDO2, and PIV functionalities. This device enhances security by providing a convenient and safer alternative or addition to traditional passwords, helping to prevent account takeovers and cyber-attacks.

2. Key Features

• FIDO2 + FIDO U2F certified security key with PIV function.
• FIPS 140-2 Level 2 certified for enhanced security.
• Secured by NXP semiconductors.
• Driverless operation across all major browsers.
• Supports desktops, laptops, and tablets via USB-A and/or NFC.
• Supports iOS/Android phones via NFC.
• Protects accounts from phishing and other cyber-attacks.
• Prevents unauthorized device access.
• Features: 2 slots, OATH-HOTP, OATH-TOTP, Static Password, Challenge Response, AES, ECDSA, SHA256, NIST-FIPS 140-2, OpenPGP, Smart Card (PIV), RSA 2048, RSA 1024, ECC P384, ECC P256.

3. Product Overview

3.1 Physical Description

The ePass K9 Plus features a compact, key-like design with a USB-A connector on one end and an integrated NFC module. It includes a tactile button for authentication prompts and a small hole for attachment to a keyring.

Image 1: Front view of the FEITIAN ePass K9 Plus USB Security Key, showing the USB-A connector and the NFC touch area with an indicator light.

Image 2: The FEITIAN ePass K9 Plus security key shown attached to a keyring alongside a traditional house key, illustrating its compact size and portability.

3.2 Package Contents

• FEITIAN ePass K9 Plus USB Security Key
• Quick Start Guide (may vary by region)

Image 3: Front view of the FEITIAN ePass K9 Plus retail packaging, displaying the product name and FIDO certification logo.

Image 4: Back view of the FEITIAN ePass K9 Plus retail packaging, showing a QR code for the user manual and product certifications.

4. Setup

4.1 Initial Connection

1. For USB-A: Insert the ePass K9 Plus into an available USB-A port on your computer, laptop, or tablet. The device is designed to be driverless and should be recognized automatically by your operating system.
2. For NFC: Ensure your mobile phone or NFC-compatible device has NFC enabled. The key will communicate wirelessly when placed near the device's NFC reader.

4.2 Registration with Accounts

To use the ePass K9 Plus for authentication, you must first register it with your desired online accounts or services that support FIDO U2F or FIDO2. The registration process typically involves:

1. Navigate to the security settings or two-factor authentication section of your account (e.g., Google, Microsoft, Twitter).
2. Select the option to add a security key or FIDO device.
3. Follow the on-screen prompts. When instructed, insert the ePass K9 Plus into a USB-A port or tap it against your NFC-enabled device.
4. Touch the button on the security key when prompted to confirm registration.
5. Assign a name to your security key for easy identification (optional).

5. Operating Instructions

5.1 USB-A Authentication

When logging into a service that requires your ePass K9 Plus via USB-A:

1. Enter your username and password as usual.
2. When prompted by the service, insert your ePass K9 Plus into an available USB-A port.
3. Touch the button on the security key to complete the authentication.

5.2 NFC Authentication

When logging into a service that requires your ePass K9 Plus via NFC (e.g., on a mobile phone or NFC-enabled tablet):

1. Enter your username and password as usual.
2. When prompted by the service, hold your ePass K9 Plus near the NFC reader area of your device.
3. The device will vibrate or provide an audible cue when the key is successfully read.

5.3 Supported Services

The FEITIAN ePass K9 Plus is compatible with a wide range of services and platforms, including but not limited to:

• Windows Log-In
• Twitter, Google Accounts, Microsoft Accounts, Facebook
• Salesforce, Zoho, Dropbox, DUO Security
• Microsoft Azure Entra ID, Microsoft Active Directory
• Coinbase, Bank of America, Okta, Ping Identity, eBay
• Many other websites, applications, computers, laptops, and devices that accept USB Security Keys.

5.4 Video Demonstration

6. Advanced Features

6.1 PIV (Personal Identity Verification)

The ePass K9 Plus supports PIV, allowing it to function as a smart card for secure identity verification, digital signatures, and encryption in enterprise and government environments. Specific setup and usage instructions for PIV will depend on your organization's infrastructure and software.

6.2 OATH-HOTP/TOTP

The key can generate One-Time Passwords (OTPs) using both HMAC-based (HOTP) and Time-based (TOTP) algorithms. This functionality can be configured using FEITIAN's management software, which may be required for initial setup of these features.

7. Specifications

8. Troubleshooting

8.1 Key Not Recognized

• USB-A: Try a different USB port or a different computer to rule out port issues. Ensure the key is fully inserted.
• NFC: Ensure NFC is enabled on your mobile device. Try repositioning the key over the NFC reader area, as the exact location can vary by device. Remove any thick phone cases that might interfere with NFC communication.

8.2 Authentication Failure

• Ensure you are touching the button on the key when prompted during USB-A authentication.
• Verify that the security key has been correctly registered with the specific account you are trying to access.
• Check your internet connection if authenticating with an online service.

8.3 Indicator Light Behavior

The ePass K9 Plus typically has an indicator light (often green) that illuminates or flashes during authentication. If the light does not respond, ensure the key is properly connected or positioned for NFC.

9. Care and Maintenance

• Keep the security key clean and free from dust and debris. Use a soft, dry cloth for cleaning.
• Avoid exposing the key to extreme temperatures or direct sunlight for prolonged periods.
• While the key is water-resistant (IP67), avoid intentional submersion or exposure to harsh chemicals.
• Store the key in a safe place to prevent loss or physical damage.

10. Support and Resources

For further assistance, detailed documentation, or to download any necessary software (e.g., for OATH-HOTP/TOTP configuration), please refer to the official FEITIAN website or the comprehensive user manual:

• Official FEITIAN Website: www.ftsafe.com
• ePass FIDO-NFC Plus K9 Manual (PDF): Download PDF Manual