1. Introduction
This manual provides essential information for the proper use and maintenance of your Token2 T2F2-NFC-Smartcard PIN+ Release3. This device is a FIDO2.1 Level 2 certified security key card designed for robust authentication and data protection. It supports NFC and smartcard interfaces, FIDO U2F, FIDO2.1, WebAuthn+CTAP, OpenPGP, and TOTP with an open-source application. The card features 300 passkey storage and enforces PIN complexity for enhanced security.
2. Product Overview
The Token2 T2F2-NFC-Smartcard is a credit card-sized security key. It integrates a secure chip for cryptographic operations and supports both Near Field Communication (NFC) for wireless interaction and a contact smartcard interface for physical readers.
Figure 2.1: Front of the Token2 T2F2-NFC-Smartcard. This image displays the front side of the security card, featuring the FIDO logo, PIN+R3 branding, an NFC symbol, a QR code with the number 76106767974669, and the visible contact chip. This side is used for NFC and contact-based interactions.
Figure 2.2: Back of the Token2 T2F2-NFC-Smartcard. This image shows the reverse side of the security card, which is a plain white surface without any markings or features.
3. Setup and Initial Configuration
Before using your Token2 T2F2-NFC-Smartcard, ensure your device (computer, smartphone) supports either NFC or has a compatible smartcard reader. The card is designed for use with FIDO2.1 compatible services and applications.
3.1. General Setup for FIDO2.1
- Compatibility Check: Verify that the online service or application you intend to use supports FIDO2.1 or FIDO U2F security keys.
- Access Security Settings: Navigate to the security or authentication settings within the service or application where you wish to add a security key.
- Initiate Key Registration: Look for an option like "Add Security Key," "Register FIDO Key," or similar.
- Follow On-Screen Prompts: The service will guide you through the registration process. When prompted, either tap the Token2 card to your device's NFC reader or insert it into a compatible smartcard reader.
- Set PIN (if prompted): For FIDO2.1, you may be asked to set or confirm a PIN. Ensure you choose a strong, memorable PIN. The card enforces PIN complexity.
- Complete Registration: Once the card is recognized and any necessary PIN is set, the service will confirm successful registration.
3.2. Using with OpenPGP
The Token2 T2F2-NFC-Smartcard supports OpenPGP. For detailed instructions on how to generate or import PGP keys and use them with your card, please refer to the specific documentation for your OpenPGP software (e.g., GnuPG) and the Token2 website for any specific drivers or utilities.
3.3. TOTP with Open Source App
The card supports Time-based One-Time Passwords (TOTP) in conjunction with a compatible open-source application. Consult the Token2 website or the documentation for the recommended open-source TOTP application for setup and usage instructions.
4. Operating Instructions
Once your Token2 T2F2-NFC-Smartcard is set up with your desired services, using it for authentication is straightforward.
4.1. Logging In with FIDO2.1 / U2F
- Initiate Login: Go to the website or application that requires FIDO authentication.
- Enter Username/Password (if applicable): Some services may still require your username and password before prompting for the security key.
- Activate Security Key: When prompted, either tap the Token2 card to your device's NFC reader or insert it into a smartcard reader.
- Enter PIN (if required): If a PIN is configured for the FIDO2.1 key, you will be prompted to enter it.
- Authentication Complete: The service will verify your identity using the security key.
4.2. Passkey Storage
The Token2 T2F2-NFC-Smartcard can store up to 300 resident/discoverable passkeys. This allows for passwordless login experiences where the passkey is stored directly on the security key and can be discovered by the relying party without needing a username or password first.
5. Maintenance
To ensure the longevity and optimal performance of your Token2 T2F2-NFC-Smartcard, follow these maintenance guidelines:
- Physical Care: Handle the card with care. Avoid bending, dropping, or subjecting it to excessive force.
- Cleaning: If necessary, gently wipe the card with a soft, dry, lint-free cloth. Do not use harsh chemicals, abrasive cleaners, or excessive moisture.
- Temperature and Environment: Store the card in a cool, dry place, away from direct sunlight, extreme temperatures, and strong magnetic fields.
- Protect the Chip: Avoid touching the metallic contact chip directly to prevent oil and dirt buildup, which could affect connectivity.
6. Troubleshooting
If you encounter issues with your Token2 T2F2-NFC-Smartcard, consider the following troubleshooting steps:
- Card Not Recognized:
- NFC: Ensure your device's NFC is enabled and you are tapping the card correctly to the NFC reader area. Remove any thick cases that might interfere.
- Smartcard Reader: Ensure the card is fully inserted into the reader and the reader is properly connected to your device. Try a different USB port or reader if available.
- Drivers: Verify that any necessary smartcard reader drivers are installed and up to date on your computer.
- PIN Issues:
- Incorrect PIN: Double-check your PIN entry. Repeated incorrect entries may lock the card.
- Locked Card: If the card is locked due to too many incorrect PIN attempts, you may need to use a PUK (PIN Unblock Key) if one was set, or reset the card (which will erase all stored credentials). Refer to Token2 support for specific instructions.
- Service-Specific Problems: If the issue is with a particular online service, ensure that the security key is correctly registered with that service and that the service's FIDO implementation is up to date.
- Firmware Updates: Periodically check the Token2 website for any available firmware updates for your card, as these can resolve known issues and improve performance.
7. Specifications
| Feature | Description |
|---|---|
| Model Number | Token2 T2F2-NFC-Card PIN+ Release3 |
| Interfaces | NFC, Smartcard (contact) |
| Form Factor | Credit card format |
| FIDO Certification | FIDO U2F, FIDO2.1, WebAuthn+CTAP, FIDO2 Level 2 Certificate |
| Passkey Storage | Up to 300 resident/discoverable passkeys |
| Additional Features | OpenPGP, TOTP with open source app, PIN complexity enforced |
| Chipset | No Infineon chips |
| Firmware | Free and open source, reviewed by Compass Security Schweiz AG |
| Origin | Swiss made, from Switzerland |
| ASIN | B0FJCB7JHM |
8. Warranty and Support
The Token2 T2F2-NFC-Smartcard features Swiss-made, free, and open-source firmware and applications, with firmware reviewed by Compass Security Schweiz AG. For specific warranty information, technical support, or to access the latest drivers and utilities, please visit the official Token2 website or contact their customer support directly. Keep your purchase receipt for any warranty claims.
