User Guide for AUTHENTREND models including: Atkey Card Nfc Fingerprint Passkey, Atkey Card Nfc Fingerprint Passkey, Nfc Fingerprint Passkey, Fingerprint Passkey, Passkey

This is the title of the presentation

Zake Huang

User Guide for

4 Applications Physical access (Mifare TypeA UUID); but w/o fingerprint matching Passkey enabled IAM Passkey enabled Web services Passkey enabled SSO back-side is blank reserve for badge printing

https://authentrend.com › wp-content › uploads › 2024 › 01 › ATKeyCardNFC user guide Samrtphone


File Info : application/pdf, 18 Pages, 2.63MB

PDF preview unavailable. Download the PDF instead.

ATKeyCardNFC user guide Samrtphone
User Guide for

Index
· ATKey.Card NFC briefing · Initial ATKey.Card NFC via APP "SecurityKey NFC"
· iOS or Android
· Activation · Reset · Set PIN code · Enroll fingerprints · Check sign-in data
· Register to Passkey enabled services · Authentication as a Passkey
*Please check PC (Windows, Mac) user guide separately!
https://authentrend.com/atkeycardnfc_user_guide_pc/
2

· ISO/IEC 14443 Mifare Type-A 13.56MHz contactless Smart card, without battery.
· Dimension: 85 x 54 x 0.8mm, meet ISO/IEC 7810 spec.
· FIDO2 CTAP2.1 certified: Device-bound (Hardware) Passkey.

Fingerprint sensor, allow max. 2 fingers

For 7816 smart card reader
the reader must be full support for short APDU and extended APDU commands.

NFC antenna area
Built-in Mifare Type-A UUID
back-side is blank, reserve for badge printing

3

NFC Applications

Passkey enabled IAM
Windows Passwordless login joined Entra ID (Azure AD) PC
https://authentrend.com/download/ATKey_for_ MSFT_AzureAD_guide.pdf

Passkey enabled Web services

Passkey enabled SSO
· iOS needs Safari broAwnsderofoidr NFC Passkey

Physical access (Mifare TypeA UUID);
but w/o fingerprint matching

For security reason,

· if PIN code continuous

Windows Passwordless login to any

failed 8 times, or

Windows Account via ATKey.Login

· fingerprint continuous

https://authentrend.com/atkey-login/

failed 15 times,

the card will be locked, user

needs to reset it.

back-side is blank reserve for badge printing

4

Recommendations

Take the card by "enrolled" thumb finger (on fingerprint sensor sear)
and index finger (on back)

iPhone is fixed location

Android, normally it's on back side, please check your Android Phone brand and model to make sure the
NFC antenna location

5

NFC Download APP: "SecurityKey NFC"

For Android, we offer Android version as Google Play Services Public Beta Program due to unstable NFC power source especially for fingerprint enrollment, please check below link to join as a beta tester to download the app: https://developers.google.com/android/guides/beta-program

We recommend to check video here as step-by-step guide:

https://www.youtube.com/watch?v=2APP6j7TIrg&t=4s (iOS version)

6

Step1: Activate Card
· Launch "SecurityKey NFC" app
· Click "Manage", then tap card on Phone NFC Antenna area
· iOS: NFC ON is automatically · Android: NFC ON/OFF is manually, please turn it on from Settings

3 Remaining sign-in data you still can register (to those Passkey enabled services); here only records registered as "FIDO2 Security key"", U2F is not recorded to counter.
2 Mifare Type A UUID, for Mifare reader (door access control)
1 Unique serial number inside each card; it may also prints on card surface (beside FIDO logo)

Then, remove the card
Until "Checked"
state
To Activated state

1 2 3
7

Step2: Reset
· Reset to factory state, it does not need user's PIN code or Fingerprint authentication
· Click "Reset", then tap the card on NFC Antenna area

Tap the card on NFC Antenna area

Until
"Checked" state

Then, remove the card

PIN code, fingerprints are all reset, and signin data is back to max.
8

Step3: Setup PIN code
· Setup PIN code to the card, then you can enroll fingerprint
· PIN is only for card management, not for authentication
· Fingerprint failed continuously, user can't login by typing PIN code instead of biometrics verifications.
Tap the card on NFC Antenna area

PIN: 8 times FPR: 15 times

Then, remove the card
Until "Checked"
state
9

Step3-1: Configure PIN Policy
· We allow user to configure the PIN code policy
· Change PIN code
· User can change PIN code (after PIN verified),or the card setup by Admin (with PIN code) but force to change at 1st time use
· PIN Policy
· Force PIN Change at next usage ­normally this is admin feature to avoid any unexpected modification during delivery or transportation to employees
· Admin can request minimum PIN length for security

User can change PIN code here
Verified by PIN code first

Click "Confirm",
tap the card on NFC Antenna area,
until "Checked" state, so PIN code setup into card

Adjust setting or type in max. number,
click "Confirm", then tap the card on NFC Antenna area,
until "Checked" state, so PIN policy setup into card
10

Step4: Enroll Fingerprint
· Click "Fingerprint"
· If it's new card w/o fingerprint enrolled, type in PIN code to enroll fingerprint · If the card with fingerprint enrolled, verified by fingerprint or type-in PIN code to continue
Touch fingerprint on sensor

Verified by PIN code to continue

Confirm to start

Tap card to start

1
Touch fingerprint on sensor by different angles, total 4 times

Done, you can assign a

friendly name for the

2

3

4

enrolled finger;

after named, tap card again to write to card

11

Step5: Manage Sign-in Data
· Click "Sign-in Data"
· Verify by fingerprint or PIN to continue · You can delete registered sign-in data from card, or assign friendly name (sign-in ID) for the
registered services

Verified by fingerprint, so Press the enrolled finger on sensor and doing Bio-tap
to phone

Here will show the
"registered credentials / max. credentials"

Until "Checked" state, then remove
the card

You can delete or assign friend name (sign-in ID) of those registered services; After operation, Tap card to write those modified data into card.
12

Register Card to Passkey enabled Service
· Example from iCloud (but it needs 2 security key as a backup)
Click "Settings" Click account name
Click Security keys

Bio-tap till to next screen
Done, assign friendly name of the card

Then, register 2nd security key/card if you have.
13

Register Card to Passkey enabled Service
· Example from Github

Bio-tap till to next screen

Scroll down to see the "Passkeys"
By Safari browser for NFC Passkey

Select "Security Key" Select "Other Options"
14

Authentication as a Passkey
· Example from Github
Click "Sign-in options" instead of type-in ID password

Click "Sign-in with a Passkey"
By Safari browser for NFC Passkey

Click "Security key"

Bio-tap to login

Waiting for verify

Login, remove card

15

Authentication as a Passkey
· Example from Microsoft 365 Here assumes you already register Card as a security key to your Microsoft365 account

Click "Sign-in options" instead of type-in ID password
By Safari browser for NFC Passkey

Click "Sign-in with a security key"

Click "Other Sign-in Options" instead of
using Face ID

Click "Security Key"

Press card by enrolled fingerprint, doing Bio-tap
to login

Until screen shows login, then remove the card

Done, login to M365

16

Visit https://authentrend.com/atkey-card-nfc/ for more information Or mail to customer.support@authentrend.com for advanced contact
17

Thank you!
No more phishing! Start your passwordless login from today.



References

Microsoft PowerPoint 2016