FIDO U2F

Introduction

Registration

If users want to use FIDO U2F key as two-factor authentication token to login to a application, the system administrator has to first enable the application with "FIDO U2F" authentication method, then users would be able to register their FIDO U2F keys to their user accounts.

Enable FIDO U2F Authentication Method

To enable an application with FIDO authentication method, follow the steps below:

1. Login into the DualShield Management Console
2. Select the logon procedure associated with the application, e.g. Self-Service Console
3. Right click "Logon Steps", and add the authenticator "FIDO U2F"
    (Please Note: Once an application is enabled with FIDO U2F authentication, all users in the application are required to use FIDO to login to their user accounts.)
   
   

Register a FIDO Key

To use a FIDO key to log into their user accounts, user must register the FIDO key into their accounts. In this section, we take a web application: Self-Service Console as an example.

1. Lanuch the web browser, and navigate to the application URL. Enter your username, you will see the screen as below:
   (Please note: Currently, only Google Chrome browser supports the FIDO authentication method.) 
   
   
   
   
2. Insert a FIDO key into a USB port, if neccessary, you will be asked to activate your token.
   
   
   
   
3. Enter the "Actication Code" that you have receive via E-mail or SMS text message.
4. Once your token has been activated, it is ready for authentication.
   
   

Authentication

Lanuch a chrome browser and navigate to your application's logon page. Enter the username and insert the FIDO key.

Now, you have successfully logged into the web application via FIDO U2F authentication.