StrongAuth built a Fast Identity Online (FIDO) Universal 2nd Factor (U2F) server into the StrongKey CryptoEngine (SKCE) to support the burgeoning protocol for strong-authentication. The SKCE is now an officially FIDO Certified™ U2F server.

Setup your FIDO security key

 

In order to successfully work with this demonstration, you must have the following:

  1.  A FIDO Certified™ or FIDO Ready™ U2F Authenticator.

     While this document mentions three types of Authenticators in the text - HyperSecu, Neowave and Yubico U2F Authenticators (shown below) - it must be mentioned in fairness to all U2F Authenticator manufacturers, that SKCC has been tested with nearly a dozen different Authenticators – Discretix, eGis Technologies, Entersekt, EyeLock, Infineon, NXP, Plug-Up, Sonavation, ST Microelectronics, etc. - all successfully! As such, SKCC will work with any FIDO Ready™ or FIDO Certified™ U2F Authenticator available on the market.

  2.  A release of the Google Chrome browser that supports the U2F protocol. This document describes the use of SKCC with version 43 or above

  3.  A Microsoft Windows, Apple OS-X or CentOS Linux-based computer.

 

Install Token Driver (Linux PC Only)

Please note that if you are using a Linux PC, you must perform the following task before beginning the demo:

  1.  As the root user, or using sudo, modify the /etc/udev/rules.d/70-u2f.rules file. If it doesn't exist, create it.

  2.  Add the following text to the file:

    • ACTION!="add|change", GOTO="u2f_end"
    • KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="*", ATTRS{idProduct}=="*", TAG+="uaccess"
    • LABEL="u2f_end"
  3. Reboot the Linux PC

 

Install Token Driver (Mac OS)

In order to work with Mac PC, please perform the following task before beginning the demo:

  1.  The first time you use the YubiKey, wait until the green light around the touch button is steady, indicating that your Mac has detected the device.

  2.  The Keyboard Setup Assistant dialog box appears the first time the YubiKey is plugged into the computer. Click Continue. If the message “Your keyboard cannot be identified” appears, click OK or Skip.

  3.  When the Identifying your keyboard dialog box appears, touch the button on your YubiKey.

  4.  In the Select keyboard type dialog box, select ANSI, and click Done.

 

Install Token Driver (Windows PC)

When you insert the FIDO Token into USB port of your PC, Windows should automatically detect the hardware and install appropriate driver.

Applications Demonstration