Authenticating with FIDO2 (CTAP) Security Key

You can use HID Crescendo Key Series as a FIDO2 security key (or companion device) to authenticate without entering your username or password.

You simply need to plug in your HID Crescendo Key Series and press the button to sign in. Depending on your organization’s deployment, you might also need to provide a PIN code.

For example, on a Microsoft Windows 10 device (with the 1809 update) and using Microsoft Edge, you can simply press the HID Crescendo Key Series's button to authenticate to a wide range of applications and services including your Microsoft account, Office 365 or Store.

This passwordless access method also works across all Microsoft Windows 10 Azure AD domain-joined machines in an organization, without having to set up Windows Hello for each device.

Note: It is recommended that you plug the HID Crescendo Key Series into a USB port and wait for the ready (steady Green light) or idle (flashing Green light) mode before registration/authentication.

Register for FIDO2 Authentication

The registration process varies according to the website or service you want to access.

For example, refer to the Microsoft instructions at https://support.microsoft.com/en-us/help/4463210/windows-10-sign-in-microsoft-account-windows-hello-security-key

The following procedure uses the Microsoft setup procedures for a USB security key to illustrate the common steps.

Prerequisites: Your Microsoft Windows 10 system must have the 1809 update.

Start the FIDO2 Registration Process

  1. Plug the HID Crescendo Key into a USB port and wait for a steady or flashing Green light.
  2. Using Microsoft Edge, sign-in to your Microsoft account.
  3. Select Security and then More security options (at the bottom of the page).
  4. Under Windows Hello and security keys, select Set up a security key.
  5. Select USB device and click Next.

Register your FIDO2 Security Key

  1. If required, create or enter a PIN.

    The HID Crescendo Key light flashes Orange.

  2. Press the HID Crescendo Key Series button once.

     

  3. If necessary, rename your HID Crescendo Key to distinguish it from other keys.

Validate the Registration

  1. Sign out of your Microsoft session.
  2. Sign in again, selecting use a security key.
  3. If required, enter your PIN.

    The HID Crescendo Key light flashes Orange.

  4. Press the HID Crescendo Key Series button once.

Authenticate with FIDO2

Prerequisites: You have registered for FIDO2 authentication with the website or service you want to access.

The following procedure uses authentication to Microsoft Office 365 with a USB security key to illustrate the common steps.

Start the FIDO2 Authentication Process

  1. Plug the HID Crescendo Key into a USB port and wait for a steady or flashing Green light.
  2. In the Microsoft Sign in page, enter your user ID (email, phone, …).
  3. Select Sign in with Windows Hello or a security key.

Authentication with the HID Crescendo Key Series

  1. If required, enter the PIN and click OK.

    The HID Crescendo Key light flashes Orange.

  2. When prompted to take action, press the HID Crescendo button once.

Authenticate with FIDO2 in Contactless Mode
(Android and iOS Only)

Prerequisites:

Start the FIDO2 Logon Process on your Android Device

In the web site or app logon page, enter your username.

Authenticate via FIDO2

The FIDO2 authentication prompt is displayed.

Tap the HID Crescendo Key as close as possible to the device’s NFC antenna.

Tip! To locate the antenna, refer to the documentation provided with the device.

Validate the Authentication

Tap the screen of your device to validate the authentication.