VinCSS FIDO2 Fingerprint Security Key User Manual

VinCSS FIDO2 Fingerprint Security Key

Product Information

The product is a security key that provides authentication for  various devices. It features a fingerprint sensor, LED indicator, Bluetooth connectivity, NFC activation, and a Type C port for charging.

LED Indicator
The LED indicator on the security key has different colors and blinking patterns to indicate various statuses

to be
charged| Using Bluetooth or NFC
Solid amber| The security key is being charged| Connecting with USB
Solid green| The security key is fully charged| Connecting with USB
Solid blue| Bluetooth mode On, the security key is connected to a Bluetooth
device| Using Bluetooth
Blinking blue| The security key enters the pairing mode| Using Bluetooth
Solid purple| NFC activated| Using NFC
Blinking white quickly| The security key is processing request and requires user
interaction| The white light does not flash/flashes slowly

Connect Status Manipulation
The security key has different manipulation actions and states

connection, LED is
off)
Pairing Mode| Hold down the fingerprint sensor for 5 seconds| The security key in Bluetooth enabled state
Note| Make sure LED indicator shows solid blue| The battery capacity of the security key is enough for use. If
the LED shows red, please plug in the charger and try again.
Turn off Bluetooth| The security key in Bluetooth or NFC enabled state| Double-tap the fingerprint on the sensor

Note : The security key will automatically connect to the device if the security key has been connected before.

Overview

• VinCSS FIDO2® Fingerprint security key is a FIDO2 certified authenticator. FIDO2 provides a pass wordless way to authenticate users and addresses security, convenience, privacy, and scalability issues that passwords do not. The number of accounts that can be registered with the VinCSS FIDO2® Fingerprint security key is unlimited when using it for two-factor authentication. It is limited to 50 accounts for passwordless authentication.
• VinCSS FIDO2® Fingerprint security key is not a USB storage, so there is no risk of malware infection. The authentication key only functions to authenticate user and does not store any other information, ensuring privacy.
• VinCSS FIDO2® Fingerprint security key requires user to interact directly with the key so it cannot be remotely attacked, the key that applies the FIDO2 standard should protect users from phishing attacks on the internet, MITM (man-in-the-middle attacks), skimming, etc. The key’s hardware is designed to protect the data in the authentication key from being tampered with.

USB cable, BLE, and NFC are the three connection ways that the VinCSS FIDO2® Fingerprint security key incorporates. Users are supported this on any contactless or wireless client device, such as a desktop computer, laptop, tablet, or smartphone, and complete secure FIDO2® authentication.

Diagram

The VinCSS FIDO2® Fingerprint Security Key

Meaning of the LED indicator

**Blinking red 3 times in a row**

| The built-in battery is running low and needs to be charged| Using Bluetooth or NFC
Solid amber

| The security key is being charged| Connecting with USB
**Solid green**

| The security key is fully charged| Connecting with USB
Solid blue

| Bluetooth mode On, the security key is connected to a Bluetooth device| Using Bluetooth
Blinking blue

| The security key enters the pairing mode| Using Bluetooth
Solid purple

| ** NFC activated| Using NFC
Blinking white quickly**

| The security key is processing request and require user interaction| Require user to authenticate with fingerprint
The white| The security key is processing request and require user interaction| Require user to authenticate by touching the security key
light does not
flash/flashes
slowly

Connect Status

Manipulation| The original state| Action| The next state| Note
---|---|---|---|---
Turn on Bluetooth| The security key in sleep state (no USB connection, LED is off)| Hold down the  fingerprint sensor for 5 seconds| LED indicator shows solid blue| Make sure the battery capacity of the security key is enough
| | | | for use. If the LED shows red, please plug in the charger and
Pairing Mode| The security key in Bluetooth enabled| Hold down the fingerprint sensor for 5| LED indicator flashes blue
| state| seconds| | try again.
| The security| Double-tap| |
Turn off Bluetooth| key in Bluetooth or NFC enabled| the fingerprint on the| LED is off
| state| sensor|

Note : The security key will automatically connect to the device if the security key has been connected before

Connect to Computer

Note

• To extend the bakery’s standby time, the battery will be placed in sleep mode. The first time the device is used, the user must connect it directly using a USB type-C cable.
• Currently, the macOS operating system only suppos using the VinCSS FIDO2 Fingerprint security key through a USB connection, not yet supposing users to use it via BLE and NFC connections.(However, Bluetooth/NFC connection can still be used on the security key if the app suppos FIDO2 authentication via Bluetooth/NFC connection).
• Windows operating system sumps using all 3 forms of the security key connection via USB, Bluetooth and NFC (requires hardware suppo˝).

Connecting via USB

• Plug the VinCSS FIDO2® Fingerprint security key into your computer using USB type-C cable, and make sure the security key is not in Bluetooth or NFC working mode.

Connecting via NFC

• Put the VinCSS FIDO2® Fingerprint security key on the NFC reader. When the LED indicator on the key turns purple, the VinCSS FIDO2® Fingerprint security key can be used.
• To disconnect NFC, liˆ the security key o˛ the NFC reader. Disconnection is successful, the purple LED will be.

Connecting via BLE

• Turn on the Bluetooth mode of the security key.
• Turn on the Bluetooth connection mode of the device then connect to the security key named V-FIDO2.
• Enter the pairing code to connect.
• The pairing code is a sequence of the last 6 digits taken from the serial code (In case the serial code has only the last 5 digits, enter the number “0” at the beginning of the serial number (for example: XXX123456 => 12345 or XXX12345 => 012345).
• Bluetooth connection is successful, LED shows solid blue.

Connect your Security Key
The step when connecting the security key is to set up the PIN and Fingerprint. There are serval available tools that can be used for set up security key listed below

| Windows built-in Security Key Manager| Chrome built-in Security Key Manager
---|---|---
Functions|

• Set up/change the PIN of the security key
• Add/Remove fingerprint
• Reset security key

|

• Set up/change the PIN of the security key
• Add/Remove fingerprint
• Reset security key
• Managing sign-in data

Actions|

• “Settings”
• => “Accounts”
• => “Sign-in options”
• => “Security Key”

|

• “Chrome Settings”
• => “Privacy and security”
• => “Security”
• => “Manage security keys”

Note : In the case of forgetting the PIN of the VinCSS FIDO2® Fingerprint security key, users can reset the key, but this will make the previously registered services unable to authenticate by using the key. After resetting, the device becomes a new security key, so services need to be re-registered to authenticate. In case the PIN code is entered incorrectly many times (more than 8 times), the device will be locked permanently, user will also be forced to reset to use the VinCSS FIDO2® Fingerprint security key as a new device.

Connection status table of the VinCSS FIDO2® Fingerprint security key

Note : Please keep updating to the latest operating system(s)/software for maximum compatibility.

CONNECTION FORM CONVERSION TABLE

• CHROME Support  from chrome version 100.0.4896 and above
• EDGE Support from Micros’ Edge version 93 and above
• FIREFOX Support  from Firefox 92 version and above
• SAFARI Support from Safari version 13 and above

CONNECTION FORM CONVERSION TABLE

Note: The security key will automatically connect to the  device if the security key has been connected before.

PROVISION YOUR SECURITY KEY WITH WEB SERVICES

The first step of using FIDO authentication is to register a security key for your account. To register a security key for your account, please follow the steps below:

1. Step 1
   Authenticate you account as normal with PC and a WebAuthN supported browser.

2. Step 2
   Go to account settings – login method – Set up security key.

3. Step 3
   Connect the security key to the device using 1 of 3 methods : USB, BLE or NFC and follow the instruction messages displayed on the screen.
   Note : Refer to the Connection form conversion table above to choose the most suitable for your device.

4. Step 4
   Fingerprint authentication/Touch the sensor to demonstrate the user’s presence when LED indicator blinks. The registration process will be completed in a moment.

AUTHENTICATE TO WEB SERVICES
After registration, users can authenticate to their account pass wordlessly or as a strong second factor with the security key.

• For Pass wordless Authentication : user can click “sign-in with security key” in the sign in window, then follow the authentication instructions displayed on the screen.
• For Two Step Authentication : users are required to type authentication with username and password as usual, then two step verification window will pop up, user follow the instructions shown on the screen to complete the authentication.

FAQ

1. What to do when the VinCSS FIDO2® Fingerprint security key is lost?

   • In case of losing the VinCSS FIDO2® Fingerprint security key, you can use the backup methods registered during the first key registration process to log in to your account, and unlink the lost key. The backup methods can be one-time recovery code, SMS OTP or Authenticator applications on mobile devices.

2. In case of losing the VinCSS FIDO2® Fingerprint security key, will the user lose his account?

   • When a The VinCSS FIDO2® Fingerprint security key is lost, the user will not lose an account, because this key does not contain all the information necessary for logging in.

3. What services are currently available to support the VinCSS FIDO2® Fingerprint security key?
   

   • Most online services now support authentication with the VinCSS FIDO2® Fingerprint security key, for example
   • Microsoft Account (Outlook, Office, Skype, OneDrive, Xbox Live, Bing…)
   • Google Accounts (Drive, Google Cloud, Hangout, Gmail, Play, YouTube…)
   • AWS Web Service
   • Facebook
   •  GitHub
   • Dropbox
   •  Salesforce
   • Gitlab
   • Jira
     

FAQ

1. Does using the VinCSS FIDO2® Fingerprint security key, which I often plug in from several computers, increase the danger of malware infection between computers?

   • No, because the VinCSS FIDO2® Fingerprint security key is not a USB storage, there is no risk of malware infection.

2. Q: How can I know if the battery is fully charged?
   

   • When a USB cable is plugged in, the charging process begins immediately. The LED will blink red three times in a row if the battery level is low (below 20%), amber if the security key is charging, and green if the battery is fully charged. You can use the VinCSS FIDO2® Fingerprint security key while it’s charging.

3. Where will the VinCSS FIDO2® Fingerprint security key be guaranteed?

   • Customers who purchase the authentication key can send product needed warranty through distributions, or send the products directly at the VinCSS center in Hanoi and Ho Chi Minh City.

4. Does using the VinCSS FIDO2® Fingerprint security key affect the policy of changing passwords within 90 days being applied at most companies today?

   • VinCSS FIDO2® Fingerprint is designed not connected to centralized password storage service, so the password change policy does not affect the key.

SPECIFICATION

For fisher information’s, please contact sales@vincss.net Or your service provider.

VinCSS – A member of FIDO ALLIANCE
The FIDO Alliance is an open industry association with a focused mission: Authentication standards to help reduce the world’sover-reliance on passwords.

VINCSS INTERNET SECURITY SERVICES JOINT STOCK COMPANY

• Floor 20A, Vincom Center Dong Khoi, 45A Ly Tu Trong street, Ben Nghe ward, District 1, Ho Chi Minh city
• Email : sales@vincss.net
• Website : https://passwordless.vincss.net

References

• VinCSS - Internet Security Services

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>