VinCSS FIDO2 Touch Internet Security Services User Manual

VinCSS FIDO2 Touch Internet Security Services User Manual

Overview

VinCSS FIDO2® Touch 1 security key is a FIDO2 certified authentication. FIDO2 provides a password less way to authenticate users and addresses security, convenience, privacy, and scalability issues that passwords do not. The number of accounts that can be registered with the VinCSS FIDO2® Touch 1 security key is unlimited when using it for two-factor authentication. It is limited to 50 accounts for passwordless authentication.

VinCSS FIDO2® Touch 1 security key is not a USB storage, so there is no risk of malware infection. The authentication key only functions to authenticate user and does not store any other information, ensuring privacy.

VinCSS FIDO2® Touch 1 security key requires user to interact directly with the key so it cannot be remotely attacked, the key that applies the FIDO2 standard should protect users from phishing attacks on the internet, MITM (man-in-the- middle attacks), skimming, etc. The key’s hardware is designed to protect the data in the authentication key from being tampered with.

Diagram

The VinCSS FIDO2® Touch 1 Security Key

Meaning of the LED indicator

Solid red
| The security key is being connected to the device, not in the process of processing and interacting| User interacts with the device
Solid green
| The security key is being connected to the device, not in process and interaction| User does not interact with the device
Coloul ash| The security key is being connected to the device, in process and requires user interaction| Request user to conform by touching the yellow icon on the security key

Connect to Computer

Connect the VinCSS FIDO2® Touch 1 security key directly to the computer via the USB port

Connect your Security Ke

The first step when connecting the security key is to set up the PIN. There are serval available tools that can be used for set up security key listed below:

| Windows built-in Security Key Manager| Chrome built-in Security Key Manager
---|---|---
Functions|

• Set up/change the PIN of the security key
• Reset security key

|

• Set up/change the PIN of the security key – Reset security key
• Managing sign-in d

Actions| “Seings” => “Accounts” => “Sign-in options” => “Security Key| “Chrome Seings” => “Privacy and security” => “Security” => “Manage security keys”

In the case of forgeing the PIN of the VinCSS FIDO2®

Touch 1 security key, users can reset the key, but this will make the previously registered services unable to authenticate by using the key. Aer reseing, the device becomes a new security key, so services need to be re- registered to authenticate. In case the PIN code is entered incorrectly many times (more than 8 times), the device will be locked permanently, user will also be forced to reset to use the VinCSS FIDO2® Touch 1 security key as a new device.

Connection status table of the VinCSS FIDO2® Touch 1 security key

Please keep updating to the latest operating system(s)/soware for maximum compatibility.

CONNECTION FORM CONVERSION TABLE

| Google Chrome/ Microsoft Edge/ Firefox
---|---
macOS
Support from macOS version 10.15 and above| U2F| FIDO2
iOS
Support from iOS version 13.3 and above| |
Support from Windows 8.1 version and above| |
Support from Android version 9 and above| |

• CHROME: Support from chrome version 100:0.4896 and above
• EDGE: Support from Microsoft Edge version 93 and above
• FIREFOX: Support from Firefox 92 version and above
• SAFARI: Support from Safari version 13 and above

PROVISION YOUR SECURITY KEY WITH WEB SERVICES

The first step of using FIDO authentication is to register a security key for your account. To register a security key for your account, please follow the steps below:

Step 1: Authenticate you account as normal with PC and a Web Autobahn supped browser.
Step 2 : Go to account seings – login method – Set up security key.
Step 3: Connect the security key to the device via USB and follow the instruction messages displayed on the screen.

Note: Refer to the Connection form conversion table above to choose the most suitable for your device

Step 4: Touch the sensor to demonstrate the user’s presence when LED indicator blinks. The registration process will be completed in a moment.

AUTHENTICATE TO WEB SERVICES

Aer registration, users can authenticate to their account password lawlessly or as a strong second factor with the security key.

• For Password less Authentication: user can click “sign-in with security key” in the sign in window, then follow the authentication instructions displayed on the screen.
• For Two Step Authentication: users are required to type authentication with username and password as usual, then two step verification window will pop up, user follow the instructions shown on the screen to complete the authentication.

FAQ

What to do when the VinCSS FIDO2® Touch 1 security key is lost?

In case oflosing theVinCSS FIDO2®Touch 1 security key, you can use the backup methods registered during the rst key registration process to log in to your account, and unlink the lost key. The backup methods can be one-time recovery code, SMS OTP or Authenticator applications on mobile devices.

In case of losing the VinCSS FIDO2® Touch 1 security key, will the user

lose his account?

When a The VinCSS FIDO2 Touch 1 security key is lost, the user will not lose an account, because this key does not contain all the information necessary for logging in.

What services are currently available to support the VinCSS FIDO2 Touch 1

security key?

Most online services now support authentication with the VinCSS FIDO2® Touch 1, for example: Account Microsoft (Outlook, Office, Skype, OneDrive, Xbox Live, Bing...) Account Google (Drive, Google Cloud, Hangout, Gmail, Play, YouTube...) AWS Web Service Facebook GitHub Dropbox Salesforce Gitlab Jira

Does using the VinCSS FIDO2® Touch 1 security key, which I oen plug in from

several computers, increase the danger of malware infection between computers?

No, because the VinCSS FIDO2® Touch 1 security key is not a USB storage, there is no risk of malware infection

Where will the VinCSS FIDO2® Touch 1 security key be guaranteed?

Customers who purchase the authentication key can send product needed warranty through distributions, or send the products directly at the VinCSS center in Hanoi and Ho Chi Minh City

Does using the VinCSS FIDO2® Touch 1 security key aect the policy of

changing passwords within 90 days being applied at most companies today

VinCSS FIDO2® Touch 1 is designed not connected to centralized password storage service, so the password change policy does not aect the key.

SPECIFICATION

VinCSS FIDO2® Touch 1 security key

For fuher infomations, please contact sales@vincss.net, Or your service provider.

VinCSS – A member of FIDO ALLIANCE

The FIDO Alliance is an open industry association with a focused mission: Authentication standards to help reduce the world’s over-reliance on passwords

VINCSS INTERNET SECURITY SERVICES JOINT STOCK COMPANY

• Floor 20A, Vincom Center Dong Khoi, 45A Ly Tu Trong street, Ben Nghe ward, District 1, Ho Chi Minh city
• Email: sales@vincss.net
• Website: https://passwordless.vincss.net

References

• VinCSS - Internet Security Services

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>