Using G-Series Security Key
How do you enroll your fingerprint to the G-Series security key?
There are two different ways to enroll fingerprints: Microsoft Windows 1903 and later. and G-Series BioManager™ application.
How many fingerprints can I enroll?
A total of 3 fingerprints can be enrolled on each key.
How many resident keys do G-Series keys hold?
G-Series keys can hold up to 150 resident keys.
What should I do if the key is locked?
For security reasons, G-Series security key will automatically lock if the registered fingerprint fails 15 times in a row. If the "RED" light is turned on the device, open BioManager™ and enter your PIN to unlock the device.
Can I reset the security key to factory setting?
Factory Reset can be done through BioManager™. After installing BioManager™, click the Factory Reset button and re-insert the device. Next touch the sensor within 10 seconds. You can refer to the G-Series Security Key Manual page 18 for details.
What happens if my key is lost or stolen?
Best practice is always to ensure that you register more than one security key. Most web sites that accept FIDO2 or U2F allow you to register more than one key. This gives you a back up should you lose a key.
Supported Platform · Environment
Which OS does G-Series BioManager™ support?
BioManager™ supports Windows and macOS.
Can I use G-Series security key with Windows PC, Mac?
Yes, G-Series security key works with Windows PC and Mac. Moreover it also works on Linux, Chromebook, and Android (no support for BioManager).
Which web browsers do you support?
G-Series security key works with all major web browsers, including Google Chrome, Microsoft Edge, Mozilla Firefox, Apple Safari, etc.
Which major online services are available that support FIDO2?
Most major online service providers support/implement FIDO2 certification. Currently, Microsoft Azure Active Directory, Microsoft, GitHub, Dropbox, Twitter, Login.gov etc. provide FIDO authentication service.
G-Series Security Key Features
Can I login to Microsoft Azure Active Directory(AD) using my security key?
G-Series security keys fully support Microsoft Azure AD. It can be used to sign into Azure joined Windows PC whether you are online or offline/airplane mode.
Can I use my security key in place of other vendor’s U2F key?
G-Series security keys are now available on a variety of operating systems and platforms that offer U2F and FIDO2 certification services. Therefore, G-Series security keys can be used wherever U2F or FIDO2 is supported.
Can I use the security key on different computers?
Sure! G-Series Security key is a roaming authenticator. It can be used in conjunction with more than one user device supported USB port.
Is my fingerprint data stored in the computer during enrollment process?
G-Series security key stores scanned and encrypted fingerprint data in the special secure storage called TrustZone®. The stored data can never leave the key, even during registration or authentication.
How to enroll the fingerprint to the G-Series security key?
Which certification level do you have?
G-Series security key is the world’s first authentication device to achieve FIDO2 Level 2 security certification by satisfying secure operating environment requirements by the FIDO Alliance.
What is the difference between FIDO Certified Authenticator Level 1 and Level 2?
FIDO2 Level 2 are certified with the evaluations for physical security and operating environment besides Level 1 security requirements. It also requires the strength of the cipher 112 bit and more, key protection and Random Number Generator. Visit FIDO Alliance for more information.
Who should I contact if I have some technical questions or want to resell your product?
Please send email to firstname.lastname@example.org
Can I use my security key without enrolling the fingerprint in U2F environment?
In U2F environment, using the security key without enrolling the fingerprint allows anyone with my security key access to my account. Therefore, this is NOT recommended. If you want to securely protect your account, simply register your fingerprint according to the enroll fingerprint procedure then touch the fingerprint sensor on the key to complete the login and access the account.
Do you support Windows Hello login option?
The TrustKey G310H and G320H Security Keys do support Windows Hello login option. Note that all G-Series security key can be used to sign into Microsoft Azure joined Windows PC.
Is my fingerprint image stored in the computer during the enrollment process?
G-Series security key stores the scanned and encrypted fingerprint data in the secure storage area. The stored data never leaves the key, even during registration or authentication.