Skip to main content

How to Configure and Manage YubiKey User Enrollment for Windows Desktop Login 2.0 (End User) **EARLY ACCESS**

  • Updated
Operating System Windows 10 and up
Feature Beyond Identity Windows Desktop Login with YubiKeys
Limitations

This release of our product enables customers to protect the following:

  • Windows desktop logins
  • Incoming RDP connections (not officially tested, but evidence suggests it works)

Please note: Desktop logins within VDI environments (e.g., Citrix, Omnissa) are not supported at this time.

We are continuously expanding support for additional use cases.


Beyond Identity integrates with Microsoft Windows to let users log in securely to their desktops without passwords—using YubiKeys, a type of hardware security key, to protect against phishing attacks. This advanced login method, known as phishing-resistant passwordless authentication, helps keep your organization safe from credential-based threats.

This article explains how users can enroll their YubiKeys using the Beyond Identity Authenticator for Windows to enable desktop login. To get started, follow the steps below.

 

Prerequisites

  1. A physical YubiKey 5 series manufactured by Yubico such as:
    • YubiKey 5C NFC (USB-C)
    • YubiKey 5C NFC (USB-A)
    • YubiKey 5C Nano (USB-C)
    • YubiKey 5C Nano (USB-A)
    • YubiKey 5C
    • YubiKey 5Ci
    • YubiKey 5C NFC FIPS  (USB-C)
    • YubiKey 5C NFC FIPS (USB-A)
    • YubiKey 5C Nano FIPS (USB-C)
    • YubiKey 5C Nano FIPS (USB-A)
    • YubiKey 5C FIPS
    • YubiKey 5Ci FIPS
       
  2. An approved desktop or laptop with a USB port or compatible slot to connect the YubiKey.

 

Steps

1. Download the YubiKey Smart Card Minidriver for Windows. Be sure to select the version that matches your Windows system specifications:

We recommend downloading either the YubiKey Minidriver for 32-bit systems (Windows Installer), or the YubiKey Minidriver for 64-bit systems (Windows Installer). 


2. Next, begin the Minidriver installation process.

install minidriver.png

 

3. Once the Minidriver is installed, download the Beyond Identity Authenticator for Windows, if you haven’t already, by visiting: https://app.byndid.com/downloads.

Click the Advanced Installation tab and download the Authenticator for Windows System (.msi x64). 

select the windows auth.png


4. Install the Beyond Identity Authenticator in your Windows machine by following the steps on your browser. 

instructions.png

 

5. After following installation instructions, at the Welcome screen, click Next. 

welcome.png

 

6. If you are extending your passkey from another device to your Windows machine, follow these steps first. Be sure to return to this article after extending your passkey to continue enrolling your YubiKey. 

If this is your first time obtaining a new passkey, click New to Beyond Identity on the screen, and follow the instructions here. Be sure to return to this article after setting up your new passkey to continue enrolling your YubiKey. 

new to BI passkey enrollment.png

 

7. Next, click Manage Desktop Login from your Authenticator's dialog window. 

If you do not see Manage Desktop Login, contact your administrator. 

manage desktop login.png

 

8. On the next screen, you will be prompted to plug in your Security Key, in this case, your YubiKey. 

plug in key.png

 

9. Once the security key is successfully detected, you will be prompted to create a PIN that is either 6 or 8 digits long. Make sure to follow your organization’s security guidelines for creating PINs to ensure it is secure and not easily guessed. Avoid using simple or common combinations such as 123456 or 000000.

set up pin.png

 

10. After entering the PIN number, click Next. 

PIN set click Next.png

 

11. A confirmation message will display when the YubiKey has been successfully enrolled. 

successful key enrollment.png

Now, next time you sign in to Windows, you can use your YubiKey and PIN to log in.

 

Related articles

Comments

0 comments

Please sign in to leave a comment.