Winkeo2-C FIDO2
The Winkeo2-C FIDO2 is NEOWAVE’s new generation of USB Type-C security keys, designed for strong and simple authentication on all your devices—PCs, tablets, and smartphones. Compatible with the FIDO2 (CTAP 2.0) and FIDO U2F standards, it offers a high level of protection against phishing and password theft.
With its modern and sleek design, perfectly aligned with the rest of the product range, and its new ergonomic rear button, it combines security, modernity, and ease of use, whether on the go or at the office.
USB-C security key compatible with FIDO2 (CTAP 2.0)
Credential generation, management and storage inside the smart card
Easy to use and to deploy
(no software installation on the client workstation)
Anti-Phishing protection
(in order to replace vulnerable solutions based on one-time passwords or OTP)
The Winkeo2-C FIDO2 USB-C security key complies with the FIDO2 and FIDO U2F specifications of the FIDO Alliance. The FIDO2 and FIDO U2F standards rely on architectures based on asymmetric cryptography and electronical certificates.
The FIDO2 standard enables secure, passwordless authentication. Simply insert the Winkeo2-C FIDO2 key into your computer’s USB port, enter your PIN, and press the button to authenticate. The Winkeo2-C FIDO2 key thus easily replaces your password. It is compatible with Windows 10 / 11 and Microsoft Entra ID. It is also compatible with the FIDO U2F standard, which allows two-factor authentication for your online accounts: social networks, webmail, e-commerce sites, online banks, etc.
Moreover, the security key contains a smart card component certified Common Criteria EAL5+. The implementation of the FIDO standard as well as the integration of a highly secure smart card component thus guarantee a very high level of security.
The Winkeo2-C FIDO2 security key was proven and recognized as reliable by ANSSI (the French National Cybersecurity Agency ) and received the Security visa in 2022 (Certificate ANSSI-CSPN-06/2022). In addition, NEOWAVE is a Microsoft partner for its passwordless authentication solutions (FIDO2).
Features
Interface
USB-C HID
Certifications
- Smart card (QFN format) certified Common Criteria EAL5+
- “Cybersecurity Made in Europe” label
Wide compatibility
• Windows 10/11 with Microsoft Entra ID and over 250 online services such as Gmail, PayPal, OVH, WordPress, and Dropbox
• Identity federations such as Evidian, Ilex, Okta, and Ping Identity
Supported operating systems and browsers
Operating Systems: Windows, Mac OS, Linux, Android, iOS
Browsers: Chrome, Edge, Firefox, Safari
FIDO2 features
• credProtect
• hmac-secret
• Resident keys (rk) – Detectable credential
– Maximum number limited by an available persistent memory (200 to 512 bytes per credential)
• User PIN, PIN 1 and PIN 2 protocols
– PIN length between 4 Unicode characters and 63 bytes
– PIN try limit set to 8. After 8 unsuccessful tries, the authenticator must be reset.
– No default value
– Management of specific PIN policies
• Customization options:
– credBlob
– largeBlobKey
– noMcGaPermissionsWithClientPin
– largeBlobs
– minPinLength
– pinUvAuthToken
– ep – Enterprise Attestation
– authnrCfg
– credMgmt
– setMinPINLength
– makeCredUvNotRqd
– alwaysUv
Associated optional services
Graphical customization: logo, photo, name, unique number …
Supported signature-algorithm
ECC P-256 (secp256r1)
Size / Weight
• Length 39.7 mm / Width 18 mm / Thickness 8.25 mm
• Weight: 5 g