Windows Login Using FIDO2 USB Key
End User Training Guide • Secret Double Octopus (SDO)
Purpose
This guide explains how to securely log in to a Windows workstation using a FIDO2 USB key with Secret Double Octopus (SDO). Depending on your organization’s policy, a PIN may be required before touching the key.
Prerequisites
- You have a working FIDO2 USB key enrolled for your account
- Your Windows device is configured for FIDO2 authentication
- If PIN is enabled, you know the PIN for your FIDO2 key
Login Flow Overview
- Select FIDO2 (PIN) on the Windows login screen
- Enter the PIN (if required)
- Touch the key to complete authentication
1
Select FIDO2 (PIN)
Select FIDO2 (PIN) from the dropdown. The PIN requirement is an SDO option that can be enabled or disabled.
2
Enter the FIDO2 Key PIN
Enter the known PIN code for the FIDO2 key.
3
Submit the PIN
Click the GO arrow, or press Enter.
4
The Key Will Begin to Flash
The FIDO2 key will begin to flash, indicating it is ready for verification.
5
Touch the FIDO2 Key
Touch the FIDO2 key to complete authentication.
6
User Is Logged In
The user gets logged into their computer.
7
Verify the Correct User
Verify the correct Windows user is logged in.
Notes & Tips
- If the key does not flash, remove and re-insert the key and try again.
- If you enter the wrong PIN too many times, the key may lock and require reset (contact IT).
- If login repeatedly fails, contact your organization’s IT/Helpdesk team.