FEITIAN AllinPass FIDO2 K33 User manual

AllinPass FIDO2
Security Key
User Manual
V1.1

FEITIAN AllinPass FIDO2 K33 is a security key built on
FIDO2.0 Specification which promoted by FIDO alliance
to replace traditional password using biometric or add a
second factor to reduce the complexity of traditional
password scheme.
The AllinPass K33 security key provides users with a
strong, user-friendly, passwordless logon experience.
The Bluetooth® Certified BLE module embedded in the
AllinPass FIDO2 Security Key ensures seamless
communication with most mainstream mobile devices
and PCs. The NFC communication is fully compliant with
the ISO 14443 standard and will work with all compliant
smart card readers.
The FEITIAN AllinPass is a FIDO2 certified authenticator
which effectively protects users against phishing
attacks, MITM attacks, and server credential breaches.
The CC EAL 6+ Secure Element embedded in the
AllinPass FIDO2 Security Key will also provide strong
chip level protection and runs mature algorithms
ensuring data security.
FEITIAN AllinPass FIDO2 is recommend by Microsoft as
the security key for windows hello. For now, we can
support the Azure enterprise deployment to provide
security and usability. Since FIDO2.0 is submitted to
W3C for standardization, most platforms will support
FIDO2.0 authentication.
The embedded high-performance FPC fingerprint
sensor will ensure fluent user experience with low FRR
and FAR. Once enrolled, fingerprint information will only
be processed inside the key and protected by security
chip embedded, which significantly reduces the risk of
fingerprint leaking.
Overview

Warning:
For security concern, the key will be blocked if user fail to
verify fingerprint 15 times (3 times per retry × 5 retry
counts) in a row. User can only unlock via reset device
(All stored data will be lost).
AllinPass FIDO2 {K33}
Driver free. Recognize as a HID device, no driver
needed for Feitian AllinPass FIDO2 to work for
Windows Hello.
Capacitive fingerprint sensor. Fingerprint protected by
secure elements.
Multiple interfaces are supported by AllinPass K33,
including USB-A or USB-C (Required a BSU cable),
NFC which is fully compliant with the ISO 14443
standard, and BLE that enables users to use it on a
mobile application.
●
●
●
Core Features

The AllinPass K33 security key has a red LED, a blue
LED and a green LED. The red one indicates fail. The
green LED means success. And the blue LED is
Bluetooth indicator. Besides those, there is an extra
light showing the status of battery. The green LED
blinks at different frequencies to signal a request for
user presence or user verification. The behavior of
green LED is controlled by the options of command
sent from client. For example, if client sends a
command with uv=true, the green LED will blink
rapidly.
Green LED ON
Red Led ON
Green LED
blinks slowly
Green LED
blinks rapidly
Blue LED
blinks slowly
Blue LED
blinks rapidly
Fingerprint Verification
success / user present /
Power up
Fingerprint Verification fail
/ user absent
Need to touch
Need to verify fingerprint
Bluetooth is in
communication mode
Bluetooth is in
paring mode
LED Indicators

Sync your settings

Other users

Access work or school

Sign-in options

Email & accounts

Your info

Home

Accounts
Find a setting

Settings

Sign-in options
*Some of these settings are hidden or managed by your organization.
Select a sign-in option to add, change, or remove it.
Windows Hello Face
This option is currently unavailable—click to learn more
Windows Hello Fingerprint
This option is currently unavailable—click to learn more
Windows Hello PIN
This option is currently unavailable—click to learn more
Manage
Security Key
Sign in with a physical security key
Manage a physical security key that can log you into
applications.
Learn more
Password
Sign in with your account’s password
Manage how you sign in to your device
If you’ve been away, when should Windows require you to sign in again?
Require sign-in
15 minutes 
 
Before using the AllinPass K33 security key, fingerprint
is always required to be enrolled via a USB cable.
Users can now set up a security key straight from Settings
page if the platform is Windows 10 Insider Preview Build
18298 (19H1) or above. In sign-in settings/Security key,
users are able to manage fingerprint, PIN or reset a
security key.
Otherwise, Users can manage fingerprint, PIN or reset a
security key by using FEITIAN’s BioPass FIDO2 manager if
platform is lower than Build 18298 (19H1). It can be
downloaded from Microsoft Store or via https://www.fts-
afe.com/download/webdownload/BioPass%20FI-
DO2%20Manager.exe.
For the first time using Feitian AllinPass FIDO2, users are
required to initialize and Enroll the first fingerprint using
AllinPass FIDO2 Manager.
Fingerprint enrollment

BioPass FIDO2 Manager

Device Inserted


Help

Test Fingerprint

Remove Fingerprint

Change PIN
Reset Device


Add Fingerprint

●
●
1
2
Launch the BioPass FIDO2 Manager and plug in the
FEITIAN AllinPass K33, you will see the following
windows:
Click this window will pop up, you
can choose to use fingerprint only or to set both pin
and fingerprint. (Once you choose one option, you
cannot change to another without reset the device)
Verification Mode Options
Set Your Verification Mode:
PIN and Fingerprint
Fingerprint Only

Add Fingerprint

Enroll your first fingerprint

Add Fingerprint
Great, touch sensor
Repeatedly lift and rest your finger on the sensor
until setup is complete.
Set PIN
Set PIN for BioPass FIDO2
OK
●
●
3
4
Set Pin and then click OK. Numbers, letters and
special symbols are supported. The PIN has a
limitation of 4 to 63 characters.
Add fingerprint following the instructions.

BioPass FIDO2 Manager

Device Inserted


Help

Test Fingerprint

Remove Fingerprint

Change PIN
Reset Device


Add Fingerprint

Fingerprint 1
●
●
5
6
After the fingerprint successfully enrolled, there
should be a fingerprint listed in the text box.
Then, users can test their fingerprint, remove the
enrolled fingerprints and change pin via the BioPass
FIDO2 Manager to enjoy secure authentication
experience.
This function is for users to test the fingerprint verification.
NOTE This testing function will trigger the block device procedure
mentioned above.
Test Fingerprint

BioPass FIDO2 Manager

Device Inserted


Help

Test Fingerprint

Remove Fingerprint

Change PIN
Reset Device


Add Fingerprint

Fingerprint 1
Fingerprint 2
●
●
●
1
2
3
Make sure to choose the right fingerprint to delete.
(“Fingerprint 2” as shown in example)
If there is a Pin, users need to choose a verification
option.
After verification, the fingerprint will be removed.
Verification Options
PIN
Fingerprint
Remove fingerprint

Just fill in all the text boxes for changing Pins
Change PIN
Change PIN for BioPass FIDO2
Old PIN
New PIN
Confirm PIN
OKCancel
Change PIN
NOTE when you reset your device, all data stored will be deleted including
your credentials. And the RESET operation requires to be done
within 10 minutes after it is powered up.
Reset Device

Before using the Bluetooth of AllinPass K33 to do
authenticate, the security should be paired with your
local host.
Windows 10 host machine:
Bluetooth pairing
●
●
1
2
Go to ‘devices’ in Windows settings page and click
‘Add Bluetooth or other device’.
On the popped up window, choose ‘Bluetooth’.

●
3Long press the button on the side of AllinPass
security key for at least 5 seconds until blue LED
blinks rapidly, and choose the device name showed
on the popper up window. Then the token is paired to
the host machine.

Product
Specification
Security Algorithm
Interface
Communication Protocol
Working Voltage
Working Current
Power
Working Temperature
Storage Temperature
Light
Casing Material
Size
ECDSA, SHA256, AES, HMAC,
ECDH
USB-A or USB-C via USB cable,
NFC,BLE
CTAPHID
5.0V
Stand-by: 80mA
Stand-by: 0.4W
-10℃- 45℃
-20℃- 70℃
Green LED, Red LED, Blue LED
PC,ABS
57*40*6mm

Fingerprint
Module
Image Pixel
DPI
Sensor Service Life
Storage
Autonomic Learning
False Accept Rate
False Reject Rate
Recognition Time
Acquisition Time
160 × 180 pixel
508 DPI
More than 200k times
50 fingerprints
Yes
<0.001%
<1%
<0.6s(for 120 Finger Points)
<180 ms

©2018 FEITIAN Technologies Co., Ltd.
www.ftsafe.com