Skip to main content
European Union flag
English
EU Login Portal

How can I add a Security Key or a Trusted Platform?

This article describes what Trusted Platforms and Security Keys are and how you can set them up as EU Login authentication methods.

Valid for

What is a Trusted Platform (TPM) and a Security Key?

A Trusted Platform Module (TPM) is a small security chip available in nearly all computers produced after 2010 and running Windows 10 or later versions. For Apple, this security chip is known as the T1 (or later version) chip. If your computer is compatible with TPM*, it will allow you to authenticate on EU Login with your biometrics or PIN code used to access your computer. 

A Security Key is a portable device that you can use across computers, smartphones and tablets and which can be plugged in via USB or can connect to your devices via Bluetooth or NFC. 

Note: Before adding a Trusted Platform or a Security Key, make sure it is already configured on your device.

*Please refer to the mandatory requirements to get more information.

Important

Click here to read the mandatory requirements and make sure you are ready to start

In order to use the Trusted Platform or Security Key as authentication option, make sure that your equipment fits to these options.

For Trusted Platform Module: 

  • Refer to your computer’s technical documentation and make sure Trusted Platform Module (TPM) on Windows, or the Secure Enclave on Apple devices is supported and enabled.
  • Check if your internet browser is compliant by consulting the following website https://caniuse.com/#search=webauthn.

For Security Key:

Instructions

Watch the video tutorial or access instructions illustrated step by step below the video.

Step-by-step

I. If you want to use the TPM, set up first the TPM of your computer

Click here to read the instructions for TPM
On Windows
  1. Right click on the Windows menu icon and go to Settings, Accounts, Sign-in options.
  2. Select the Windows Hello option you (would like to) use to unlock your device. 
  3. Once you have selected your preferred Windows HelloSign-in option, read the on-screen instructions and perform the required steps, if the sign-in option is not set up yet.
  4. Once your Windows HelloSign-in option is set up, go to the step II.
On Apple
  1. Click on the Apple menu and go to System Settings or System Preferences then Passwords. 
  2. Go to Touch ID & Passwords and, if prompted, enter your Mac's password. 
  3. If you haven't defined a Touch ID, click Add Fingerprint and follow the on-screen instructions.
  4. Under Touch ID & Passwords, turn on the following options and follow the on-screen instructions:
    1. Unlocking your device 
    2. Auto-filling passwords

II. Set up your Security Key or TPM as authentication method on EU Login

1. Go to the EU Login homepage (ecas.ec.europa.eu/cas/) and enter your email address or unique identifier.

Click on the arrow of the Choose your verification method drop-down list, select Password, then enter your password and select Sign in.

EU Login - Sign in to continue

2. In the top right corner, click the Settings cogwheel icon next to your name and select My Account.

EU Login - My Account

3. Click on Manage my Security Keys and Trusted Platforms.

Note: This action may require stronger authentication if you already added other second factors to your account.

EU Login - Manage my Security Key and Trusted Platforms

4. Select either Add a Trusted Platform or Add a Security Key.

Note: The options are enabled or disabled depending on the compatibility of your browser and device.

EU Login - Add Security Key and Trusted Platforms

5. Enter a device name and click on Submit.

Depending on your browser, a pop-up may appear saying “Credential registration in progress.”
Click Proceed to continue.
 

Note: Do not select “Anonymise anyway”, otherwise the authentication method will not work.

EU Login - Add a device name
If you have chosen the Trusted Platform Module as authentication method

Follow the on-screen instructions to complete the registration process.

Notes: 

  • Your computer will prompt you to use the sign-in option you have defined for your device.
  • The illustration here is valid for Windows 11 computer using Google Chrome internet browser only.
  • You may be prompted with other screens if you user other devices and other internet browsers.
  • Once your computer has been added as a Trusted Platform, a confirmation message is displayed. You can now use it to authenticate on EU Login.

 

Windows 11 - Passkey Pop up
If you have chosen the Security Key as authentication method
  1. Identify in the options/choices that are suggested if you can find Security key.
  • If yes, select Security Key.
  • If not, select Use another device or Cancel. 



Notes

  • Based on your computer operating system (Windows, macOS, …), the internet browser (Microsoft Edge, Mozilla Firefox, Google Chrome,…) and the security key model you are using while performing these steps, below instructions may slightly differ (i.e. there is a significant difference between Windows 10 and Windows 11 behavior in the sequence of steps to add your security key).

  • In below example, a laptop has been used with Windows as operating system and Google Chrome as internet browser.

     

Windows 11 - Passkey Pop up - Security Key

2. Select OK.

Windows - Security key setup

3. Select OK.

Windows - Continue setup

4. Insert your security key into the USB port of your device (computer).

Windows - Insert your security key

5. Define a PIN code for your security key and enter it in both fields, then select OK.

Windows - Security key - Define PIN code

6. When prompted touch your security key itself to finalise its configuration.

Windows - Touch your security key