What is a TPM, a Security Key and a Passkey?
A Trusted Platform is a security chip that is part of compatible computers. Please refer to your computer’s technical documentation to make sure they are supported and enabled.
A Security Key generally is an external device which can be plugged in via USB (or can connect via Bluetooth or NFC) to your computer. In order for it to work with EU Login, your device must be FIDO2 compliant, please make check your device’s compatibility on the FIDO alliance website: https://fidoalliance.org/certification/fido-certified-products/
Finally, the Passkey is stored in your mobile device. To use the Passkey you will be requested to use the same method you use to unlock your mobile device (e.g. biometrics, PIN, pattern etc...). Please consult this page for more information about Passkeys: Can I use Passkey with EU Login?
Security Keys and Trusted Platforms (as well as Passkeys) authentication options in EU Login all rely on a technology called WebAuthentication (WebAuthn).
This technology is supported on modern browsers, you can check if your browser is compliant by consulting the following website https://caniuse.com/#search=webauthn.
Please refer to this video or follow the below steps to add your already configured TPM on Windows.
Warning: For the TPM (Windows) option, you will first have to configure your Trusted Platform on your computer through the use of sign in options e.g. FaceID, TouchID/Fingerprint reader, PIN code... Once one of these ways of unlocking your computer is set up, you will only be able to link it to your EU Login account.
To add a TPM or a Security Key to your account:
- Log into EU Login and go to "My Account".
- Click on "Manage my Security Keys and Trusted Platforms”.
Note that this action may require stronger authentication if you already added other second factors to your account. - Either choose "Add a Security Key" or "Add a Trusted Platform", the options are enabled or disabled depending on the compatibility of your browser and device.
- Enter a device name and click on "Submit"
- Follow the on screen instruction to complete the registration process