Entra or Azure AD (AAD) - Workstation Setup

Azure AD (AAD) Setup

1. Sign into your Azure portal as an administrator.

2. Browse to Microsoft ID Entra > Security > Authentication methods > FIDO2 Security Key (Preview).

3. Under the method FIDO2 Security Key, set the following options and save the configuration:

   1. Enable - Yes or No.

   2. Target - All users or Select users.

   3. Enforce attestation – Set to No.

Entra Azure AD setup screen

Prepare End User Devices

Setting up User Devices

End user devices require the latest Microsoft operating system and Keyek’s Keyek Companion Service. If the device you are preparing does not have Bluetooth, please install the USB BT adaptor provided with the Keyek Card when completing end user set-up.

Update all Devices to 20H2 (minimum)

Keyek Companion Service

Run the Keyek Companion installer package which will set the service to run in the background, enabling the Keyek Card to securely communicate with Keyek via the PC’s Bluetooth connection. You can find the installer at Downloads section.

Connecting and Activating Keyek Card

The following sections can be completed by end users; however, certain tasks, such as setting a PIN, must be done by the end user only. Users can refer to the Keyek Card User Guide for assistance. For more information on this, refer to Set your PIN section.

Before a Keyek Card can be used for authentication, it must be paired with a PC. Pairing the Keyek Card follows the same procedure as pairing any other Bluetooth device and requires passcode confirmation for added security.

Activation is the process by which Keyek links the device to the Keyek Platform, ensures its security status, and allows the end user to set their secret PIN.

When you first power on your Keyek Card, it will display the message Ready for Activation below the Keyek Card number.