Hacker News Reader

Comment by bpfrh | Hacker News Reader

Any chance that key can be used for windows login?

I'm searching for a key that also works as a smartcard for winows on prem active directory authentication, as well as FIDO2 support.

Or a key that has software which allows this.

edit: changes should be chance

View on HN

One of the nice things about OnlyKey is you have options. - You can use OnlyKey to store a password up to 56 characters long for Windows login. You don't remember this password OnlyKey types it for you. - You can use OnlyKey as a FIDO2 security key to login to Windows with Azure AD.

Thanks for the answer!

So it basically registers itself as a keyboard?

Even if the Windows PC is locked?

How does it know which password to type?

Unfortunately everything that is more complicated than "take that stick and stick it in the usb port" is gonna be difficult.

I know about the FIDO2 with azure AD, but I need it for on prem AD, which doesn't support fido2.

Yes, OnlyKey appears to the computer/mobile device as a keyboard. That is why it works on all computers and even iPhone/Android with an adapter available in our store - https://onlykey.io/collections/accessories-1

Yes, it would type the password to unlock your Windows PC.

You assign password/login info to a button, you press that button. I.e. Button number 1 is my Windows login so I would press the 1 button to login. After the OnlyKey is unlocked that is, a PIN is required to be entered on the same buttons providing physical security.

Feitian advertises one here https://www.ftsafe.com/Products/FIDO/NFC and they say you can request a dev version so you can install your own applets, but I can't vouch for it yet personally.

Looks interesting, thanks for the link!

Apparently K9 Dev version is basically like eJavaToken, without applets installed, so no U2F, only CCID. Unless you specifically want that don't order.

Reply on news.ycombinator.com