TOKEN2 Sàrl is a Swiss cybersecurity company specialized in the area of multifactor authentication. We are a FIDO Alliance member. (2024)

This guide will walk you through the process of using Windows 10/11 built-in tool to set up and manage your FIDO2 keys, including creating and managing PINs and registering fingerprints.

To get started, go to "Settings" → "Accounts" → "Sign-in options" → "Security Key" and click "Manage".

Next, insert your key and follow the on-screen prompts to touch it in a timely manner.

If you haven't already, you'll need to set up a PIN before registering a fingerprint. To do so, click "Add" and enter a 4-63 character PIN.

Fingerprints

If your FIDO2 key features a fingerprint reader, an additional option for setting up fingerprints will appear on the "Manage" window.

If the fingerprint setup button is disabled, this means you have not set the PIN. PIN is a requirement for enrolling fingerprints.

To register a fingerprint, click "Set up" and enter your PIN. Follow the prompts to touch your key multiple times with one finger, until "All set.." message is displayed.

You can add more than one finger if needed (our T2F2-Bio2 and T2F2-Bio devices support up to 25 different fingerprints stored).

To remove fingerprints, click "Remove" and enter your PIN.

Please note that this will remove all fingerprints at once (you can use alternative methods, such as Chrome based tool or Token2 Companion App, if you need to remove one particular fingerprint)

Reset

If you need to reset the device's FIDO configuration, click "Reset". This will erase all PINs and fingerprints on the device, but can only be done within the first 10 seconds after inserting the key.

Passkey/Resident Key Management

As of the time of writing (February 2024), the Windows control panel does not provide a dedicated interface for managing stored passkeys (also known as resident keys). You can efficiently manage them using one of the following methods: