FIDO Certification L1 (Device-bound passkey and L1 Certified, but non-FIPS validated): FIDO Certification L1 are hardware-based devices that provide strong cryptographic authentication. They protect against phishing by ensuring only the legitimate site can authenticate you. Users confirm their identity by touching the key or entering a PIN when prompted.
A FIDO Certification L1 must contain the following properties to be allowed in the Exostar product environment:
– NIST Assurance Level: AAL2
– Passkey Protection: Must be hardware
– Passkey Storage Location: Must be device-bound
– FIDO Alliance Certification Level: Must be at least L1
– Attestation: Required
Please follow the steps below to purchase and set-up a FIDO Certification L1. If you do not have an Exostar account, please visit your customer page for more information on the purchase and set-up process.
Step 1. Purchase FIDO Passkey License
You must purchase the FIDO Passkey License with or without Proofing from Exostar’s web store. You must also purchase the hardware key separately as this is not currently offered from Exostar’s web store. Please see that process in Step 2. Purchase Hardware Key.
IMPORTANT! Once you successfully purchase the FIDO Passkey License, you will receive a purchase confirmation license key. This license key is used ONCE during the credential set-up process and IS NOT the same as the FIDO Passkey License, which is the credential you will use to authenticate to access your partner applications.
2. Select your Partner from the drop-down provided.
3. Select the radio button for FIDO Passkey License with or without Proofing (1 year, hardware key not included). Click Next.
4. Review and complete any missing information in the Primary Information and Billing Address sections. Click Next.
5. Select your Payment Method and input payment details. Click Submit to complete your purchase.
NOTE: If you select the Invoice option, Exostar must receive full payment before you receive your license key to activate your credential.
6. On the purchase confirmation screen, you are provided the option to activate your license key directly from the web store. Otherwise, you can activate via your account using the license key provided in the confirmation email.
NOTE: The license key format is KEY-XXXXXXXXXXXXXXXXX.
Step 2. Purchase FIDO Certification L1 (Hardware)
It is important to note, you must purchase a security key separately, as Exostar does not currently offer the physical keys via the web store. Please see the FIDO Certification L1 Approved Authenticators article for approved options.
Step 3. Complete Credential Set-up
Once you successfully complete your purchase, you can activate your credential directly from the web store or through your Exostar account. PLEASE VISIT YOUR CUSTOMER GET STARTED ARTICLE FOR MORE DETAILED INSTRUCTIONS ON COMPLETING CREDENTIAL SET-UP.
IMPORTANT! Once you successfully purchase the FIDO Passkey License, you will receive a purchase confirmation license key. This license key is used ONCE during the credential set-up process and IS NOT the same as the FIDO Passkey License, which is the credential you will use to authenticate to access your partner applications.