Rohos Logon Key v5.6 with 2FA self-enrollment

/in , , /by

We continue to work under Rohos Logon Key development and now implemented our customers’ latest feedback and bug reports. A new minor update contains several important improvements.

What’s new in Rohos Logon Key 5.6:

  • Added feature self 2FA key enrollment in Login screen mode. Enables automatic registration of 2FA method by workstation user during Windows login screen.
  • Improvements for 2FA enforcement and filtering default credentials providers in Windows 11
  • Emergency Login improvements, resetting QA attempts after successful login in Active Directory mode.
  • 2FA Login improvements for long login passwords.

Download and Install over the existing Rohos Logon app to try new features:
Download the latest Rohos Logon Key v.5.6 (15-day trial full version) >>

Read more

How a 2FA bypass incident can occur in real life.

/in , /by

Rohos Logon Key software includes built-in safeguards to prevent bypassing two-factor authentication (2FA). This may occur when a Windows desktop session is initiated by a 2FA-enabled user account, but the 2FA credentials have not been collected by Rohos.

During the latest support incident, we observed that Rohos’ “2FA bypass control” triggered the screen lock procedure each time after the user logged in. Finally, it was identified that 3-rd party software, which installed a Credential proxy DLL ( to filter all user login sessions), implicitly disabled Rohos two-factor authentication control. However, due to the “2FA bypass control” feature, the automated session lock was initiated each time a user logged in using a plain password login.

The service ADSelfService Plus Client Software\ADSSPProvider64.dll, with GUID {B80B099C-62EA-43CD-9540-3DD26AF3B2B0}, has been identified as the root cause of the issue. The service installation re-enabled the conventional password-based single-factor login field (icon) on the Windows login screen. This, in turn, allowed any employee to use a standard password-based credential icon on the login screen, rather than the one-time password login 2FA method provided by Rohos Logon Key.

To correct the issue, the customer was recommended to add 3rd third-party service GUID to the exclusion list at the Options – More… dialog box, as highlighted in the screenshot below.

  Read More about how Rohos Logon 2FA-information feedback-loop control works in Rohos built-in safeguards to prevent 2FA / MFA bypass attacks>>

2FA key name label in Rohos Logon Key v5.5

/in , /by

What’s new in Rohos Logon Key 5.5:

  • Fixed QR-code display error for “Setup OTP” and “Setup Smartphone” login methods. Now Rohos is generating local SVG file with QR code image instead of using google API.
  • Addd 2FA Key name label option when in “Setup Authentication Key” dialog. Now it is possible to assign a label name to each authentication key to distinguish among multiple keys in addition to serial UID number.
  • Tested compatibility with ACS PocketKey FIDO USB token – FIDO® Certified USB Security Key by ACS.
  • Fixed error during Google OTP setup, click on Display QR code resulting error 404 due to deprecated google API.
  • Other minor bug fixing and improvements

Setup Authentication Key dialog box

Just start typing the new name by clicking on Key Label name in “Setup Authentication Key” dialog.

Read more

Rohos Logon Key v5.4

/in , /by

We continue to work under Rohos Logon Key development and now implemented our customers’ latest feedback and bug reports. A new minor update contains several important improvements.

What’s new in Rohos Logon Key 5.4:

  • Improvements for RFID cards login method for RFIDeas pcProx reader.
  • Improvements for 2FA enforcement and filtering default credentials providers in Windows 11
  • Emergency Login improvements

Download and Install over the existing Rohos Logon app to try new features:
Download the latest Rohos Logon Key v.5.4 (15-day trial full version) >>

Read more

Rohos Logon Key v5.3

/in , /by

We continue to work under Rohos Logon Key development and now implemented our customers’ latest feedback and bug reports. A new minor update contains several important improvements.

What’s new in Rohos Logon Key 5.3:

  • Improvements for Mifare RFID cards to support quick card swipe in some scenarios.
  • Improvements on Azure workstation login via RDP to correctly reuse NLA credentials in some scenarios.
  • Improved LDAP queries after LDAP_REFERRAL error code.
  • Improved 1FA login possibility by using NLA credential for Remote Desktop access when user account have 2FA methods such as Yubikey, FIDO U2F, which in some cases lead to 2FA enforcement.
  • Improvements for Mifare RFID Cards login method to use full-size card UID number.
  • Added new option for 2FA bypass control feature – “Notify any successful login (2FA/1FA)” which will create push notification for Rohos Logon Key Android/iOS app in case of any login into your Server.
  • Improved Emergency Login mode that now allows to use all possible login methods after a successful Questions/Answers procedure. You need to restart Windows after the Rohos Emergency Login procedure to access all possible credentials methods, such as Face Login, PIN code, etc, for normal login. These changes apply only for console based computer access.
  • Improved Rohos Logon Key for Android app, new version 2.17 now has been published on Google Play Market. Added “2FA events list” and “Copy Push URL to clippboard” commands.

Download and Install over the existing Rohos Logon app to try new features:
Download the latest Rohos Logon Key v.5.3 (15-day trial full version) >>
Install Rohos Logon Key app for Android >>


About Rohos Logon Key

Rohos Logon Key adds strong two-factor authentication for Windows login and safeguards to prevent 2FA / MFA bypass attacks. Rohos allows implementing multi-factor authentication decision solution, where you can combine different authentication devices: password, PIN code, Smartphone, or strong authentication devices like U2F key, YubiKey, Google Authenticator One-Time password codes, SafeNet iKey tokens, or RFID cards. With Rohos you can protect standalone computers, Active Directory workstations, Terminal Servers, Azure and AWS workstations, or other remote assistance solutions like TeamViewer, and AnyDesk.

Get your copy of the Rohos Logon Key>

View the list of available 2FA methods in Rohos Logon Key> 

Windows ARM support in Rohos Logon v.5.2

/in , /by

We are glad to announce Rohos Logon Key 5.2 beta release with Windows on ARM support that now works on Microsoft Surface PRO X2 based on SQ1,SQ2,SQ3 CPU and other Windows laptops based on Snapdragon CPU.

What’s new in Rohos Logon Key 5.2:

  • Improved AD group lookup code
  • Fixed policy to require 2FA in case of AD group lookup failed.
  • Set to ignore NLA credentials over RDP and require user password entry again if the following option is enabled – “require a password with the 2FA key”.
  • Added support for ARM64 Windows for Windows Surface 
  • MSI setup package updated for compatibility with Windows on ARM.
  • Other minor improvements.

Download and Install over the existing Rohos Logon app to try new features:
Download the latest Rohos Logon Key v.5.2 (15-day trial full version) >>
Download MSI package for Rohos Logon Key v.5.2.

About Rohos Logon Key

Rohos Logon Key adds strong two-factor authentication control for Windows login and safeguards to prevent 2FA / MFA bypass attacks. Rohos allows implementing multi-factor authentication decision solution, where you can combine different authentication devices: password, PIN code, Smartphone, or strong authentication devices like U2F key, YubiKey, Google Authenticator One-Time password codes, SafeNet iKey tokens, or RFID cards. With Rohos you can protect standalone computers, Active Directory workstations, Terminal Servers, Azure and AWS workstations, or other remote assistance solutions like TeamViewer, and AnyDesk.

Get your copy of the Rohos Logon Key>

View the list of available 2FA methods in Rohos Logon Key> 

Rohos Logon Key v5 update

/in /by

We are glad to announce Rohos Logon Key 5.0 stable version with minor bug fixes and improvements on top of 5.0 preview release.

What’s new in Rohos Logon Key 5.0:

  • Fixed “Users and Keys” dialog box.
  • MSI setup package updated for compatibility with Microsoft Defender.
  • Fixed PIN code dialog box behaviour in logon screen.
  • Fixed RFID card 2FA method and login loop issue after card removal action.
  • Improvements in Google Auth OTP 2FA method for workstations in Windows Active Directory.
  • Minor fixes in Rohos Remote Config.

Download and Install over existing Rohos Logon app to try new features:
Download the latest Rohos Logon Key v.5.0 (15-day trial full version) >>

For customers with Rohos Logon Key v.4.8-4.9 license, the update is available with 50% discount, please refer to the registration letter or apply for a discount now.

About Rohos Logon Key

Rohos Logon Key adds strong two-factor authentication control for Windows login and safeguards to prevent 2FA / MFA bypass attacks. Rohos allows implementing multi-factor authentication decision solution, where you can combine different authentication devices: password, PIN code, Smartphone, or strong authentication devices like U2F key, YubiKey, Google Authenticator One-Time password codes, SafeNet iKey tokens, or RFID cards. With Rohos you can protect standalone computers, Active Directory workstations, Terminal Servers, Azure and AWS workstations, or other remote assistance solutions like TeamViewer, and AnyDesk.

Get your copy of the Rohos Logon Key>

View the list of available 2FA methods in Rohos Logon Key> 

Rohos Logon Key v.5.0 preview

/in , /by

We are glad to announce Rohos Logon Key 5.0 early preview with improvements in the ‘2FA bypass control’ feature and better compliance with Microsoft Defender.

What’s new in Rohos Logon Key 5.0:

  • Improvements in the ‘2FA bypass control’ feature. Now the special option “Remember 2FA” allows defining a time interval in seconds to reduce possible false-positive alarms. Also ‘2FA bypass’ events are now added to the authentication event log with IP address information.
  • Java Card support module is temporarily removed from the setup package to comply with Microsoft Defender.

Download and Install over existing Rohos Logon app to try new features:
Download the latest Rohos Logon Key v.5.0 (15-day trial full version) >>
For customers who ordered v.4.8-4.9, the update is still free!

About Rohos Logon Key

Rohos Logon Key adds strong two-factor authentication control for Windows login. Rohos allows implementing multi-factor authentication decision solution, where you can combine different authentication devices: password, PIN code, Smartphone, or strong authentication devices like U2F key, YubiKey, Google Authenticator One-Time password codes, SafeNet iKey tokens, or RFID cards. With Rohos you can protect standalone computers, Active Directory workstations, Terminal Servers, Azure and AWS workstations, or other remote assistance solutions like TeamViewer, and AnyDesk.

Get your copy of the Rohos Logon Key>

View the complete list of supported devices for Windows 2FA logon> 

Rohos Logon roadmap for 2022-23

/in , /by

Here we would like to share the items from the product roadmap briefly.

Currently in Rohos Logon Key roadmap list:

  • More robust two-factor authentication redundancy support for Windows.
  • Integrated two-factor authentication bypass control with push notifications in Rohos Logon mobile app, better detection for various remote tools, and unattended support tools like TeamViewer, AnyDesk, VNC, etc.
  • Further development for Rohos logon Key for Android/iOS with improvements and better push 2FA method support.
  • Better and smoother OTP self-enrollment, auto-enrollment for OTP in Aactive Directory.
  • MS azure support via MS Graph integration.
  • webhooks support for 2FA auditing and 3rd party SIEM integration.
  • Development of Polymorphic setup file to avoid being detected and disabled in an automated way by malware or possible attackers.  
  • Adding subscription licensing type with included SLA support, updates, and Rohos SBOM data. 

Rohos Logon Key v.4.9

/in , /by

We are glad to announce Rohos Logon Key 4.9 with a new feature with an audit trail for 2FA configuration changes.

Read more