Rohos Logon Key v3.1 introduces a number of significant changes. Now it allows to apply 2-factor authentication policy based on user list or user group membership in Active Directory. This will allow to test and implement 2-factor authentication step by step.
New features:
Let us present you a new version of Rohos Logon Key program – Rohos Logon Key 3.0 with OATH support. Now you can use popular Google Authenticator and Yubikey H-OTP for 2-factor Windows login.
The access to your computer or user account is usually password-protected. But sometimes it is not enough, especially, when your data requires high level of confidentiality. You don’t want to provide attackers with the chance to get hold of your most secret stuff and your data, don’t you? We has included Google Authenticator and Yubikey HOTP support into Rohos Logon Key. Now Windows login is performed in High-Safety mode by using Time based One Time Password and HOTP codes.
iKey 1000/1032 security token is designed for fast and easy integration with various authorization systems. The compact low-cost token supports PKCS#11 and has a built-in encryption process. It is used for user identification and two-factor authentication.
Rohos Logon Key generates two-factor user authentication in Windows or on the Terminal Server by means of electronic keys. It securely stores the user account data: login and password on the token, smartcard and other hardware encryption devices.
Before you start using iKey 1032\2032 in Rohos Logon Key, you first need to configure the iKey with the help of iKey Token Utility .
We updated Rohos Logon Key 2.9 with a few new options including Windows 8 support.
Rohos Logon Key allows to access Windows computer or Remote Desktop session by using a USB Key and optional password. With this release we allows all of the customers update for free before we switch to version 3.
What’s new list:
Download Now (Release date 14/11/2012)
Now Rohos Logon Key authentication tile look like this.
Dear users and customers, we are happy to announce a few improvements in Rohos Logon Key. New features affects “Allow login only by USB Key” feature specially when using Rohos Logon in corporate network or Windows Remote Desktop services.
Updated 10 Oct 2017.
Rohos encourages new technologies. Now Rohos Logon Key allows to use a
various of RFID tags for Windows logon: Indala, Emarine, Legic and
Hitag . Thanks to Awinta.de We have got a sample of easyident FS-2044
RFID reader, produced by Easyident.de
FS Fertigungsservice (Germany). Also we have added support for
the following RFID readers: KCY 125 Khz , Addimat and pcProx Plus by
RFIDeas.
This RFID can read and write a few types of Tags produced by the
company, including one handy Hitag bracelet EM4100. RFID tag EM4100 is a
read-only RFID tag with a 40 bit unique ID which is read automatically
by RFID reader FS-2044.
This space-saving device with dimensions 91 x 91 x 14 mm is very
compact. Easy to install, you only need to setup the drivers for Windows
from the official web site. We have successfully integrated this device with Rohos Logon Key v.2.8. The easyident FS-2044 is one in a multiple devices that can be use in Rohos Logon Key for secure login your Windows computer.
Below are photos of that easyident FS-2044 RFID transponder.
1. Download and install Rohos Logon key.
2. Open Rohos Logon Key > Options > choose RFID FS-2044 as a key to Windows login.
Click on Options below USB Key type selection and Choose COM port where Easyident FS-2044 is connected.
Rohos Logon Key immediately check COM port for reader presence. Note,
now you can set up RFID tags, add and edit them. Save your time with
Import…/Export… options, the file with all configured tags can be saved
and exported on any other computer. Click OK to save this setting.
Enable option Login by USB Key only
Enable “Require user to type Windows password along with a USB Key“. Two-factor authentication protects your computer now.
3. Open Rohos Logon Key > Setup USB Key
Now you may use this RFID tag for Windows logon including Windows Vista/Seven x32/x64 systems.
Possibilities:
Please contact us if you wish Rohos Logon to support other RFID Tags of Easyident.
(updated on May 11, 2010)
There are enormous quantity of reasons why you should protect access to your machine regardless if it is your home computer or PC at work connected to large network. Damage caused by unauthorized access to computers sometimes can’t even be measured in money.
Common protection and your pet’s name as password are simply not enough any more. In collaboration with Futako Ltd. we offer MiFare cards support for Rohos products. Contactless cards are increasingly accepted as the credential of choice for controlling physical access. They are both robust and flexible, giving security professionals the ability to reduce maintenance costs and increase security. The cards can’t be copied, tampered with, duplicated, cloned and resist hackers attacks. As result your information is safely stored inside smart card. Even if card is lost it will not reveal stored information.
Rohos Logon Key solution takes care about secure access to Windows by storing logon data into the smart cards. It is important to note that logon information is not used in standard way and extracted from the card, only then directly submitted to logon process. Logon profile is encrypted in the cards. It’s no longer necessary to type sensitive information during logon process where it is vulnerable. Rohos Logon Key speeds up log-in process and keeps it secure.
(updated on 15 September)
High levels of security require a secure storage tool for logins to Windows systems, applications and web sites. Rohos Logon Key offers two-factor authentication as a flexible approach to your PC protection. And this may be exactly what many are looking for in their pursuit of enhanced user authentication to their computers and networks.
In connection with this Rohos Logon Key v.2.7 has undergone several updates.
What’s new:
To update, download new release and install over existing Rohos Logon. Restart Windows.
Screen shot:
Microsoft Remote Desktop Connection 6.0 (on Windows Vista\Seven) by default makes it mandatory for the user to enter user name and password before RDP client can establish connection to the WinSeven/2008 remote server (“ Enter your credentials for <server>. These credentials will be used when you connect to the remote computer” ). This is called “ Network Level Authentication“. If you are going to use USB key you can skip this prompt or disable it.
on vista you will see
As Rohos Logon Key RDC plugin works with the established terminal session this Credentials Prompt may be ignored or disable it by default.
Actually if Rohos Logon is installed locally it could work in this ‘credential prompt’ window:
How to disable RDC Credentials Prompt:
To skip the credentials prompt – choose “Do not attempt authentication†under Authentication options on the Advanced tab, but this option is not set permanently. To permanently skip the additional credential screen , edit the Default.RDP file (My Documents folder) in notepad. Including enablecredsspsupport:i:0 disables the Credentials Security Service Provider for the connection. If you use separate .RDP files for different server, modify each of those .RDP files. Below is the content section of the default.rdp file with enablecredsspsupport:i:0 option included.
redirectposdevices:i:0
authentication level:i:0
enablecredsspsupport:i:0
prompt for credentials:i:0
negotiate security layer:i:1
Note that this workaround is suggested only if you connect Windows 2000/2003/XP systems because according to Terminal Services Team blog post – “This option does disable the new credential prompting behavior, but it also disables support for Network Level Authentication for Vista (and Longhorn Server) RDP connections; Network Level Authentication requires credentials to be provided by the client before a session is created on the server side.†So if you do connect to Vista over RDP, you’ll not be able to use this option.
