Posts

Windows 8, Yubikey and 2-factor authentication renewal

/in , /by

We updated Rohos Logon Key 2.9 with a few new options including Windows 8 support.

Rohos Logon Key allows to access Windows computer or Remote Desktop session by using a USB Key and optional password. With this release we allows all of the customers update for free before we switch to version 3.

What’s new list:

  • Windows 8 support
  • Yubikey Options dialog box now allows to edit and export registered Yubikey List.
  • New 2-factor authentication possibility – Require user to type Windows password along with a USB Key. Forcing string 2-factor authentication for Windows login.
  • Updated “Wireless PC Lock” tags support.
  • New feature – Write all authentication events to log file.

Download Now (Release date 14/11/2012)

Windows 8 Support

Now Rohos Logon Key authentication tile look like this.

USB Key based login into Windows

Read more

Review of Hardware Encryption vulnerability of Kingston and SanDisk USB flash drives

/in , /by

The Kingston Technology company, a leader in the production of safe USB drives, and one of the first ones that started producing USB flash drive with hardware encryption (Kingston DataTraveler Secure) announced that some of its models of USB flash drives with hardware protection feature are vulnerable. The announcement was posted on the company’s web site saying that with the help of some tools you can access this USB drive (i.e. hack it without a password). News regarding some models of Kingston being prone to cracking is very surprising because these flash drives have been certified in compliance with FIPS 140-2.

Everything started with the fact that the German company SySS published a document entitled “Companies SySS hacked USB flash drive with hardware encryption Kingston certified FIPS 104-2”. In this document they describe in details the authentication protocol between the drive and the program (the user), which they found on the basis of intercepted USB traffic + vulnerability that was discovered. And also some screenshots of the utility, which is embedded in the process of authentication program for USB drives, and as a result – we may enter any password and access will be granted.
Read more

Credentials Prompt of RDP 6.0 and login with USB Key

/in /by

Microsoft Remote Desktop Connection 6.0 (on Windows Vista\Seven) by default makes it mandatory for the user to enter user name and password before RDP client can establish connection to the WinSeven/2008 remote server (“ Enter your credentials for <server>. These credentials will be used when you connect to the remote computer” ). This is called “ Network Level Authentication“. If you are going to use USB key you can skip this prompt or disable it.

on vista you will see

As Rohos Logon Key RDC plugin works with the established terminal session this Credentials Prompt may be ignored or disable it by default.

Actually if Rohos Logon is installed locally it could work in this ‘credential prompt’ window:

How to disable RDC Credentials Prompt:

To skip the credentials prompt – choose “Do not attempt authentication” under Authentication options on the Advanced tab, but this option is not set permanently. To permanently skip the additional credential screen , edit the Default.RDP file (My Documents folder) in notepad. Including enablecredsspsupport:i:0 disables the Credentials Security Service Provider for the connection. If you use separate .RDP files for different server, modify each of those .RDP files. Below is the content section of the default.rdp file with enablecredsspsupport:i:0 option included.

redirectposdevices:i:0
authentication level:i:0
enablecredsspsupport:i:0
prompt for credentials:i:0
negotiate security layer:i:1

Note that this workaround is suggested only if you connect Windows 2000/2003/XP systems because according to Terminal Services Team blog post – “This option does disable the new credential prompting behavior, but it also disables support for Network Level Authentication for Vista (and Longhorn Server) RDP connections; Network Level Authentication requires credentials to be provided by the client before a session is created on the server side.” So if you do connect to Vista over RDP, you’ll not be able to use this option.


Rohos Logon Key v.1.6 (Mac)

/0 Comments/in , , /by

We announce Rohos Logon Key v.1.6 (Mac) beta with a few improvements:

  • Fixed bug when password contains space ” “and comma “,”
  • Fixed bug with Bluetooth logon when Rohos Logon locks desktop right after USB key setup
  • Improved OFF function – when there are no USB key inserted all USB Keys will be removed from Rohos Logon
  • Added global Autostart item for Rohos Logon. Now after installation Rohos Logon icon will be active in all user accounts


Rohos Logon Key 1.5.2 for Mac

/in , , /by

Here are new Rohos Logon Key v1.5.2 for Mac OS X.

It includes new features in Preferences pane:

  • Allow to log in only with USB Key. If this option is ON then regular password based logon dialog box will be disabled and covered with a half-transparent Rohos Icon. To log in you need to have USB Key. No emergency logon is enabled here except safe mode boot.
  • Password protect application, if it is ON then you need to pass system authentication window (to get Admin rights) to modify settings or access Rohos main window.

Some things were improved:

– installation script and now it installing all Rohos items (logon bundle, autostart item)
– Add USB Key function now would not ask for a password so many times
– Case-sensitive file system support, thanks to users reports.

Also, now it is possible to set up USB Keys on any other Server Mac, but you will need to manually copy Rohos *.k files into /Applications/.rohos folder on client Mac. We are still working under server-based usage of Rohos.

Rohos Logon Key for Mac v.1.4.3

/in , , /by

+ Added a few actions on USB Key removal : Lock, Log Out, Sleep, Shutdown and Nothing – the most helpful for Mac Book Air
* Fixed PIN code support for Intel based Macs
* Improved UI
* Improved Installer
* “Add USb Key” dialog doesn’t show odd Apple hardware anymore (of course iPod will be shown)

For Mac Book Air Users: This version allows to use USB flash drive only for logon/unlock moments after that you can unplug it, so you don’t need to lose a USB port. This is due to ‘Nothing’ option (see screenshot).

download v.1.4.3 beta.

Notes about PIN code:
For those who are not familiar with two-factor authentication: By setting up PIN code you protect USB Key from somebody who can use it for logon into your Mac without your permission. After you plug in USB Key – Rohos Logon will always ask user to enter PIN in order to log in or unlock your Mac. To set up PIN, just click Change PIN button, after you set up your USB Key.

  • PIN code works only for USB flash drives
  • To change it – click Change PIN – and enter new PIN and Confirmation – OK
  • If you forget PIN code – use second USB Key (created before) or Safe Boot to disable Rohos Logon

To Upgrade:

It’s better to Quit current Rohos Logon , install new version over, and then open Rohos Logon and set up USB Key again.

Notes About Uninstalling / OFFing Rohos Logon:

  • To OFF or Quit Rohos Logon USB key should be connected

Login into Web based Remote Desktop with USB key

/in , , , /by

Rohos Logon Key for remote desktop Rohos Logon Key is the only software that allows to use USB flash drive as a 2-factor security key to access Windows Remote Desktop. It also supports Web Based remote desktop access with USB Key.
Read more