[{"data":1,"prerenderedAt":101},["ShallowReactive",2],{"i-heroicons:building-office-2":3,"i-heroicons:computer-desktop":8,"i-heroicons:cloud":10,"i-heroicons:server":12,"i-heroicons:folder":14,"i-heroicons:chart-bar":16,"i-heroicons:lock-closed":18,"i-heroicons:rectangle-stack":20,"i-heroicons:scale":22,"i-heroicons:key":24,"i-heroicons:finger-print":26,"i-heroicons:cpu-chip":28,"i-heroicons:document-text":30,"i-heroicons:shield-exclamation":32,"i-heroicons:shield-check":34,"blog-en-yubion-fido-logon-register-at-logon":36,"i-heroicons:user":99},{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":7},0,24,false,"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M2.25 21h19.5m-18-18v18m10.5-18v18m6-13.5V21M6.75 6.75h.75m-.75 3h.75m-.75 3h.75m3-6h.75m-.75 3h.75m-.75 3h.75M6.75 21v-3.375c0-.621.504-1.125 1.125-1.125h2.25c.621 0 1.125.504 1.125 1.125V21M3 3h12m-.75 4.5H21m-3.75 3.75h.008v.008h-.008zm0 3h.008v.008h-.008zm0 3h.008v.008h-.008z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":9},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M9 17.25v1.007a3 3 0 0 1-.879 2.122L7.5 21h9l-.621-.621A3 3 0 0 1 15 18.257V17.25m6-12V15a2.25 2.25 0 0 1-2.25 2.25H5.25A2.25 2.25 0 0 1 3 15V5.25m18 0A2.25 2.25 0 0 0 18.75 3H5.25A2.25 2.25 0 0 0 3 5.25m18 0V12a2.25 2.25 0 0 1-2.25 2.25H5.25A2.25 2.25 0 0 1 3 12V5.25\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":11},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M2.25 15a4.5 4.5 0 0 0 4.5 4.5H18a3.75 3.75 0 0 0 1.332-7.257a3 3 0 0 0-3.758-3.848a5.25 5.25 0 0 0-10.233 2.33A4.5 4.5 0 0 0 2.25 15\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":13},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M21.75 17.25v-.228a4.5 4.5 0 0 0-.12-1.03l-2.268-9.64a3.375 3.375 0 0 0-3.285-2.602H7.923a3.375 3.375 0 0 0-3.285 2.602l-2.268 9.64a4.5 4.5 0 0 0-.12 1.03v.228m19.5 0a3 3 0 0 1-3 3H5.25a3 3 0 0 1-3-3m19.5 0a3 3 0 0 0-3-3H5.25a3 3 0 0 0-3 3m16.5 0h.008v.008h-.008zm-3 0h.008v.008h-.008z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":15},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M2.25 12.75V12A2.25 2.25 0 0 1 4.5 9.75h15A2.25 2.25 0 0 1 21.75 12v.75m-8.69-6.44l-2.12-2.12a1.5 1.5 0 0 0-1.061-.44H4.5A2.25 2.25 0 0 0 2.25 6v12a2.25 2.25 0 0 0 2.25 2.25h15A2.25 2.25 0 0 0 21.75 18V9a2.25 2.25 0 0 0-2.25-2.25h-5.379a1.5 1.5 0 0 1-1.06-.44\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":17},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M3 13.125C3 12.504 3.504 12 4.125 12h2.25c.621 0 1.125.504 1.125 1.125v6.75C7.5 20.496 6.996 21 6.375 21h-2.25A1.125 1.125 0 0 1 3 19.875zm6.75-4.5c0-.621.504-1.125 1.125-1.125h2.25c.621 0 1.125.504 1.125 1.125v11.25c0 .621-.504 1.125-1.125 1.125h-2.25a1.125 1.125 0 0 1-1.125-1.125zm6.75-4.5c0-.621.504-1.125 1.125-1.125h2.25C20.496 3 21 3.504 21 4.125v15.75c0 .621-.504 1.125-1.125 1.125h-2.25a1.125 1.125 0 0 1-1.125-1.125z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":19},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M16.5 10.5V6.75a4.5 4.5 0 1 0-9 0v3.75m-.75 11.25h10.5a2.25 2.25 0 0 0 2.25-2.25v-6.75a2.25 2.25 0 0 0-2.25-2.25H6.75a2.25 2.25 0 0 0-2.25 2.25v6.75a2.25 2.25 0 0 0 2.25 2.25\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":21},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M6 6.878V6a2.25 2.25 0 0 1 2.25-2.25h7.5A2.25 2.25 0 0 1 18 6v.878m-12 0q.354-.126.75-.128h10.5q.396.002.75.128m-12 0A2.25 2.25 0 0 0 4.5 9v.878m13.5-3A2.25 2.25 0 0 1 19.5 9v.878m0 0a2.3 2.3 0 0 0-.75-.128H5.25q-.396.002-.75.128m15 0A2.25 2.25 0 0 1 21 12v6a2.25 2.25 0 0 1-2.25 2.25H5.25A2.25 2.25 0 0 1 3 18v-6c0-.98.626-1.813 1.5-2.122\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":23},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M12 3v17.25m0 0c-1.472 0-2.882.265-4.185.75M12 20.25c1.472 0 2.882.265 4.185.75M18.75 4.97A48 48 0 0 0 12 4.5c-2.291 0-4.545.16-6.75.47m13.5 0q1.515.215 3 .52m-3-.52l2.62 10.726c.122.499-.106 1.028-.589 1.202a6 6 0 0 1-2.031.352a6 6 0 0 1-2.031-.352c-.483-.174-.711-.703-.59-1.202zm-16.5.52q1.485-.305 3-.52m0 0l2.62 10.726c.122.499-.106 1.028-.589 1.202a6 6 0 0 1-2.031.352a6 6 0 0 1-2.031-.352c-.483-.174-.711-.703-.59-1.202z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":25},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M15.75 5.25a3 3 0 0 1 3 3m3 0a6 6 0 0 1-7.029 5.912c-.563-.097-1.159.026-1.563.43L10.5 17.25H8.25v2.25H6v2.25H2.25v-2.818c0-.597.237-1.17.659-1.591l6.499-6.499c.404-.404.527-1 .43-1.563A6 6 0 1 1 21.75 8.25\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":27},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M7.864 4.243A7.5 7.5 0 0 1 19.5 10.5c0 2.92-.556 5.709-1.568 8.269M5.742 6.364A7.47 7.47 0 0 0 4.5 10.5a7.46 7.46 0 0 1-1.15 3.993m1.989 3.559A11.2 11.2 0 0 0 8.25 10.5a3.75 3.75 0 1 1 7.5 0q0 .79-.064 1.565M12 10.5a14.94 14.94 0 0 1-3.6 9.75m6.633-4.596a18.7 18.7 0 0 1-2.485 5.33\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":29},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M8.25 3v1.5M4.5 8.25H3m18 0h-1.5M4.5 12H3m18 0h-1.5m-15 3.75H3m18 0h-1.5M8.25 19.5V21M12 3v1.5m0 15V21m3.75-18v1.5m0 15V21m-9-1.5h10.5a2.25 2.25 0 0 0 2.25-2.25V6.75a2.25 2.25 0 0 0-2.25-2.25H6.75A2.25 2.25 0 0 0 4.5 6.75v10.5a2.25 2.25 0 0 0 2.25 2.25m.75-12h9v9h-9z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":31},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M19.5 14.25v-2.625a3.375 3.375 0 0 0-3.375-3.375h-1.5A1.125 1.125 0 0 1 13.5 7.125v-1.5a3.375 3.375 0 0 0-3.375-3.375H8.25m0 12.75h7.5m-7.5 3H12M10.5 2.25H5.625c-.621 0-1.125.504-1.125 1.125v17.25c0 .621.504 1.125 1.125 1.125h12.75c.621 0 1.125-.504 1.125-1.125V11.25a9 9 0 0 0-9-9\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":33},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M12 9v3.75m0-10.036A11.96 11.96 0 0 1 3.598 6A12 12 0 0 0 3 9.75c0 5.592 3.824 10.29 9 11.622c5.176-1.332 9-6.03 9-11.622c0-1.31-.21-2.57-.598-3.75h-.152c-3.196 0-6.1-1.25-8.25-3.286m0 13.036h.008v.008H12z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":35},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M9 12.75L11.25 15L15 9.75m-3-7.036A11.96 11.96 0 0 1 3.598 6A12 12 0 0 0 3 9.749c0 5.592 3.824 10.29 9 11.623c5.176-1.332 9-6.03 9-11.622c0-1.31-.21-2.571-.598-3.751h-.152c-3.196 0-6.1-1.248-8.25-3.285\"\u002F>",{"id":37,"documentId":38,"title":39,"content":40,"slug":41,"published":42,"createdAt":43,"updatedAt":43,"publishedAt":44,"locale":45,"authorManual":46,"cover":47,"tags":71,"seo":96,"author":51},85,"uxog92t6rf9gh2c0yhxstzg4","Tried a New Method for Implementing YubiOn FIDO Logon","\u003Cp>\u003Cstrong>Today, we released a new version (3.1.0.1) of YubiOn FIDO Logon.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>In previous versions, registering a FIDO authenticator had to be done via the configuration tool or the management web interface. However, with this release, a new method has been added that allows users to register their FIDO authenticator \u003Cstrong>during logon\u003C\u002Fstrong>. While this may seem like a minor update compared to a major release, it is actually a \u003Cstrong>handy feature\u003C\u002Fstrong> when deploying FIDO Logon across an organization. We plan to introduce it in more detail on our blog as well.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_yubion_fido_logon_register_at_logon_1_4cb1aaadee.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Until now, when deploying FIDO Logon in an organization, software installation and initial setup could be handled collectively using AD or MDM features (\u003Ca href=\"https:\u002F\u002Ffl.yubion.com\u002Fguide\u002Fen\u002Fadvanced\u002Fsilent_install\u002F\">Reference 1\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Ffl.yubion.com\u002Fguide\u002Fen\u002Fadvanced\u002Fcli_tool\u002Fcli_register_code\u002F\">Reference 2\u003C\u002Fa>). However, when it came to registering the actual authenticators (security keys or smartphones), only the following methods were available:\u003C\u002Fp>\n\u003Ch4>① Distribute authenticators and have users register them using the setup tool\u003C\u002Fh4>\n\u003Cp>With this method, a common issue arises: \u003Cstrong>users may not complete the registration\u003C\u002Fstrong> of their authenticators. During this deployment flow, a policy allowing password logon is used until the authenticator is registered. If users do not register their authenticators, they will continue to log in with passwords indefinitely. Administrators must identify unregistered users via the management web and enforce registration through internal communication.\u003C\u002Fp>\n\u003Ch4>② Administrators pre-register authenticators via the management web and distribute them to users\u003C\u002Fh4>\n\u003Cp>This method avoids the issue of users failing to register their authenticators. However, the more users there are, the greater the burden on administrators. Also, in FIDO authentication, the PIN is supposed to be a \u003Cstrong>knowledge factor known only to the user\u003C\u002Fstrong>. But during registration, the administrator must know the PIN, which is not ideal. Depending on the operational method, \u003Cstrong>sharing knowledge factors like passwords or PINs among multiple people is generally discouraged\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>To address these issues, the latest update introduces a mechanism that \u003Cstrong>forces users to register their authenticators during logon\u003C\u002Fstrong>—they cannot log in without completing registration.Additionally, users can now \u003Cstrong>set their own PINs\u003C\u002Fstrong> during this registration process.\u003C\u002Fp>\n\u003Cp>This enables a more secure and streamlined deployment process, as follows:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Set policy to enforce authenticator registration for accounts without one.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Pre-install FIDO Logon on user PCs and configure registration codes\u003C\u002Fstrong> (via provisioning, AD, or MDM).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Distribute security keys to users\u003C\u002Fstrong> (no need to pre-set PINs).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>With these steps in place, users will be required to register their authenticators \u003Cstrong>before logging in\u003C\u002Fstrong>. This ensures that every account is protected by an authenticator, and users can set their own PINs, allowing for \u003Cstrong>safer and more autonomous FIDO Logon operation\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch2>■ Trying the New Deployment Method\u003C\u002Fh2>\n\u003Cp>Now, let’s try out the newly added deployment method and walk through the process of a user starting to use their PC. We’ll begin from the point where YubiOn FIDO Logon is already registered, the client app is installed on the PC, and the registration code is configured.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_yubion_fido_logon_register_at_logon_2_2df729188a.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Before proceeding, we configure the necessary policy settings to enable this new deployment method.\u003C\u002Fp>\n\u003Cp>We modify the default policy from its initial state as follows:\u003C\u002Fp>\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>\u003C\u002Fth>\n\u003Cth>\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\u003Ctr>\n\u003Ctd>Restrict Sign-in Options\u003C\u002Ftd>\n\u003Ctd>Enabled\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Logon for Accounts Without Registered Authenticators\u003C\u002Ftd>\n\u003Ctd>Allow password logon only on the first attempt, then enforce authenticator registration\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\u003C\u002Ftable>\n\u003Cp>With this setup complete, we’re ready to proceed.\u003C\u002Fp>\n\u003Cp>From here, we’ll simulate the experience of a user logging into their account for the first time.\u003C\u002Fp>\n\u003Cp>We assume a scenario where a local account named “YubiOn” has been created on the PC during provisioning, but the user has not yet logged in with that account(*1).\u003C\u002Fp>\n\u003Cp>Each user has been provided with a brand-new YubiKey 5 NFC that has not been configured.\u003C\u002Fp>\n\u003Cp>(*1) While this example uses a local account, the new feature also works with Microsoft accounts, AD accounts, and EntraID accounts.\u003C\u002Fp>\n\u003Ch3>① Perform Password Authentication\u003C\u002Fh3>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_yubion_fido_logon_register_at_logon_3_1231c04fa8.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>This is the logon screen of a PC where \u003Cstrong>FIDO Logon has been installed and the registration code configured\u003C\u002Fstrong>, but no authenticator has been registered yet.\u003C\u002Fp>\n\u003Cp>Since the “YubiOn” account does not have an authenticator registered, the \u003Cstrong>password input screen\u003C\u002Fstrong> is displayed.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_yubion_fido_logon_register_at_logon_4_2a07e29e8c.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>In previous versions, if password logon was allowed, users could log in simply by entering the correct password.\u003C\u002Fp>\n\u003Cp>However, with the new enforcement of authenticator registration, \u003Cstrong>users can no longer log in unless they register an authenticator at this stage\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch3>② Set a PIN for the Security Key (if not already set)\u003C\u002Fh3>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_yubion_fido_logon_register_at_logon_5_d381822ea1.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>As you proceed, you’ll be prompted to insert the authenticator into the USB port.\u003C\u002Fp>\n\u003Cp>Follow the on-screen instructions and insert the security key.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_yubion_fido_logon_register_at_logon_6_ce3f908598.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Since the security key being used this time was in its original state with \u003Cstrong>no PIN set\u003C\u002Fstrong>, the system prompted for PIN setup.\u003C\u002Fp>\n\u003Cp>Following the on-screen instructions, the user sets a PIN of their choice.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_yubion_fido_logon_register_at_logon_7_f2cf769a49.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Since the PIN setup has been completed, we now proceed to \u003Cstrong>register the authenticator\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>③ Register the Authenticator\u003C\u002Fh3>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_yubion_fido_logon_register_at_logon_8_5ee9133c9b.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>To register the authenticator, you need to enter the PIN, so at this point, enter the PIN you just set.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_yubion_fido_logon_register_at_logon_9_61ec7a7389.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>You’ll be prompted to \u003Cstrong>touch the security key\u003C\u002Fstrong> to proceed with registration, so follow the instructions and touch the key to continue.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_yubion_fido_logon_register_at_logon_10_1459c58373.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Now that the authenticator registration is complete, follow the on-screen instructions to proceed with authentication again.\u003C\u002Fp>\n\u003Ch3>④ Perform Authenticator for Logon\u003C\u002Fh3>\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>\u003C\u002Fth>\n\u003Cth>\u003C\u002Fth>\n\u003Cth>\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\u003Ctr>\n\u003Ctd>\u003C\u002Ftd>\n\u003Ctd>\u003C\u002Ftd>\n\u003Ctd>\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\u003C\u002Ftable>\n\u003Cp>Since the registration and authentication flows in FIDO are almost identical on the surface, you proceed just as before, \u003Cstrong>enter the PIN you set earlier\u003C\u002Fstrong>, then \u003Cstrong>touch the security key\u003C\u002Fstrong> to complete authentication.\u003C\u002Fp>\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>\u003C\u002Fth>\n\u003Cth>\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\u003Ctr>\n\u003Ctd>\u003C\u002Ftd>\n\u003Ctd>\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\u003C\u002Ftable>\n\u003Cp>When logging into Windows for the first time, the familiar welcome screen appears, and the account login is completed. These registration steps are only required \u003Cstrong>once\u003C\u002Fstrong>—after the authenticator is registered, users can log in and unlock the screen using the registered key from then on.\u003C\u002Fp>\n\u003Cp>Previously, when using an authenticator registered via the setup tool for the first login, users also had to enter their account password. However, with this new flow, since the account password is entered at the beginning, \u003Cstrong>there’s no need to enter it again\u003C\u002Fstrong> when logging in with the FIDO authenticator immediately after registration.\u003C\u002Fp>\n\u003Ch2>■ Various Use Cases\u003C\u002Fh2>\n\u003Cp>In this example, we demonstrated using a \u003Cstrong>security key with a local account\u003C\u002Fstrong>, but this new feature also works with \u003Cstrong>smartphone-based logon or remote Desktop logon\u003C\u002Fstrong>. So it can be applied flexibly across different environments.\u003C\u002Fp>\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>\u003C\u002Fth>\n\u003Cth>\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\u003Ctr>\n\u003Ctd>\u003C\u002Ftd>\n\u003Ctd>\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\u003C\u002Ftable>\n\u003Cp>When Registering a Smartphone\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_yubion_fido_logon_register_at_logon_11_a837491f21.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>When Registering an Authenticator via Remote Desktop\u003C\u002Fp>\n\u003Ch2>■ Summary\u003C\u002Fh2>\n\u003Cp>Until now, deploying FIDO Logon at scale has posed operational challenges. Whether asking users to register their authenticators via the setup tool or having administrators pre-register them, there was always a need to manage and cover for registration gaps operationally.\u003C\u002Fp>\n\u003Cp>With this update, users can now be \u003Cstrong>required to register their authenticators\u003C\u002Fstrong>, helping ensure safer PC usage and management. We hope this improvement will be a valuable aid in secure system administration.\u003C\u002Fp>\n\u003Cp>A \u003Cstrong>free version\u003C\u002Fstrong> is available with the same features as the paid version for a \u003Cstrong>three-month trial\u003C\u002Fstrong>, so we encourage you to give it a try.\u003C\u002Fp>\n\u003Ch2>■ Related Links\u003C\u002Fh2>\n\u003Cp>[YubiOn FIDO Logon]\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ffl.yubion.com\">https:\u002F\u002Ffl.yubion.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>[YubiOn FIDO Logon Overview Page]\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.yubion.com\u002Ffidologon\">https:\u002F\u002Fwww.yubion.com\u002Ffidologon\u003C\u002Fa>\u003C\u002Fp>\n","yubion-fido-logon-register-at-logon","2024-11-06","2026-04-28T07:04:25.459Z","2026-04-28T07:04:28.797Z","en","Shiraishi",{"id":48,"documentId":49,"name":50,"alternativeText":51,"caption":51,"focalPoint":51,"width":52,"height":53,"formats":54,"hash":66,"ext":56,"mime":60,"size":67,"url":68,"previewUrl":51,"provider":69,"provider_metadata":51,"createdAt":70,"updatedAt":70,"publishedAt":70},791,"ascuie2czc3y7xh86r0cqjb7","blog-yubion-fido-logon-register-at-logon-1.png",null,386,479,{"thumbnail":55},{"ext":56,"url":57,"etag":58,"hash":59,"mime":60,"name":61,"path":51,"size":62,"width":63,"height":64,"sizeInBytes":65},".png","https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fthumbnail_blog_yubion_fido_logon_register_at_logon_1_4cb1aaadee.png","d7012e4edec6237298ae60e209b68048","thumbnail_blog_yubion_fido_logon_register_at_logon_1_4cb1aaadee","image\u002Fpng","thumbnail_blog-yubion-fido-logon-register-at-logon-1.png",20.72,126,156,20718,"blog_yubion_fido_logon_register_at_logon_1_4cb1aaadee",26.99,"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_yubion_fido_logon_register_at_logon_1_4cb1aaadee.png","aws-s3","2026-04-28T07:03:14.449Z",[72,78,84,90],{"id":73,"documentId":74,"name":75,"slug":51,"createdAt":76,"updatedAt":76,"publishedAt":77},12,"aire52m2y26x0uq2lb8m0nwy","FIDO","2026-04-28T01:49:06.707Z","2026-04-28T01:49:08.676Z",{"id":79,"documentId":80,"name":81,"slug":51,"createdAt":82,"updatedAt":82,"publishedAt":83},44,"ndyi3ro2mlncggjsp6vy47ue","Passkeys","2026-04-28T05:22:55.540Z","2026-04-28T05:22:57.559Z",{"id":85,"documentId":86,"name":87,"slug":51,"createdAt":88,"updatedAt":88,"publishedAt":89},54,"aik3it1d9trj8u1rr5wbmw2d","FIDO2","2026-04-28T05:24:47.451Z","2026-04-28T05:24:49.300Z",{"id":91,"documentId":92,"name":93,"slug":51,"createdAt":94,"updatedAt":94,"publishedAt":95},14,"cayvzwteev09nngcidjgi3lb","YubiOn FIDO Logon","2026-04-28T01:49:14.235Z","2026-04-28T01:49:16.082Z",{"id":97,"metaDescription":98},319,"Our new YubiOn FIDO Logon update lets users register authenticators at logon, simplifying organization-wide deployment.",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":100},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M15.75 6a3.75 3.75 0 1 1-7.5 0a3.75 3.75 0 0 1 7.5 0M4.501 20.118a7.5 7.5 0 0 1 14.998 0A17.9 17.9 0 0 1 12 21.75c-2.676 0-5.216-.584-7.499-1.632\"\u002F>",1783406313609]