On October 5, 2021 (local time), Yubico finally released [YubiKey Bio]. In this article, we would like to delve into our initial impressions of this new product.
I purchased the USB Type-A model, which comes in the packaging below.
Here is the device out of the packaging. I assumed that as the YubiKey Bio is a FIDO2 authentication device, it would be more like a Yubico Security Key, and therefore, it would not have a serial number. However, it appears that the YubiKey Bio does have one.
The size is the same as the previous YubiKey. However, the touch part has been changed to a fingerprint sensor and is larger than before, and the depth of the touch part is a little shallower than other keys.
The conventional product indicates its status by glowing the "Y" mark or key mark on the touch part, but YubiKey Bio has two status indicator lamps, one green, and one orange, between the touch part and USB connector. The green seems to blink fast when fingerprint touch is requested and blinks slowly when PIN touch is asked for, while the orange light seems to glow when there is an error or the key setting is changed.
Now I will go over the initial settings needed to use the key.
With Windows 10, the initial setup can be done through the OS functions. First, open the settings screen from the Start menu, select [Accounts], [Sign-in Options], [Security Keys], and press the "Manage" button.
Try logging on to Windows with YubiKey Bio using YubiOn FIDO Logon.
I could register in the same way as a common fingerprint type FIDO2 authenticator. A common standard like FIDO2 is convenient as you can immediately use what you have bought without any particular awareness.
Logon was successful, as noted by the small "Welcome" message.
I will also try out YubiOn's FIDO2 demo site for multi-factor authentication with hardware authenticator and biometrics.
It works perfectly!
The fingerprint FIDO2 authenticator works the same, but if the fingerprint authentication fails three times, the PIN authentication is used instead. For example, I had registered my index fingerprint, but when I intentionally touched it with my middle finger, it moved to PIN input after three attempts, similar to other authenticators. Although there are slight differences, the accuracy of fingerprint authentication is relatively high, so you may not need to input the PIN very often.
I tried to display the Key’s information with YubiKey Manager distributed by Yubico. The serial number was written on the back of the key, but the YubiKey Manager can also read the serial number. I won't go into the technical details this time, but there must be some way to read the serial number from the PC side.
Regarding our schedules for sales for the YubiKeys, SoftGiken is currently planning on making the USB-C type device available soon. For more updates, please check this blog again.
■Sites Used in this Demo
Using a FIDO2-certified external authenticator such as the YubiKey Bio introduced this time or ATKey.Pro made by AuthenTrend that is already on sale, so users can easily upgrade their PC's Windows logon to more robust authentication.
※Revised due to change in demo site URL on May 24, 2022.
■YubiKey Bio series now available on Amazon ※ Added on 2022/05/30