Rohos Logon Key

Rohos Logon Key is a two-factor authentication solution provided by SafeJKA SRL. The product aims to enhance the security of Windows access by transforming any USB drive into a hardware Security Key. It is designed for companies of varying sizes and caters to IT professionals, system administrators, security managers, as well as professionals in the finance and government sectors.

Secure Login Replacement: Replace weak password-based login with a hardware Security Key, such as a USB flash drive, Google Authenticator OTP, FIDO U2F, or industrial RFID access cards. Combine the Key with a PIN code or Windows password for two-factor authentication. Users can enjoy the convenience of automatic and fast login without the need to memorize lengthy Windows passwords.

Multiple Authentication Methods: Support a wide range of authentication methods, including USB flash drives, PKCS#11 security dongles, FIDO U2F security keys, Google Authenticator or YubiKey OTP codes, smartphone with Rohos push authenticator or Bluetooth ID, and RFID access cards. The product is also compatible with Windows Hello devices, enabling users to use a single key for logging into multiple computers.

Data Security and Encryption: Utilize NIST-approved data-security principles and encryption to ensure the confidentiality of sensitive information. The authentication key does not store the password in an open form, and USB key copy protection prevents unauthorized duplication. All data on the key is encrypted using AES-256 bit key length.

Authentication Experience vs. Security: Offer a seamless authentication experience for both console and remote access scenarios. Users can utilize hardware security keys for console access and leverage One Time Password generators like Google Authenticator, YubiKey, or OATH for remote desktop access. The system allows the configuration of multiple authentication methods for a single user account. In case of key loss or forgotten PIN code, the Emergency Logon Q/A feature assists in accessing Windows. Additionally, users have the option to set a short PIN code to protect the key against unauthorized access.

Single-Factor Authentication Mode: Support single-factor authentication mode, replacing the need for a password with a digital Key.

Secure Active Directory Authentication: Enhance authentication security in Windows enterprise networks by implementing a domain-wide second-factor authentication requirement. Safeguard workstations and remote desktop access using a variety of second-factor authentication methods, including OATH OTP, security keys, regular flash drives, and RFID industry cards. The product provides support for offline workstations, customizable 2FA notices, and automated 2FA enrollment through scripting.