Skip to content

New Features in Accops Workspace Windows Client version 7.2.0.1063

FIDO login support

In the Latest Windows Workspace client, FIDO-based second-factor authentication support has been added. After users enter their password, they must authenticate using either Windows Hello (PIN, fingerprint) or a FIDO2-compliant security key. The goal is to enhance security by adding a strong second layer of authentication.

Supported Client platforms & Gateway compatibility

This feature is supported on the following types and modes of clients with HySecure Gateway 5.4 SP6 and HySecure Gateway versions 7.0 & above:

Supported Client modes and OS 5.4-SP2/5.4 SP5/ 5.4 SP6 7.0
Full Admin Client on all supported Windows OS No Yes Yes
Hybrid mode No Yes Yes
HyLite mode No Yes Yes
On-demand client No Yes Yes

FIDO Configuration

  1. Create a HyID Policy with a FIDO token from the management console.

    img

  2. Navigate to the Management Console > Sites > Site > Public IP Address and Port.

  3. Enter the Gateway Address as hostname.

  4. Activate the device's Windows PIN or Biometric settings from the user endpoint. Navigate to Windows > Accounts > Sign-in Options > PIN > Activate Windows PIN.

    img

Client Login

  1. Log in to the HySecure Gateway with valid credentials and select the FIDO token on the 2FA page.

  2. On the first user login, the user must register the FIDO token on their device. When the user clicks on the Register option, they will be redirected to the HyLite login page. Users can register their device with Windows PIN, Windows biometric, or YubiKey.

  3. Once registered, the user will log in by validating with FIDO using Windows PIN, Windows biometric, or YubiKey.

Geolocation support

In the latest Workspace client, the admin can control user login into the HySecure gateway based on the configured location. Administrators can now define allowed login zones using latitude and longitude coordinates, along with a configurable radius. Users will only be able to log in when accessing the system from within these predefined geographic areas. This GPS location must be stored in Active Directory as a User Attribute.

Supported Client platforms & Gateway compatibility

This feature is supported by client modes and types with HySecure Gateway version 7.1 SP1 and above.

Supported Client modes and OS 5.4-SP2/5.4 SP5/ 5.4 SP6 7.0 7.1 7.1 SP1
Full Admin Client on all supported Windows OS No No No No Yes
Hybrid mode No No No No Yes
HyLite mode No No No No Yes
On-demand client No No No No Yes

Gateway Configuration

Kindly reach out to the Accops support team for assistance with the Gateway Configuration.