Configuring a Security Key

Constraints

• Security keys added to IAM users can only be used for login protection.
• An IAM user can have a maximum of eight security keys added.

Adding a Security Key

1. Log in to the IAM console as the administrator.
2. In the user list, click a username or click Security Settings in the Operation column to access the user details page.
3. Click the Security Settings tab and locate the Multi-Factor Authentication (MFA) area.
4. Click Add MFA Device.
   Figure 1 Adding an MFA device
   

5. In the slide-out panel on the right, set the MFA device name.

   Only letters, digits, hyphens (-), and underscores (_) are allowed.

6. Select Security key for Device Type and click Next.
7. To set up Windows Hello, select an authentication method in the displayed dialog box.
   Figure 2 Setting up Windows Hello
   
   

   If the device does not support facial recognition, the facial recognition option will not be displayed.

8. To set up a FIDO security key, click Cancel in the displayed dialog box.
9. In the new dialog box, click OK.
10. Insert the security key into the USB port of the computer and tap the button on the key.
11. In the displayed dialog box, click OK.
12. After the verification is successful, a dialog box is displayed, indicating that the MFA device is added. Click OK. The MFA device will be displayed in the MFA device list.
    Figure 3 MFA device added
    

Unbinding a Security Key

1. Log in to the IAM console as the administrator.
2. In the user list, click a username or click Security Settings in the Operation column to access the user details page.
3. Click the Security Settings tab.
4. Click Unbind in the Operation column of the target security key.
5. In the displayed dialog box, enter YES in the text box.
   Figure 4 Confirming unbinding
   

6. Click OK.