Steps to register and using FIDO enabled credentials in Symantec MyVIP

Products

VIP Service

Issue/Introduction

This article describes how to register the FIDO enabled credentials ( Biometric or Security Key) in Symantec MyVIP.

Environment

VIP Manager

Resolution

This article describes how to register the following FIDO-enabled credentials in MyVIP. Click on each of the links and follow the steps described. Although these instructions are for specific FIDO credential types and operating systems, the processes for registering and using other FIDO credential types with other operating systems are very similar.

Note: These procedures are based on the current vendor hardware and software, and are believed to be accurate at the time of writing. However, you should always refer to the documentation provided by these vendors for the most up-to-date information.

For more information about the My VIP portal and registering supported credentials, see the My VIP portal online Help.

Laptop Fingerprint Biometric Registration

1. Log into the My VIP portal and select Passwordless Credential:

2. Select Biometrics as your credential type and enter a device name:

3. When the Making sure it’s you window pops up, scan your fingertip on the laptop biometric reader. Same process can be followed for Face scan as well.

4. Your laptop’s biometric data (fingerprint) is now registered. The credential should now show up as enabled in the My VIP portal:

Yubikey Registration

1. Insert your Yubikey security key into the USB port on your laptop. For mobile devices, keep the Yubikey handy for NFC.

2. Log into the My VIP portal and select Passwordless Credential:

3.Select Security Key as your credential type and enter a device name:

4. When the Security key setup window pops up, click OK:

5. When the Continue setup window pops up, touch the Yubikey that is plugged into the USB port (laptops), or hold the Yubikey next to your NFC antenna (mobile devices):

6. Your Yubikey is now registered. The credential should now show up as enabled in the My VIP portal:

Mobile Security Credential (FIDO Passkey) Registration

1. Log into the My VIP portal and select Passwordless Credential:

2. Select Security Key as the credential type and enter a device name:

3. Click CANCEL on the Security key setup window:

4. On the Create a passkey window, choose A different device:

5. Scan the resulting QR code with the camera on the mobile device that you want to register, and choose Open the URL or Browser:

6. Make sure that the Remember this computer box is checked and click Allow.

The screens that you see will vary based on your mobile device’s operating system. However, the process for registration is the same.

7. You may be prompted to allow Chrome to find or connect to this mobile device:

8. You are prompted to unlock the device to prove that you are the owner. Use the method that you have configured for your device, such as FaceID, fingerprint, or PIN.

9. Once verified, the passkey is created. For iOS, you are prompted to approve the request save the passkey:

10. This screen closes and you return to the camera. Your passkey is now registered as a mobile credential. The credential should now show up as enabled in the My VIP portal:

Using a FIDO credential to authenticate from a mobile device

Log into a site as usual, using your username and password..
When prompted for a credential, select your credential and tap Submit.
Use the credential to authenticate:
1. If you are authenticating by Biometrics, use your fingerprint or facial recognition, as appropriate. If you using a security passkey jump to step 2 for laptop authentication or step 3 for mobile authentication.

2. If you are authenticating with a security key, tap your security key to the NFC antenna on your mobile device.

3. If you are authenticating with a passkey, click Cancel on the Making sure it’s you pop up.

4. You are then prompted to select your passkey. Android devices - You can select your device listed. iOS - select A different device.

5. You may be prompted to complete authentication:

iOS:

A QR Code will appear, scan this with your camera on the iDevice:

Click Continue:

Now a pop up should ask for the Biometric option you have setup on your iOS device...usually FaceID or Fingerprint:

Then you get a signing in page and then the phone goes back to the camera screen and the application should now log you in.

Android:

If you were able to select a device name, you get the popup below. If you selected the A different device choice, you will get a QR code popup you will need to scan with your device camera.

Click the prompt and login with your FaceID or your Fingerprint.

6. Once you have completed authentication, you are allowed access to the site.