Skip to main content
Version: 11.3.0

Planning the HYPR Passwordless Rollout

Use this checklist to plan, install, test and distribute the HYPR Passwordless client on your workstations, then prepare your users for launch.

Planning​

  1. Review the Active Directory (AD) domain environment.
  2. Determine whether your workstations are domain-joined.
  3. If workstations are domain-joined, review the Advanced Installation requirements. Otherwise, continue with Execution.

Execution​

  1. Configure a custom certificate template.

  2. Install the HYPR Mobile App:

  3. Consider any Mobile Device Management (MDM) requirements for the HYPR Mobile App.

Windows​

  1. Download the .msi file from Windows Desktop Client.

  2. Install and configure the client. Depending on your environment, use one of the following installation methods:

    note

    The Smart Card Authentication service must be enabled on affected workstations.

macOS​

  1. Download the .pkg file from Desktop Client Installer.
  2. Install and configure the client. See Installing on macOS.

Test​

Test the following on each workstation type before you distribute the client:

  • HYPR Mobile App enrollment
  • HYPR Mobile App unlock
  • HYPR Mobile App lock

Test the following where your deployment uses them:

  • YubiKey or smart card enrollment (not for macOS before 8.1.0)
  • YubiKey or smart card unlock (not for macOS before 8.1.0)
  • Offline PIN unlock
  • Recovery PIN unlock

Distribution​

After you verify the installation, configure your MDM to distribute the HYPR Passwordless client to your employees' workstations. See Command Line Installation for Windows or Terminal Installation for macOS.

Launch​

After testing is complete and you are familiar with the HYPR passwordless experience, plan your go-live. Tell employees what is changing and when with the Email Communication Templates.