Workstation Settings
HYPR Control Center Standard: Workstation
Use the Workstation Settings screen in the Workstation section to enable and configure optional HYPR workstation login features. These changes by default affect the HYPR Default Workstation Application. To manually change Workstation Settings for individual RP Applications, you must be in Control Center Advanced Mode > Select an Application > Application Configuration > Workstation Settings. The UI is identical to what is described in this article.
Require User Presence
[Windows Only]
If enabled, the Require User Presence feature will prompt users to complete their workstation account authentication (PIN, Security Key, smart card, etc.) as an extra security step when registering a mobile device. While this is enabled, the default one-minute timeout to allow for scanning the QR code is extended to three minutes.
In-App Logs Submission
Enables logs to be sent directly to the tenant logs from inside the Application. The same information is also sent directly to HYPR Customer Support when users do so. In the Support dialogs, the Company Display Name from General Settings will only be shown for the App if this feature is ON.
Mac users have some unique options surrounding this feature. See also Using HYPR Passwordless: Contact Support for how this setting affects the user experience on HYPR Passwordless for Mac.
Enable Security Key
If enabled, the Enable Security Key feature allows users to register a smart key via the HYPR Passwordless client and use it for workstation authentication as an alternative to their mobile device.
Related Topics:
Roaming Users
[Windows Only]
If enabled, the Roaming Users feature allows users to pair their mobile device once then access any domain-joined desktop by scanning a QR code displayed on the login screen. For a description of the user experience, see Logging In As a Roaming User.
Users Must Pair Again to Use This Feature!
After the Roaming Users feature is activated in the Control Center, users will need to re-register their mobile devices with the HYPR Passwordless application.
Enable Offline Mode
Offline Mode allows users to perform a PIN-based login when they don’t have an internet connection for either their mobile device or the workstation itself. For a description of the user experience, see Unlocking While Offline.
In addition to enabling/disabling Offline Mode, you can set the following parameters:
| Parameter | Description |
|---|---|
| PIN Length | The number of alphanumeric characters users will need to enter on the workstation login screen when their mobile device or the workstation is offline (6-13). |
| Number of Offline PINs | The number of times a user can access their machine while offline (10-25). Users are warned they’re running low on PINs when they have 20% remaining and the PIN count is reset upon successful completion of a normal online login. |
| PIN Display Timeout | Number of seconds the PIN will be displayed on the user’s smartphone (30-300). |
| Offline PIN Prompt | Number of seconds before the offline PIN is displayed when the user is online. |
| Offline Access Days | The number of consecutive days a user can login while offline (7-90). Users are warned they’re running low on days when they have 20% remaining and the offline access day count is reset upon successful completion of a normal online login. |
Recovery Mode
[Windows Only]
Recovery Mode allows users to perform a PIN-based login when they don’t have access to their mobile device. For more information, see Unlocking with a Recovery PIN for the user experience this enables.
In addition to enabling/disabling Recovery Mode, you can set the following parameters:
| Parameter | Description |
|---|---|
| Recovery PIN Length | The number of alphanumeric characters users will need to enter on the workstation login screen when they request a Recovery PIN (6-13). Default: 8 |
| Recovery PIN Counter | The number of Recovery PINs generated during the pairing process (1-10). Default: 5 |
| Recovery PIN Lifespan | Number of hours for which the Recovery PIN is valid (24-72). The timer starts when the user first logs into the workstation using the PIN. Default: 72 |
Security Key Recovery Mode
Enables a recovery PIN for security key users who do not have access to their key and need to login. See Pairing with a Security Key for security key PIN management.
Non-exportable Private Keys
If non-exportable private keys are enabled for the HYPR Passwordless client, Security Key Recovery Mode will be disabled automatically.
In addition to enabling/disabling Security Key Recovery Mode, you can set the following parameters:
| Parameter | Description |
|---|---|
| Recovery PIN Length | The number of alphanumeric characters users will need to enter on the workstation login screen when they request a Recovery PIN (6-13). Default: 8 |
| Recovery PIN Counter | The number of Recovery PINs generated during the pairing process (1-10). Default: 5 |
| Recovery PIN Lifespan | Number of hours for which the Recovery PIN is valid (24-72). The timer starts when the user first logs into the workstation using the PIN. Default: 72 |
Updated 2 months ago