From b354ec0adbb7763544fd6c70c2a18731344dc275 Mon Sep 17 00:00:00 2001 From: Aabha Thipsay Date: Tue, 30 Oct 2018 16:05:02 -0700 Subject: [PATCH] Added link to CTAP spec --- .../microsoft-compatible-security-key.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/microsoft-compatible-security-key.md b/windows/security/identity-protection/hello-for-business/microsoft-compatible-security-key.md index d91af39e14..1d3573bda0 100644 --- a/windows/security/identity-protection/hello-for-business/microsoft-compatible-security-key.md +++ b/windows/security/identity-protection/hello-for-business/microsoft-compatible-security-key.md @@ -14,14 +14,14 @@ ms.date: 10/25/2018 # What is a Microsoft compatible security key? Microsoft has been aligned with the [FIDO Alliance](https://fidoalliance.org/) from the start with a mission to replace passwords with an easy to use, strong credential. We have been working with our partners to extensively test and deliver a seamless and secure authentication experience to end users. -The FIDO2 CTAP specification contains a few optional features and extensions which are crucial to provide that seamless and secure experience. +The [FIDO2 CTAP specification](https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-client-to-authenticator-protocol-v2.0-id-20180227.html) contains a few optional features and extensions which are crucial to provide that seamless and secure experience. A security key **must** implement the following features and extensions from the FIDO2 CTAP protocol to be Microsoft compatible: -| #
| Feature / Extension trust
| Why is this required?
| Relevant Section in FIDO2 CTAP specification
| -| --- | --- | --- | --- | -| 1 | Resident key | This feature enables the security key to be portable, where your credential is stored on the security key | Section XXX | -| 2 | Client pin | This feature enables security keys to protect your credentials with a second factor like PIN
We recommend strong multi-factor credentials for authentication to all Microsoft services| Section XXX | -| 3 | hmac-secret | This extension ensures you can sign-in to your device when it's off-line or in airplane mode | Section XXX | -| 4 | Multiple accounts per RP | This feature ensures you can use the same security key across multiple services like MSA and AAD | Section XXX | +| #
| Feature / Extension trust
| Why is this required?
| +| --- | --- | --- | +| 1 | Resident key | This feature enables the security key to be portable, where your credential is stored on the security key | +| 2 | Client pin | This feature enables security keys to protect your credentials with a second factor like PIN
We recommend strong multi-factor credentials for authentication to all Microsoft services| +| 3 | hmac-secret | This extension ensures you can sign-in to your device when it's off-line or in airplane mode | +| 4 | Multiple accounts per RP | This feature ensures you can use the same security key across multiple services like MSA and AAD |