Workstation Settings
Workstation Settings appear in Control Center in more than one place:
- In the Standard Mode: Workstation page as a tab
- In the Advanced Mode: App Properties menu for a Workstation channel or Workstation-enabled Application selected under Choose an App
Use the Workstation Settings screen to enable and configure optional HYPR workstation login features. These changes by default affect the HYPR Default Workstation Application and will be used as the default settings for any newly created RP Applications. To manually change Workstation Settings for individual RP Applications, you must be in Control Center Advanced Mode > Select an Application > Application Configuration > Workstation Settings. The UI is identical to what is described in this article.
:::inf API Calls Workstation Settings can be administered using the following RP Application > Workstation API calls:
- Retrieve workstation settings:
GET /cc/api/appconfig/workstation - Update workstation settings:
PUT /cc/api/appconfig/workstation:::
Require User Presence for Registration
This setting doesn't apply when the Single Registration Web-to-Workstation flow is enabled since the registration happens on the Web
If enabled, the Require User Presence feature will prompt users to complete their workstation account authentication (PIN, Security Key, smart card, etc.) as an extra security step when registering a mobile device. While this is enabled, the default one-minute timeout to allow for scanning the QR code is extended to three minutes.
In-App Logs Submission
Enables logs to be sent directly to the tenant logs from inside the Application. The same information is also sent directly to HYPR Customer Support when users do so. In the Support dialogs, the Company Display Name from General Settings will only be shown for the App if this feature is ON.
Mac users have some unique options surrounding this feature. See also User Experience: Contact Support for how this setting affects the user experience on HYPR Passwordless for Mac.
Enable Security Key
If enabled, the Enable Security Key feature allows users to register a security key or smart-card via the HYPR Passwordless client and use it for workstation authentication as an alternative to their mobile device.
Related Topics:
Roaming Users
If enabled, the Roaming Users feature allows users to pair their mobile device once then access any domain-joined desktop by scanning a QR code displayed on the login screen. For a description of the user experience, see Logging In As a Roaming User.
After the Roaming Users feature is activated in the Control Center, users will need to re-register their mobile devices with the HYPR Passwordless application.
HYPR supports Single Registration: Web-to-workstation operations for roaming users. Additional Virtual Desktop Infrastructure (VDI) configuration must be performed; the following limitations apply:
-
If a user has multiple accounts registered, the user cannot select which account to use when authenticating
-
Offline and Recovery PINs are not generated on the workstations for roaming users
Enable Offline Mode
Offline Mode allows users to perform a PIN-based login when they don't have an internet connection for either their mobile device or the workstation itself. For a description of the user experience, see Unlocking While Offline.
In addition to enabling/disabling Offline Mode, you can set the following parameters:
| Parameter | Description |
|---|---|
| PIN Length | The number of alphanumeric characters users will need to enter on the workstation login screen when their mobile device or the workstation is offline (6-13). |
| Number of Offline PINs | The number of times a user can access their machine while offline (10-25). Users are warned they're running low on PINs when they have 20% remaining and the PIN count is reset upon successful completion of a normal online login. |
| PIN Display Timeout | Number of seconds the PIN will be displayed on the user's smartphone (30-300). |
| Offline PIN Prompt | Number of seconds before the offline PIN is displayed when the user is online. |
| Offline Access Days | The number of consecutive days a user can login while offline (7-90). Users are warned they're running low on days when they have 20% remaining and the offline access day count is reset upon successful completion of a normal online login. |
Recovery Mode
Recovery Mode allows users to perform a PIN-based login when they don't have access to their mobile device. For more information, see Unlocking with a Recovery PIN for the user experience this enables.
In addition to enabling/disabling Recovery Mode, you can set the following parameters:
| Parameter | Description |
|---|---|
| Recovery PIN Length | The number of alphanumeric characters users will need to enter on the workstation login screen when they request a Recovery PIN (6-13). Default: 8 |
| Recovery PIN Counter | The number of Recovery PINs generated during the pairing process (1-10). Default: 5 |
| Recovery PIN Lifespan | Number of hours for which the Recovery PIN is valid (24-72). The timer starts when the user first logs into the workstation using the PIN. Default: 72 |
Security Key Recovery Mode
Enables a recovery PIN for security key or smart-card users who do not have access to their device and need to login. See Pairing with a Security Key for security key or smart-card PIN management.
If non-exportable private keys are enabled for the HYPR Passwordless client, Security Key Recovery Mode will be disabled automatically.
In addition to enabling/disabling Security Key Recovery Mode, you can set the following parameters:
| Parameter | Description |
|---|---|
| Recovery PIN Length | The number of alphanumeric characters users will need to enter on the workstation login screen when they request a Recovery PIN (6-13). Default: 8 |
| Recovery PIN Counter | The number of Recovery PINs generated during the pairing process (1-10). Default: 5 |
| Recovery PIN Lifespan | Number of hours for which the Recovery PIN is valid (24-72). The timer starts when the user first logs into the workstation using the PIN. Default: 72 |