Planning the HYPR Passwordless Rollout

The purpose of this article is to provide the steps for setting up and configuring HYPR Passwordless client on your workstations.

Planning

1. Review the Active Directory (AD) domain environment. Determine if your workstations are domain-joined.

2. If workstations are domain-joined, review the Advanced Installation requirements. Otherwise, continue with Execution, below.

Execution

1. Configure a custom certificate template.

2. Install the HYPR Mobile App:

   • HYPR Mobile App for iOS

   • HYPR Mobile App for Android

   • Consider any Mobile Device Management (MDM) requirements

Windows

1. Download the .msi file: Windows Desktop Client.

2. Install and Configure. Depending on your environment, you have two methods of installation available to you:

   • Installing with the UI

   • Command Line Installation for Windows

     NOTE: The Smart Card Authentication service must be enabled on affected workstations.

MacOS

1. Download the .pkg file: Desktop Client Installer.

2. Install and configure: Installing on macOS.

Test

• • Mobile App enrollment

    • Mobile App unlock

    • Mobile App lock

    • Additional testing:

      • YubiKey / Smart Card enrollment (not for macOS prior to 8.1.0)
      • YubiKey / Smart Card unlock (not for macOS prior to 8.1.0)
      • Offline PIN unlock
      • Recovery PIN unlock

Distribution

Configure MDM for HYPR Passwordless distribution. Once installation is verified, set up your MDM to distribute the client to your employees' workstations (see Command Line Installation for Windows or Terminal Installation for macOS).

Launch

After acclimating to the look and feel of the HYPR True Passwordless experience, you are now ready to begin planning your go-live!