Workstation Settings

HYPR Control Center Standard: Workstation

Use the Workstation Settings screen in the Workstation section to enable and configure optional HYPR workstation login features. These changes by default affect the HYPR Default Workstation Application. To manually change Workstation Settings for individual RP Applications, you must be in Control Center Advanced Mode > Select an Application > Application Configuration > Workstation Settings. The UI is identical to what is described in this article.

After making any changes on this page, be sure to scroll down and Save the changes.

Require User Presence

[Windows Only]

If enabled, the Require User Presence feature will prompt users to complete their workstation account authentication (PIN, Security Key, smart card, etc.) as an extra security step when registering a mobile device. While this is enabled, the default one-minute timeout to allow for scanning the QR code is extended to three minutes.

In-App Logs Submission

Enables logs to be sent directly to the tenant logs from inside the Application. The same information is also sent directly to HYPR Customer Support when users do so. In the Support dialogs, the Company Display Name from General Settings will only be shown for the App if this feature is ON.

Mac users have some unique options surrounding this feature. See also Using HYPR Passwordless: Contact Support for how this setting affects the user experience on HYPR Passwordless for Mac.

1095

Enable Security Key

If enabled, the Enable Security Key feature allows users to register a smart key via the HYPR Passwordless client and use it for workstation authentication as an alternative to their mobile device.

Related Topics:

1097

Roaming Users

[Windows Only]

If enabled, the Roaming Users feature allows users to pair their mobile device once then access any domain-joined desktop by scanning a QR code displayed on the login screen. For a description of the user experience, see Logging In As a Roaming User.

1256

📘

Users Must Pair Again to Use This Feature!

After the Roaming Users feature is activated in the Control Center, users will need to re-register their mobile devices with the HYPR Passwordless application.

Signals interval (seconds)

Set the polling interval to govern how often HYPR Adapt checks for signal data. The default is 3600 seconds, or 1 hour.

[image here]

For more information, see the article on HYPR Adapt.

rpAppId of the workstation application

For Web RP Applications using Single Registration: Web to Workstation, enter the desired Workstation RP Application's rpAppId value here to map account pairings.

[image here]

Enable Offline Mode

Offline Mode allows users to perform a PIN-based login when they don’t have an internet connection for either their mobile device or the workstation itself. For a description of the user experience, see Unlocking While Offline.

1102

In addition to enabling/disabling Offline Mode, you can set the following parameters:

ParameterDescription
PIN LengthThe number of alphanumeric characters users will need to enter on the workstation login screen when their mobile device or the workstation is offline (6-13).
Number of Offline PINsThe number of times a user can access their machine while offline (10-25).

Users are warned they’re running low on PINs when they have 20% remaining and the PIN count is reset upon successful completion of a normal online login.
PIN Display TimeoutNumber of seconds the PIN will be displayed on the user’s smartphone (30-300).
Offline PIN PromptNumber of seconds before the offline PIN is displayed when the user is online.
Offline Access DaysThe number of consecutive days a user can login while offline (7-90).

Users are warned they’re running low on days when they have 20% remaining and the offline access day count is reset upon successful completion of a normal online login.

Recovery Mode

[Windows Only]

Recovery Mode allows users to perform a PIN-based login when they don’t have access to their mobile device. For more information, see Unlocking with a Recovery PIN for the user experience this enables.

In addition to enabling/disabling Recovery Mode, you can set the following parameters:

ParameterDescription
Recovery PIN LengthThe number of alphanumeric characters users will need to enter on the workstation login screen when they request a Recovery PIN (6-13).
Default: 8
Recovery PIN CounterThe number of Recovery PINs generated during the pairing process (1-10).
Default: 5
Recovery PIN LifespanNumber of hours for which the Recovery PIN is valid (24-72). The timer starts when the user first logs into the workstation using the PIN.
Default: 72

Security Key Recovery Mode

Enables a recovery PIN for security key users who do not have access to their key and need to login. See Pairing with a Security Key for security key PIN management.

🚧

Non-exportable Private Keys

If non-exportable private keys are enabled for the HYPR Passwordless client, Security Key Recovery Mode will be disabled automatically.

1095

In addition to enabling/disabling Security Key Recovery Mode, you can set the following parameters:

ParameterDescription
Recovery PIN LengthThe number of alphanumeric characters users will need to enter on the workstation login screen when they request a Recovery PIN (6-13).
Default: 8
Recovery PIN CounterThe number of Recovery PINs generated during the pairing process (1-10).
Default: 5
Recovery PIN LifespanNumber of hours for which the Recovery PIN is valid (24-72). The timer starts when the user first logs into the workstation using the PIN.
Default: 72