Accessing a SB2PROD Invitation Link
This section will review the steps of accessing the invitation link you received to register a FIDO credential with your Swissbit iShield Key 2 Pro Security Key with the SB2PROD site.
You must have the Swissbit iShield Key 2 Pro Security Key – with Security Key PIN and the SB2PROD Invitation URL that was sent to you for the FIDO registration process.
D1 Prerequisites
- Windows 10
- Microsoft (MS) Edge Browser, version 146.0.3856.109
- Swissbit iShield Key 2 Pro MIFARE
- Internet Connection
- USB-C port or USB-C-to-USB-A adapter
D2 Plug in the iShield 2 Security Key
Plug the Security Key into the USB-C port (or the USB-C to USB-A adapter)
D3 Identifying the USB-C Port
Locate the USB-C port—typically found along the edge of the computer, it features a compact design with smooth, rounded corners that set it apart from traditional USB-A ports.
The image below shows both a USB-C port and its matching male connector.
D4 No USB-C Port? No Problem.
With the USB-A to USB-C adapter provided by the Administrator of your SB2 site, simply plug the USB-A end into the computer and insert the Security Key into the USB-C port.
The provided USB adapter pictured below.
D5 Open the Edge Browser
Open the Edge browser.
D6 Find the Edge Browser Drop Down Menu
Click the three-dot icon in the upper-right corner. Then, select New InPrivate window from the drop-down menu. Always use Edge InPrivate mode to access the SB2PROD platform URL https://sb2.strongkey.com.
D7 SB2PROD Platform URL
In the InPrivate browser address bar, enter the provided SB2PROD Platform invitation link. You will receive the link in an email from a member of the StrongKey Team.
Note
The SB2 registration invite URL is long so it will be advantageous to use the “cut and paste” options. Here is an example of what the URL will look like:
https://sb2.strongkey.com/sb2/register?hash=7db88e3055d49b105fca14f2f18a7059d52ef02a9c93cc13a85fd701a1143c1a
D8 Select the Certificate
A pop-up window will display the available certificates. The name in the prompt should match your name, as created by the Administrator of the SB2PROD site. Select the presented certificate and click OK to proceed.
Note
You will only see such a certificate prompt if the SB2 Root CA and SB2 Subordinate CA certificates were imported correctly on your computer. If you do NOT see a certificate prompt, please contact support@strongkey.com for support.
D9 Enter Security PIN
The next dialog box will prompt for the Swissbit iShield Key 2 Pro’s PIN. Enter and click OK to continue. This PIN should have been provided to you by the Administrator of the SB2 site.
For instructions on changing the PIN, refer to the guide on Changing a Swissbit iShield Key 2 Pro PIN.
D10 SB2 Platform Landing Page
Upon successful authentication with the digital certificate, the following one time SB2 Landing Page will be displayed. This page has three (3) sections:
- On the left-hand side, some details of your digital certificate will be displayed (Critical details have been redacted to protect privacy.).
- Legal disclosures for the SB2 platform are located in the middle section. You must agree to the terms disclosed before continuing with this process.
- Use the right-hand panel to nickname your Security Key. This makes it easier to identify each key if using more than one.
D11 Terms & Conditions
Review and accept the terms and conditions in the Disclosures panel. The “I agree” box must be checked before proceeding with Security Key registration.
D12 Give Security Key Nickname
In the Security Key panel on the right, enter a descriptive nickname for the key in the "Name" field. Then select Register to complete the process. Names are typically short (up to 16-20 alpha-numeric characters), such as:
- John’s iShield Security Key for sb2.strongkey.com
- iShield for sb2.strongkey.com
D13 Security Key Setup
Click OK.
D14 Continue Setup
Click OK.
D15 Enter Security PIN
To continue adding a credential to the Security Key, enter the PIN and click OK.
D16 Touch the Security Key
To continue adding the credential, touch the metal contact at the end of Security Key with your finger.
Note
This step is called the “Test of User Presence” (TUP) in the FIDO ecosystem. It ensures that no remote attacker can impersonate you, because they would need both your Security Key and your physical interaction at your computer. Each time you use your FIDO credential to sign in to the SB2 platform, you’ll complete this brief TUP check as a security safeguard.
D17 Registration Confirmation
Upon successfully adding the credential, a dialog box will confirm the registration action.Click Continue to sign-in to SB2PROD.
D18 Signing In
After clicking Continue, a prompt will appear prompting you to sign in with the new credential. Verify you are signing in with the Security Key when authenticating to the SB2PROD. Enter your PIN and Click OK.
D19 Test of User Presence (TUP)
To continue the login procedure, touch the metal contact on top of the Security Key – this confirms a user is present and attempting to sign in from that computer with a legitimate credential on the Security Key.
D20 The SB2PROD Platform Dashboard
CONGRATULATIONS! Your access to the SB2PROD Platform has been successfully established, and your Security Key with your new FIDO credential is registered. Your account name is displayed on the right side of the screen. You may click the gear icon to edit your profile.
All SB2 users have access to two primary applications:
- StrongKey CryptoCabinet (SKCC): For securely storing and sharing encrypted files containing sensitive data.
- StrongKey Content Distribution (SKCD): For storing and sharing digitally signed, unencrypted documents.
- Settings, Notifications and profile picture.
Clicking either image on the SB2 Dashboard opens the application in a new browser tab. Detailed user guides for both SKCC and SKCD are available separately.
