BIIM Support     Overview Installation Using the BIIM MFA Authentication - TPM - Biometrics - SmartCards / Tokens Windows Client Logon Single Sign On Secure eWallet Document Manager Managing My Identity BioCert BIIM Settings AD & LDAP Integration

BioCert® Intelligent Identity Manager Support

Biometrics

Biometrics is an automated method for recognizing a person through a physiological or behavioral characteristic. Among the features measured are face, fingerprints, hand geometry, handwriting, iris, retina, vein, and voice. Biometric technologies are becoming the foundation of an extensive array of highly secure identification and personal verification solutions.

BioCert® Identity allows the user to replace the Windows password logon with a convenient and secure fingerprint logon. Unlike passwords, fingerprint credentials cannot be shared, given away, stolen, or guessed. Using BioCert® Identity biometric authentication reduces or eliminates the risk of identity theft, while at the same time offering a great deal of convenience.

Before a user can use a finger as a logon method, the user’s fingerprints must be registered. Registration of two or more fingers is recommended.

The following topic sections provide additional information about BioCert® Identity biometric functions:

Configuring Biometrics Settings

The following groups of fingerprint authentication settings may be specified:

• Fingerprint enrollment settings - Minimum and maximum number of fingers to be enrolled; which fingers to be registered
• Fingerprint logon settings - Number of fingers and which fingers to be presented for logon, plus an additional setting for fingerprint logon security:
  - Maximum inactivity time - Inactivity timeout after which users have to restart fingerprint logon from the beginning. Note that in a logon session timeout countdown starts from the last fingerprint image capture.
• Biometrics settings - Allow to specify the fingerprint provider (such as the fingerprint recognition engine) and to adjust the security level to the desired false acceptance rate.

To configure the fingerprint authentication settings listed above:

1. In BioCert® Identity, select Authentication and Credentials.
2. Select Credentials tab.
3. In the list of authentication methods, select Fingerprint Authentication, and then click Properties.
4. In Fingerprint Authentication Properties dialog box, configure the desired settings, and then click OK to save the changes.

Registering Fingerprints

To register your fingerprints:

1. In BioCert® Identity, select My Identity.
2. Select Register Fingerprints. The BioCert® Registration Wizard is displayed.
3. Using the mouse, select the finger for the registration. By default, the right index finger is selected.
4. Follow the instructions shown on the wizard page. Depending on the type of fingerprint reader, you are prompted either to place or swipe your finger over the fingerprint sensor to complete enrollment.
5. When the system collects a few finger impressions, you are prompted to submit one or more fingerprints (using the same finger) to complete verification.
6. When verification is complete, click Finish to complete the registration operation, or select another finger for registration.

Note
It is recommended to register at least two fingers per user account. Index fingers are preferable.

Using Fingerprints

Logging on to BioCert® Identity using fingerprint authentication

To log on to BioCert® Identity using fingerprints:

1. Launch the BioCert® Logon Wizard.
2. On the Introduce Yourself screen, type the user name, and then click Next.
3. On the Logon Policy screen, select the Fingerprints authentication method, and then click Next.
4. On the Present your fingerprints screen, present the previously registered finger. After the finger is validated, you will be logged on to BioCert® Identity.

   Note
   Depending on the model of the fingerprint reader, the user may be prompted to swipe the finger over the reader instead of placing the finger on the fingerprint reader.

Deleting Fingerprints

To delete a previously registered fingerprint:

1. In BioCert® Identity, select My Identity.
2. Select Register Fingerprints. The BioCert® Registration Wizard is displayed.
3. On Enroll your fingerprints screen, previously registered fingers are displayed highlighted in green. Using the mouse, right-click the desired finger. A pop-up menu is displayed.
4. Select Clear, and then click Finish to delete the selected fingerprint.

   Note
   Select Clear All if you wish to delete all the registered fingerprints from the user account.

Using Touch Fingerprint Reader

To improve the quality of a captured fingerprint image, you must use your touch fingerprint reader correctly:

1. Place the pad of your finger in the center of the sensor's area on the fingerprint reader. This will allow to maximize the volume of useful data to be taken during the fingerprint capture operation.
2. Apply gentle but with a little pressure. Be aware that pressing too hard will distort the image while pressing too lightly will produce a faint image.
3. Do not "roll" the finger when using area fingerprint readers.
4. To complete the capture operation for a single image, hold your finger on the reader until the system prompts you to remove the finger or proceeds to the next screen automatically. Very dry, wet, or cold fingers may require a longer time for the capture.

Using Swipe Fingerprint Reader

To improve the quality of a captured fingerprint image, you must use your swipe fingerprint reader correctly:

1. Place your fingertip 1/4 inch above the sensor stripe and centered.
2. Apply light pressure and swipe your finger across the sensor in one smooth motion.
3. During swiping, always keep a contact with the sensor, but do not press too hard.
4. Move with a proper speed (not too slow or too fast).
5. Keep you finger centered (do not move to left or right).
6. After each swipe, refer to further instructions provided by the system. You may be prompted to repeat the swipe or proceed to the next step.