The U2F Garden

TrustKey B210H

The B210 with Windows Hello support added. One fingerprint enrolment serves both FIDO and Windows logon.

TrustKey B210H

Biometric Authentication

Allows or requires biometric authentication

FIDO2 Certification

Certified by the FIDO Alliance as conforming to FIDO2 standards

More Info

FIDO L2 Certification

Certified by the FIDO Alliance to meet L2 Security Standards

More Info

HOTP passwords

Supports Hashed One-Time-Password generation

More Info

Management Application

Vendor provides applications that extend or configure the device

MacOS management application

Management application runs on MacOS

Windows management application

Management application runs on Windows

Resident Cryptographic Keys

Supports WebAuthn discoverable resident credentials, the building block of passkeys

More Info

Resident ECDSA keys

Supports ECDSA discoverable keys

Timed OTP passwords

Supports Time-based One-Time-Password generation

More Info

U2F Authentication

Conforms to the U2F Authenticator and WebAuthn standard

More Info

Windows Hello

Supports logging in using Windows Hello

The B210H extends the B210 with Windows Hello support. The same physical fingerprint enrolment satisfies the FIDO2 user verification check and the Windows logon Hello check, which avoids forcing users to enrol fingerprints twice.

This is the natural pick for an enterprise that uses Windows Hello for Business and Microsoft Entra ID for federated identity, since one device covers desktop logon, application sign in, and FIDO2 second factor.