For the complete documentation index, see llms.txt

Set it up

Support for hardware-protected keys is enabled by default.

The hardware-protected key validation strategy determines what to do with devices if the validation for hardware-protected keys fails.

This can be configured in your application configuration using the hwKeyValidationStrategy property.

Validation strategies

There are two validation strategies that you can choose between, shown in the table below:

Update your configuration

To update your application configuration, you can use the Update properties of application configuration endpoint in our MobileID Admin API.

With this operation, you can set a new value for the hwKeyValidationStrategy property, depending on your chosen validation strategy.

Validation result

The result of the hardware signature validation can be collected and returned in the operation response, as a part of the following risk attributes:

Attribute name	Possible values
hwKeyClientStatus	Hardware-protected key client statuses
hwKeyServerResult	Hardware-protected key server results

Enable risk attributes

The hardware-protected key risk attributes are Optionally collected, which means that they are not collected and returned in the operation response by default.

To enable these risk attributes, you need to set them in our risk data feature:

1. Go to Signicat Dashboard > Products > MobileID > Features > Risk data.
2. Under the Optionally collected section, tick the following:
   • Hardware key client status
   • Hardware key server result
3. Click the Save button.