For the complete documentation index, see llms.txt

Set it up

Support for hardware-protected keys is enabled by default.

The hardware-protected key validation strategy determines what to do with devices if the validation for hardware-protected keys fails.

This can be configured in your application configuration using the hwKeyValidationStrategy property.

Validation strategies

There are two validation strategies that you can choose between, shown in the table below:

Update your configuration

To configure the validation strategy:

1. Go to Signicat Dashboard > Products > MobileID > Application behaviour.
2. Select the Hardware key validation tab.
3. Select the desired hardware-protected key validation strategy, then click Save.

Validation result

The result of the hardware signature validation can be collected and returned in the operation response, as a part of the following risk attributes:

Attribute name	Possible values
hwKeyClientStatus	Hardware-protected key client statuses
hwKeyServerResult	Hardware-protected key server results

Enable risk attributes

The hardware-protected key risk attributes are Optionally collected, which means that they are not collected and returned in the operation response by default.

To enable these risk attributes, you need to set them in our risk data feature:

1. Go to Signicat Dashboard > Products > MobileID > Features > Risk data.
2. Under the Optionally collected section, tick the following:
   • Hardware key client status
   • Hardware key server result
3. Click the Save button.