The purpose of this article is to provide the steps for setting up and configuring HYPR’s Workforce Access Client (WFA) on your workstations.
Planning
-
Review the Active Directory (AD) domain environment. Determine if your workstations are domain-joined.
-
If workstations are domain joined, review the WFA Advanced Installation requirements. Otherwise, continue with Execution, below.
Execution
-
Configure a custom certificate template.
-
Install the HYPR Mobile App:
-
Consider any Mobile Device Management (MDM) requirements
Windows WFA
-
Download the
.MSI
file: Windows Desktop Client. -
Install and Configure: Installing with the UI.
-
The Smart Card Authentication service must be enabled on affected workstations
-
-
Test:
-
Mobile App enrollment
-
Mobile App unlock
-
Mobile App lock
-
Additional testing:
-
Yubikey / Smart Card enrollment
-
Yubikey / Smart Card unlock
-
Offline PIN unlock
-
Recovery PIN unlock
-
-
-
Configure MDM for WFA distribution. Once installation is verified, set up your MDM to distribute the WFA to your employees' workstations. See Installing from the Command Line.
MacOS WFA
-
Download the
.pkg
file: Desktop Client Installer. -
Install and configure: Installing on macOS.
-
Test:
-
Mobile App enrollment
-
Mobile App unlock
-
Mobile App lock
-
Additional testing
-
Offline PIN unlock
-
Recovery PIN unlock
-
-
-
Configure MDM for WFA distribution. Once installation is verified, set up your MDM to distribute the WFA to your employees' workstations. See Command-line Installation for macOS.
Launch
After acclimating to the look and feel of the HYPR True Passwordless experience, you are now ready to begin planning your go-live!