-
Notifications
You must be signed in to change notification settings - Fork 51
nkapp2 doc update #493
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
nkapp2 doc update #493
Changes from 1 commit
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,29 @@ | ||
Getting Started | ||
=============== | ||
|
||
Home Page | ||
********* | ||
|
||
The home page allows quick access to essential functions, including checking the current app version, saving log files, and getting support. | ||
|
||
.. figure:: ./images/home-page.png | ||
|
||
App Version | ||
*********** | ||
|
||
To ensure you are using the latest version of the application, click “Check for App Update.” | ||
|
||
.. figure:: ./images/app-version.png | ||
|
||
if no updates are available, the button will display “App is up to date.” | ||
alexgithublab marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
Log File | ||
******** | ||
|
||
The “Save Log File” option lets you export a record of the application’s recent activity, including actions, errors, and system messages. This log file can help diagnose and resolve issues with the application. | ||
|
||
Need Help? | ||
********** | ||
|
||
Click the “?” icon or "Instructions and help" link on the home page for quick access to help content and troubleshooting. | ||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,6 +1,13 @@ | ||
Nitrokey App 2 | ||
============== | ||
Nitrokey App 2 is the graphical application for Nitrokey 3 devices. For Nitrokey Pro and Nitrokey Storage, use `Nitrokey App 1 <https://www.nitrokey.com/download>`__ instead. | ||
Nitrokey App 2 is the graphical application for Nitrokey 3 devices. For Nitrokey Pro and Nitrokey Storage, use instead. | ||
alexgithublab marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
The Nitrokey App 2 is a graphical application designed to manage Nitrokey 3 devices. It provides a user-friendly interface for configuring FIDO2 authentication, password storage, firmware updates, and PIN management. | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Is "password storage" the correct term? In Nitrokey App 1 we called it Password Safe. What is the correct term here? There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I'm not sure. Is password safe is included in the password storage feature ? Otherwise password storage is a old term and should be changed by password safe There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. shoud the header of the passwords file be Password Safe then ? |
||
Available languages: English, German, French, Italian, Polish, and Arabic. Language change requires application restart. | ||
|
||
.. note:: | ||
|
||
This application is compatible only with Nitrokey 3 devices. For Nitrokey Pro and Nitrokey Storage devices, please use `Nitrokey App 1 <https://www.nitrokey.com/download>`__. | ||
|
||
Installation | ||
------------ | ||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -23,3 +23,63 @@ Entries are divided into two categories: unprotected (shown as an open lock) and | |
You can choose to create a protected entry by checking the "Protect with PIN" box when adding a new entry. | ||
|
||
You also have the option to require user presence in the form of a required touch on the Nitrokey 3 to access the entry by checking the "Require User Presence" box. | ||
|
||
Store and Manage Various Credentials | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Use a more snappy heading. |
||
------------------------------------ | ||
|
||
When adding credentials in the Passwords tab, select an algorithm from the drop down menu. Plain usernames using a password, HOTPs, TOTPs, and HMAC are all supported. | ||
|
||
.. figure:: ./images/credential-example.png | ||
|
||
Select the “None” option to skip two-factor authentication and use a standard username and password combination. Enter a username and a password that only you know, as shown in the example above. The method relies solely on your password for authentication. | ||
|
||
Password Algorithms | ||
******************* | ||
|
||
To use a password algorithm, go to security settings of the application you want to secure and enable two-factor authentication. Choose the “Authenticator App” or “Manual Setup” option if available. | ||
|
||
The service will show a secret key. Copy this secret key to enter into your credential setup. Open the password manager app and add a new credential. Choose the algorithm you want to use and paste the secret key. Save the credential. | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. "show a secret key" this is often combined with a QR code, which is a helpful hint here for the instructions. "Open the password manager app" ? |
||
|
||
TOTP | ||
++++ | ||
|
||
A two-factor authentication code that changes at regular time intervals. Enter the shared secret key into the field provided. | ||
|
||
.. figure:: ./images/TOTP-secret.png | ||
|
||
After the credential is saved, click the “OTP” button to generate a 6 digit code that expires in 60 seconds. The system you’re logging into generates the same code using the shared key and current time to verify your identity. | ||
|
||
.. figure:: ./images/TOTP-code.png | ||
|
||
HOTP | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Both sectoins TOTP and HOTP are almost identical. Also HMAC is very similar. Maybe it would be better to have a single chapter for all three but describe the differences (which are not here yet) such as when to use which method. |
||
++++ | ||
|
||
A two factor authentication code that changes each time you trigger it. Enter the shared secret key into the field provided. | ||
|
||
.. figure:: ./images/HOTP-secret.png | ||
|
||
Once the credential is saved, click the “OTP” button to generate a 6 digit code based on a counter. The system you’re logging into uses the same counter and key to verify the code. The counter only increases when the code is used, press the button again to generate a new code. | ||
|
||
.. figure:: ./images/HOTP-code.png | ||
|
||
HMAC | ||
++++ | ||
|
||
A security method used to confirm that data is authentic and has not been altered by combining a secret key with a message. Enter the shared secret key in the field provided or click the refresh button to have the app generate a secret key for you. | ||
|
||
.. figure:: ./images/HMAC-secret.png | ||
|
||
Once the credential is saved, the app will use a hash function to generate a code and verify the integrity of your message based on your secret key. | ||
|
||
Verification Requirements | ||
************************* | ||
|
||
If a PIN has been set, it must be entered before making any changes. You are allowed only 8 attempts before lockout. | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. lockout? I think it is irrevocable. |
||
|
||
For certain actions, you will be prompted to press your Nitrokey to continue. Watch for a flashing green light on your Nitrokey device and icon. | ||
|
||
.. figure:: ./images/flashing-green-icon.png | ||
|
||
You may also apply these additional settings to your credentials when creating them. Simply check the boxes for any options you wish to enable. | ||
|
||
.. figure:: ./images/additional-settings.png |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,19 @@ | ||
Firmware Updates | ||
================ | ||
|
||
Automatic Updates | ||
***************** | ||
|
||
Open the “overview” tab to automatically and manually update your device. Click “Check for Update” button to start the automatic update process. The firmware files will be downloaded and used to update your Nitrokey. | ||
|
||
.. figure:: ./images/overview.png | ||
|
||
Manual (Local) Update | ||
********************* | ||
|
||
If you have the firmware files already on your computer, click “More Options” to manually update the device with your local firmware. | ||
|
||
.. figure:: ./images/local-firmware.png | ||
|
||
.. important:: | ||
When updating your device, remove all other Nitrokey 3 devices except the one being updated. |
Uh oh!
There was an error while loading. Please reload this page.