K9+ USB-A NFC PIV Security Key

The FEITIAN K9+ is a USB-A and NFC security key that pairs FIDO2 and FIDO U2F with Smart Card PIV, OATH-HOTP/TOTP and OpenPGP. It is built for organizations with USB-A desktops that want phishing-resistant MFA and PIV credential support in one slim, IP67-rated key.

FEITIAN ePass FIDO NFC Plus USB-A Security Key, model K9D is a FIDO U2F and FIDO2 certified security key with a USB-A and NFC interface for multi-factor authentication (MFA) with added PIV credential support.

Interested in bulk orders? Reach out to our team at sales@ftsafe.us for volume discounts.

Supports PIV credential authentication for logical and physical access for Government employees and contractors or privileged users to access servers, networks, and applications. 

• Works with: Windows Log-In, Twitter, Google Accounts, Microsoft Accounts, Facebook, Salesforce, Zoho, Dropbox, DUO Security, Microsoft Azure Entra ID, Microsoft Active Directory, Coinbase, Bank of America, Okta, Ping Identity, eBay, and many more websites, applications, computers, laptops and devices that accept USB Security Keys.

Features:

• Function enabled to supports PIV credential authentication for government, military, or privileged users to access to servers, networks, and applications. 
• Dual interface: USB-A and NFC communication.
• FIDO U2F and FIDO2 Certified: The public key infrastructure (PKI) behind FIDO provides strong cryptographic protection against various threats.
• One device supports multiple services: Interoperates out-of-the-box with hundreds of services that support FIDO U2F and FIDO2.
• FIPS-140-2 L2 Certified + Physical Security L3 Certified
• Supports Passwordless authentication on Azure Active Directory and Microsoft Services.
• Compliant with G-Suite and the Google Advanced Protection.
• Site Specific Keys: Secrets are not shared among service providers.
• Prevents phishing or man-in-the-middle attacks.
• Supported OS: Android, Chrome OS, Windows, MacOS, Linux
• Plug and Play: Identified as a USB HID device
• Fits nicely on a key-chain or in a wallet
• Slots: 2
• OATH-HOTP, OATH-TOTP
• Static Password
• Challenge Response
• IP67 Water Resistance Rating
• Smart Card PIV: RSA 1024, RSA 2048, ECC P256, ECC P384
• Open PGP: RSA 1024, RSA 2048
• FIDO: AES, ECDSA, SHA256
• Dimensions: 44 x 21 x 3 mm 
• Weight: 2.8 grams
• Model: K9 Plus

Warranty: 1-year since delivery date

Resources:

• Data Sheet
• PIV Related Resources

What is PIV?

A Personal Identity Verification (PIV) credential is a US Federal governmentwide credential used to access Federally controlled facilities and information systems at the appropriate security level.

PIV credentials have certificates and key pairs, pin numbers, biometrics like fingerprints and pictures, and other unique identifiers. When put together into a PIV credential, it provides the capability to implement multi-factor authentication for networks, applications, and buildings.

This is the process of creating and using a government-wide secure and reliable form of identification for federal employees and contractors, in support of HSPD-12, Policy for a Common Identification Standard for Federal Employees and Contractors.

Source: https://csrc.nist.gov/Projects/piv

Compatibility and use cases

• Connectors: plugs into desktops and laptops with a USB-A port and taps on NFC-enabled phones. Supported OS: Android, Chrome OS, Windows, macOS and Linux.
• Cloud and workforce sign-in: Microsoft Azure Entra ID, Microsoft Active Directory, Microsoft Accounts, Google Accounts, Okta, Ping Identity and DUO Security, plus hundreds of other FIDO2 and FIDO U2F services.
• PIV smart card credentials: access to servers, networks and applications for government, military and privileged users (RSA 1024, RSA 2048, ECC P256, ECC P384).
• Legacy systems: OATH-HOTP, OATH-TOTP, static password and challenge response across 2 slots, plus OpenPGP (RSA 1024, RSA 2048).

Frequently Asked Questions

Does the K9+ work with Microsoft Entra ID, Okta and Google?

Yes. FEITIAN lists Microsoft Azure Entra ID, Microsoft Active Directory, Okta, Ping Identity, DUO Security and Google Accounts among the services the K9+ works with. It supports passwordless authentication on Azure Active Directory and Microsoft services and is compliant with G-Suite and Google Advanced Protection.

Does the K9+ work with Android phones?

Yes. The K9+ has NFC, so it works with NFC-enabled phones by tapping the key, and Android is one of its supported operating systems. On computers it plugs into a standard USB-A port.

Is the K9+ water resistant?

Yes. The K9+ carries an IP67 water resistance rating. At 44 x 21 x 3 mm and 2.8 grams, it fits on a key-chain or in a wallet.

Do I need two K9+ keys?

Yes. Register at least two keys per person from day one: one for daily use and one stored safely as a backup. If a key is lost, you sign in with the backup key and remove the lost key from your account, so you never need a weaker fallback method.

What is the difference between the K9+ and the K9B?

Both keys use USB-A and NFC, support FIDO2, FIDO U2F, OATH-HOTP and OATH-TOTP, and are IP67 rated. The K9+ adds Smart Card PIV and OpenPGP, so choose it when you need PIV credentials or OpenPGP alongside FIDO2.

Further reading: which security key protects against account takeovers, best FIDO security keys for MFA, and all USB-A FIDO security keys.