Windows 10: BARE NUC Security - Is it possible to just use Security Key and Authenticator App

Hi there. I have a BARE NUC - ie no screen and no keyboard and I need it to login, and would prefer it to implement 2-Factor Authentication with a security key and Microsoft authentication app.....it then runs code and initiates other comms to other devices etc. So using a local account I can get it to fire up, log in and start the comms but there is no security there at all. It seems a bit of an oversight to not be able to 2FA using security keys and auth app. Anyone have suggestions?I tried RAPTOR which does a good job at locking if key pulled out but WIN11 doesn't do that and the Bluetoo

:)

 

key authentication

Key authentication is the recommended method for security, reject all password logins

If you lose the key use physical or remote console (IPMI)

 

key authentication

Quick poll! I finally got around to securing my remote VM by disabling password authentication and using key authentication only for SSH. Curious if others do the same.

 

Aegis Secure Key 3.0 Announced with 480GB Capacity

Apricorn, the leading manufacturer of software-free, hardware-encrypted USB drives, added three new sizes to their already expansive Aegis Secure Key 3.0 line, raising the total number of capacity options to seven (8, 16, 30, 60, 120, 240, and 480 GB.) With last year's introduction of the 240GB Aegis Secure Key 3, Apricorn had already doubled the storage capacity of the nearest competitor. This year, Apricorn has again doubled down on that size advantage with their new 480GB Secure Key: roughly four times the competition's max size of 120GB. And with the falling cost of flash storage, these larger capacity, super secure hardware-encrypted flash keys have rapidly become the ideal tool for corporate data security deployment.

"This is our most advanced product to date; besides packing half a terabyte of encrypted data into a thumbdrive, we have expanded its feature set to surpass any rival," says Mike McCandless, Apricorn's VP of Sales and Marketing. "And keeping true to the Apricorn tradition, The ASK 3.0 is completely software-free, cross-platform compatible with any OS, and has embedded authentication so no security parameters are ever shared with the host."







Beyond the expansion in size range, the Secure Key 3.0 carries the highest portable device security validation that the NIST grants: FIPS 140-2 level 3, and boasts an impressive list of features that surpasses other flash keys in its class such as a separate admin and user mode, two read-only modes, forced enrollment, programmable brute-force defense, a lock-override mode, plus a host of additional features that permit the Secure Key 3.0 to adhere to most security policies.

"Now that our high-capacity Secure Keys have come down so much in price, CISOs are rethinking the role of encrypted thumb drives in their business. No longer are they limited to carrying and storing small amounts of data. Now you've got secure, affordable flash storage capacities ranging up to nearly half a terabyte, USB 3.0 and flash transfer speeds, plus a laundry list of advanced security features; yet we're still only talking about a device that is about the size of a pack of gum."

Features

• FIPS 140-2 level 3 validated; IP58 Certified
• Embedded Keypad for host-free authentication
• Auto-Lock Feature - Automatically locks after a predetermined period of inactivity
• Drive Reset Feature - Allows for redeployment after wiping drive's data
• Lock Override - Permits the drive to remain unlocked during port re-enumeration
• Programmable Brute Force Protection - Sets the number of brute force attempts allowed, up to 20
• Self-Destruct Feature - Designate a Self-Destruct PIN to wipe and reset the device
• Tamper resistant / evident design
• 3-Year Limited Warranty

Starting at $99, Apricorn's Aegis Secure Key 3.0 is available in 8GB, 16GB, 30GB, 60GB, 120GB, 240GB, 480GB from most online retailers.