WebAuthn Redirection/FIDO Keys

WebAuthn redirection requires a browser extension to be installed on the Computle Machine. When the feature is enabled and the browser extension is installed, any WebAuthn requests initiated by the web applications running in the browser within the session are seamlessly redirected to the local client. Users can then use utilize devices like Windows Hello or YubiKey to finalize the authentication.

Automatic Prompt on First Browser Launch

Users are prompted to enable the DCV browser extension when they first launch their browser. If they choose not to install the extension or uninstall it later, WebAuthn redirection will not work. An administrator can enforce installation using the Group Policy.

Installing Using the Group Policy

For organizations looking to deploy the extension on a broader scale, you can utilize the Group Policy.

Using Microsoft Edge:

  1. Launch the Group Policy Management tool (gpmc.msc).

  2. Navigate through: Forest > Domains > Your FQDN (e.g., example.com) > Group Policy Objects.

  3. Select desired policy or create a new one then right-click on it and select "Edit".

  4. Follow this path: Computer Configuration > Administrative Templates > Microsoft Edge > Extensions.

  5. Access "Configure extension management settings", set it to "Enabled".

  6. In the field for Configure extension management settings, enter the following:

    {"ihejeaahjpbegmaaegiikmlphghlfmeh":{"installation_mode":"force_installed","update_url":"https://edge.microsoft.com/extensionwebstorebase/v1/crx"}}
  7. Save the changes and reboot the server.

Using Google Chrome:

  1. Obtain and implement the Google Chrome administrative template

  2. Similar to the steps for Microsoft Edge, navigate through the Group Policy Management tool.

  3. Proceed to: Computer Configuration > Administrative Templates > Google Chrome > Extensions.

  4. Access "Configure extension management settings", set it to "Enabled".

  5. In the field for Configure extension management settings, enter the following:

    {"mmiioagbgnbojdbcjoddlefhmcocfpmn":{ "installation_mode":"force_installed","update_url":"https://clients2.google.com/service/update2/crx"}}
  6. Save the changes and reboot the server.

Installing Manually

Extensions can be sourced from the respective browser stores:

For manual installation:

  1. Connect to your NICE DCV session.

  2. Open your preferred browser, and navigate to the relevant browser store (links above).

  3. Proceed by selecting "Get" (Microsoft Edge) or "Add to Chrome" (Google Chrome).

  4. Follow the on-screen instructions. A confirmation will appear once the extension is successfully added.

Last updated