Unlock Settings in the Hub Admin Console Explained.

Unlock Settings from the Hub Admin Console

All computers in the same Group will be subject to the same configurations for locking, unlocking, and PIN complexity. See the steps below for accessing the Unlock Settings in the GateKeeper Hub.

1) Log in to your GateKeeper Hub.

2) Click Groups & Settings on the left side.

3) Locate the Group you want to make setting changes and click "Manage Settings > Update Settings" to the right of the Group's name.

4) Now you can edit Unlock settings for every user and computer in this Group. Done!

Unlock Settings

Login and Unlock Method: Unlock Method defines how GateKeeper will unlock your computer. We recommend the Token/Card plus PIN option for secure 2-factor authentication.

1FA: Touch Token or Scan Card	Requires users to tap their GateKeeper token key fob (or phone) to the USB proximity sensor to log in - great for shared offices.
2FA: Token/Card plus PIN	2FA: requires a user to have their GateKeeper token (possession factor) and to type in a secret PIN (knowledge factor). Most secure method.

OFF-HOURS LOGIN AND UNLOCK METHOD Off-Hours Unlock Method defines how GateKeeper will unlock your computer during your organization's non-working hours. We recommend the Token with PIN Login (2FA) option for secure 2-factor authentication. You can configure off-hours in Global Settings.

1FA: Touch Token or Scan Card	Requires users to tap their GateKeeper token key fob (or phone) to the USB proximity sensor to log in - great for shared offices.
2FA: Token/Card plus PIN	2FA: requires a user to have their GateKeeper token (possession factor) and to type in a secret PIN (knowledge factor). Most secure method.

Require Windows password. You can choose to enter your password IN ADDITION to GateKeeper authentication. Users can be forced to type in their username/password at every unlock, or only when logging on to the computer. We recommend setting this option to NEVER.

Set on Client Computer:	Allows end-users to choose the settings on the Client application.
Never:	GateKeeper will never ask for your Windows or Mac username and password to authenticate.
At Logon Only:	GateKeeper will ask for Windows or Mac username and password only when you log into your account using their token.
At Logon and Unlock:	Any time a user unlocks their computer with their token, they will be asked for their Windows or Mac username and password.

Unlock Range Set the automatically unlock range for the computers using this setting. Make sure to choose the Unlock Range based on the corresponding Lock Range setting on the Lock Settings page.

Remember Previous Login GateKeeper can be set to automatically unlock the computer if the user comes back to the same computer within this Remember Previous Login Timeout period. Only applicable when the Unlock Method is set to GateKeeper with PIN Login.

Force User To Enter PIN GateKeeper can force users to type in their PIN to log in irrespective of their chosen Unlock Method if the user comes back to the computer AFTER this PIN Login Timeout period. Use this to force users to type in their PINs periodically.

Delay Automatic Login GateKeeper will delay unlocking the computer this Delay Automatic Login period after it has been locked. Important: This unlock delay will only apply when the unlock method is set as AUTOMATIC LOGIN.

Disable Windows Standard Login GateKeeper can disable the standard login methods (username/password) for your computer. If you choose to Disable the default login method, then you can only access your computer with your GateKeeper. If you forget your PIN or lose your GateKeeper, you will NOT be able to access your computer.

Set on Client computer:	Allows end-users to control this feature from their own computers.
Enable:	Any time a user unlocks their computer with their token, they will be asked for their Windows or Mac username and password.
Disable on Login Screen Only:	This will disable the Windows/macOS login option. If the user does not have their token, they will not be able to access the computer.
Disable Everywhere:	Anytime a user unlocks their computer with their token, they won't be asked for their Windows or Mac username and password.

For any additional questions or concerns regarding security, proximity settings, computer locking, credential management, or compliance, please contact GateKeeper Enterprise support using the Support Ticket form on https://gkaccess.com/support/ or email [e-mail].