Tips for choosing the right Lock and Unlock settings for your GateKeeper authenticator.

From a functional perspective, this really depends on the type of work the user engages in, the work environment itself, and the level of convenience the user wishes to obtain. 

Choose Lock and Unlock Settings from End User Computers

After downloading and installing the GateKeeper Client desktop application:

1. Open your GateKeeper Client application on your PC by pressing the Windows key on your keyboard and start typing "GateKeeper".

2. Click Settings in the left menu.

3. You will see tabs for Lock Settings, Unlock Settings, Advanced Settings, and Server Settings. Select Unlock Settings.

Unlock Settings

Unlock Method defines how GateKeeper will unlock your computer. We recommend GateKeeper with PIN option for secure 2-factor authentication (2FA).

Automatic Login	Unlocks automatically as you approach your computer with your GateKeeper wireless proximity token.
Select User to Login	When the token is in the range of the computer, the tokens assign user profiles will appear. Click the desired profile to be logged in.
Press Enter to Login	Requires users to have their GateKeeper token and press the Enter key on the keyboard. Great for shared locations so that computer can know which user intends to log in.
Touch to Login	Requires users to tap their GateKeeper token key fob (or phone) to the USB proximity sensor to log in - great for shared offices.
GateKeeper with PIN Login	2FA: requires a user to have their GateKeeper token (possession factor) and to type in a secret PIN (knowledge factor). Most secure method.

Remember Previous Login allows the same returning user to automatically unlock the computer ONLY if the same user comes back to the same computer within this time period. Please keep in mind that this setting is only applicable when the Unlock Method is set to GateKeeper + PIN. Useful for the same person coming and going from the same computer in short intervals. This option has the security strength of 2FA but with the mobility of automatic login (the best of both options).

Require PIN Entry forces users to type their PIN to log in irrespective of their chosen Unlock Method if the user comes back to the computer AFTER this predetermined PIN Login Timeout period. Use this to force users to type in their PINs at this predetermined interval for daily or weekly security checks.

Enter Windows Password option gives the user a choice to enter their username and password IN ADDITION TO GateKeeper authentication. Users can be forced to type in their username/password at every unlock, or only when logging on to the computer. Recommended setting this option is NEVER.

Windows Standard Login enables or disables the standard Windows login option (typing username and password) to log in to your computer. If you choose to disable the Windows default login method, then you can ONLY log in to your computer with your GateKeeper token. Please keep in mind that if you forget your PIN or lose your GateKeeper key, you will not be able to access your computer.

Choose Lock and Unlock Settings from the Hub Admin Console

All computers in the same Group will be subject to the same configurations for locking, unlocking, and password complexity.

1) Login to your GateKeeper Hub.

2) Click Groups & Settings on the left side.

3) Locate the Group you want to make lock/unlock changes to click "Manage Settings" to the right of the Group's name and click "Update Settings".

4) Now you can edit lock settings, unlock settings, advanced settings, and limit features end users have control over on their workstations.

Unlock Settings

Unlock Methods

1FA: Touch Token or Scan Card	Requires users to tap their GateKeeper token (or phone) to the USB proximity sensor to log in - great for shared offices.
2FA: Token/Card plus PIN	2FA: requires a user to have their GateKeeper token (possession factor) and to type in a secret PIN (knowledge factor). Most secure method.

Remember Previous User: GateKeeper can be set to automatically unlock the computer if the same user comes back to the same computer within this Quick Return Timeout period. Only applicable when the Unlock Method is set to GateKeeper with PIN Login. 

Force User to enter PIN: GateKeeper can force users to type their PIN to log in irrespective of their chosen Unlock Method if the user comes back to the computer AFTER this PIN Login Timeout period. Use this to force users to confirm their identity at required intervals. If the timer is set to 1 hour with the 

Require Windows Password

Set on Client computer:	Allows end-users to choose the settings on the Client application.
Never:	GateKeeper will never ask for your Windows or Mac username and password to authenticate.
At Logon Only:	GateKeeper will ask for a Windows or Mac username and password only when you log into your account using their token.
At Logon and Unlock:	Any time a user unlocks their computer with their token, they will be asked for their Windows or Mac username and password.

Disable Windows standard login

Set on Client computer:	Allows end-users to control this feature from their own computers.
Enable:	Any time a user unlocks their computer with their token, they will be asked for their Windows or Mac username and password.
Disable:	This will disable the Windows/macOS login option. If the user does not have their token, they will not be able to access the computer.

Change Computer Lock and Unlock Range.

GateKeeper locks or unlocks the computer based on the signal strength and motion data sent by the tokens (Halberd or Trident app). To adjust range settings for locking and unlocking your PC, move the blue triangle markers on the GateKeeper Client Dashboard.

How to make the computer unlock faster.

How to make the computer unlock only when I'm very close.

How to make the computer lock faster.

How to make the computer lock when I'm farther away.

After installing the GateKeeper Client software, the default settings will be automatically applied.

The default unlock zone will be 70%, which is the unlock zone with the largest distance from the computer. If you increase this number, the closer you will need to bring your key to the computer in order to unlock it. 

The default lock zone will be 25% and when the signal strength drops below 25% consistently, the GateKeeper will lock the PC. If you decrease the lock value, you will need to walk further away to lock the computer. 

The minimum value for the lock zone is set to 0% while the unlock zone is set to 50%.

The maximum value for the lock zone is set to 70% while the unlock zone is set to 90%.

Change the lock and unlock levels according to your needs and environment. Remember to carry the GateKeeper token outside of your pockets, and attach the USB proximity sensor to the front of the computer or taped to the monitor for optimal performance. It is also recommended to use more than one USB sensor to maximize wireless signal performance.

Additionally, if you go to the Settings tab on the left, you have more options to adjust the locking response time.

Under Lock Settings, you have Motion Detection Sensitivity option. Choose a level of sensitivity to motion to force the computer to lock faster. High motion sensitivity will allow the computer to lock faster. If the system is locking too much while you are sitting at your desk, reduce the motion sensitivity to the Low level.

There is also the Lock Delay Timeout feature. This function will delay locking the computer after a lock decision has been made for this Lock Delay Timeout period. Choose a time value for this delay if you want to prevent the computer from locking immediately when you walk away.

Important: This lock delay will only apply when the computer is locked due to proximity.

For any additional questions or concerns regarding security, proximity settings, computer locking, credential management, or compliance, please contact GateKeeper Enterprise support using the Support Ticket form on https://gkaccess.com/support/ or email [e-mail].

--------------------------
GateKeeper lock and unlock choices; touch unlock; touchless unlock; unlock by touching; unlock by touch;