Edit Group settings in GateKeeper Hub.

Change Group Settings from the Hub

All computers in the same Group will be subject to the same configurations for locking, unlocking, and password complexity.

To edit Lock and Unlock settings for Computers in a Group, follow the directions below:

1) Log in to your GateKeeper Hub.

2) Click on Group & Settings on the left side.

3) Find the Group you want to edit and click "Manage Settings", "Update Settings" next to the Group's name.

4) Adjust the group settings as needed (Lock, Unlock, Advanced) to control which features end users can access on their client computers. When you're finished, click Save Changes. Done!

Lock Settings

Below are the options for each setting along their explanations for Proximity Lock Method and Button Lock Method.

Set on Client computer:	Allows end-users to choose the settings on the Client application on their own computers.
Disable:	Turns off the feature. Not recommended.
Lock Workstation:	Auto-locks the computer. Leaves the current session active and available for any user to login.
Disconnect Session:	Locks the computer and enables switching between local or AD user accounts on Windows 7 and Mac (OS 10.13 and 10.14) computers.
Logout:	Logs the user out from the computer.

Inactivity Lock Method will lock the computer if the user is inactive (no keyboard or mouse activity) for the specified time. Use Lock Workstation if you are the only user or Disconnect Session (Switch User) if multiple people use this computer. The user has the following Lock options available in the drop-down menu. Note 1: For macOS, Lock Workstation and Logout options are not supported. Note 2: For Windows 7, it is recommended to use Disconnect Session instead of Lock Workstation.

• Disabled
• Lock Workstation
• Disconnect Session (Switch User)
• Logout

Token Visibility Timeout feature allows you to set a timer for how long the computer will remain unlocked if suddenly the software receives no data from the token. Sudden signal loss can happen if a user places their hand over the token or buries it in their pocket. This feature is set in 15-second increments (15, 30, 45, 60).

Lock Delay Timeout delays locking the computer after a lock decision has been made for this time period. Choose a value for this delay if you want to prevent the computer from locking immediately when you walk away. Important: This lock delay will only apply when the computer is locked due to proximity.

Operating System Timeout disables your screensaver from starting when your computer times out. Choose the appropriate option to keep your timeout policy enabled or disabled. If your timeout policy is set by your network administrator, this setting will not override the network policy.

Disconnect Remote Session allows the user to enable or disable disconnecting remote session when the local computer is locked. This requires the client version to be 3.9 or higher and the GateKeeper Remote application to be installed on the remote computer.

• Enable
• Disable

Lock Sensitivity changes the lock/unlock distance for your computer. The higher the sensitivity, the shorter the distance needed to lock. We recommend Medium sensitivity for the best lock/unlock experience for most environments. Note: Applies to Client App version 3.6.9 or lower.

Motion Detection Sensitivity is useful for adapting your locking and unlocking experience in different environments. High level setting motion sensitivity will allow the computer to lock quicker. If the system is locking too much while you are sitting at your desk, reduce the motion sensitivity to the Low level.

Unlock Settings

Unlock Methods

Set on Client Computer:	Allows end-users to choose the settings on the Client application on their own computers.
Automatic Login:	Proximity login - once the user is in the range of the computer, the user will be authenticated.
Press Enter to Login:	When the token is in range of the computer, pressing the Enter key will authenticate the user.
Touch to Login:	Touch the token to the USB sensor to authenticate – just like an NFC card.
GateKeeper with PIN Login:	Requires the presence of a GateKeeper token and typing of a secret PIN to authenticate.

Quick Return Timeout: GateKeeper can be set to automatically unlock the computer if the same user comes back to the same computer within this Quick Return Timeout period. Only applicable when the Unlock Method is set to GateKeeper with PIN Login. Force PIN Login Timeout

Force PIN Login Timeout: GateKeeper can force users to type their PIN to log in irrespective of their chosen Unlock Method if the user comes back to the computer AFTER this PIN Login Timeout period. Use this to force users to confirm their identity at required intervals. If the timer is set to 1 hour with the Automatic Login mode, then the users will be required to log in with their PIN after every 1 hour.

Require user to enter Windows password

Set on Client computer:	Allows end-users to choose the settings on the Client application.
Never:	GateKeeper will never ask for your Windows or Mac username and password to authenticate.
At Login:	GateKeeper will ask for Windows or Mac username and password only when you log into your account using their token.
Always:	Any time a user unlocks their computer with their token, they will be asked for their Windows or Mac username and password.

Windows standard login

Set on Client computer:	Allows end-users to control this feature from their own computers.
Enable:	Any time a user unlocks their computer with their token, they will be asked for their Windows or Mac username and password.
Disable:	This will disable the Windows/macOS login option. If the user does not have their token, they will not be able to access the computer.

Advanced Settings

Here, you can manage all the options available to end users on their Client-side computers. Restrict certain features or let end users make their own configurations.

DEFAULT AUTHENTICATOR FOR LOGIN

Choose the default authenticator between Bluetooth Token, NFC, and RFID cards, or Email with OTP, to log in to all computers in this group. 

IMPORTANT: This setting will be ignored if it is set in Global Settings.

ALWAYS CONNECTED MODE

Enable Always Connected mode for the computers in this group. This is a more secure mode where credentials are not cached locally but only retrieved from the Hub AFTER the user logs in. Only enable this mode if the client computers will ALWAYS have a connection to the Hub server. 

IMPORTANT: This setting will be ignored if it is set in Global Settings.

APPLICATION PASSWORD MANAGER

Application Password Manager allows users to save and retrieve passwords for their desktop applications. The application passwords are saved as part of the user's profile and are available to them directly on the desktop application through the GateKeeper Application Password Manager utility.

NOTIFICATIONS

Enable or disable receiving notifications from the GateKeeper client application.

SHOW CONNECT USER WINDOW

Show the Connect User window if a non-GateKeeper login is detected.

SELF-REGISTRATION

Allow users to self-register through the client application.

ADD PASSWORDS THROUGH CLIENT APPLICATION

Allow or prevent GateKeeper users from adding more passwords to their profiles. These can be domain, local, or web passwords. We recommend keeping this option enabled for your users.

ADD TOKENS THROUGH CLIENT APPLICATION

Allow or prevent GateKeeper users from adding new tokens to their profiles. We recommend disabling this option if you want administrators to manage tokens for your users.

CHANGE SERVER ADDRESS THROUGH CLIENT APPLICATION

Allow or prevent GateKeeper users on the client application from changing the connection to the Hub server. This option should be disabled so users cannot disconnect the computer from the GateKeeper Hub network.

Global Settings

Located in the Hub in the Group Settings tab, next to the Add Group button.

Authenticators: Choose what authentication device will be used to access computers on your network.

• GateKeeper Bluetooth Tokens: GateKeeper Halberd or Trident App soft token for smartphones.
• Fingerprint: Biometric authentication with your fingerprint. See a list of compatible fingerprint readers here.

Secure Key Exchange: Exchange a secure key with your GateKeeper token to make it cryptographically unique. This will enhance the security of proximity authentication by auto-verifying One-Time-Passcodes sent by the token.

Firmware Update: Enable the client software to update the firmware of GateKeeper tokens. Please make sure to have the latest version of the GateKeeper Client software running on all computers before enabling firmware update.

Warning: This will cause GateKeeper tokens to stop working with version 3.6.9 and prior.

PIN Complexity: Choose strength requirements for the GateKeeper PINs. You can set minimum length, characters, numbers, and special character requirements for the PIN.

For more questions on software for proximity authentication, please read more at www.gkaccess.com or reach out at [e-mail] or [phone]. 

-------------

Change group settings; GateKeeper group settings change; Edit settings; Change lock mode; Change lock method in GateKeeper; New group settings; Change computer settings; Change unlock settings; Change lock settings; Computer lock setting change; Edit settings in groups; Edit group settings in gatekeeper; Edit computer settings in gatekeeper hub; How do I use the Hub to manage all the options on the client-side?; let employees change settings; end user settings changing; touch unlock; touchless unlock; unlock by touching; unlock by touch; worldwide settings; world settings;