How to exclude additional card reader from the registry.

A computer may have multiple NFC or smart card readers connected for different applications. By default, the GateKeeper Client may detect all compatible readers available to Windows.

If a specific reader should not be used by GateKeeper, you can add its exact device name to the ExcludeNFCReaders registry value. GateKeeper will then ignore that reader while continuing to communicate with other supported readers.

Important: Only exclude readers that should not be used for GateKeeper authentication. If the wrong reader is excluded, users may be unable to authenticate with their NFC or RFID cards.

Requirements

Before proceeding:

• Sign in to Windows with an administrator account.
• Confirm that at least one supported reader will remain available for GateKeeper.
• Record the exact name of the reader you want to exclude.
• Back up the registry before making changes.

---

Step 1: Identify the Card Reader in Device Manager

1. Right-click the Start button.
2. Select Device Manager.
3. Expand Smart Card Readers.
4. Locate the reader that you want GateKeeper to ignore.
5. Record the reader name exactly as it appears in Device Manager.

Example:

HID Global OMNIKEY 5025 CL 0

Do not shorten, rename, or modify the device name.

The registry entry must match the reader name detected by Windows and GateKeeper.

---

Step 2: Confirm the Reader Name in the GateKeeper Logs

The GateKeeper logs can help confirm which readers are being detected by the GateKeeper Client.

1. Open File Explorer.
2. Navigate to:

C:\ProgramData\GateKeeper\Log

3. Open the most recent GateKeeper Client log file.
4. Search the log for terms such as:

reader

NFC

smart card

5. Locate the entry showing the card reader detected by GateKeeper.
6. Confirm that the reader name in the log matches the reader name shown in Device Manager.

The ProgramData folder is hidden by default. In File Explorer, enable View → Show → Hidden items if you cannot see it.

---

Step 3: Open the GateKeeper Client Registry Configuration

1. Press Windows + R.
2. Enter:

regedit

3. Click OK.
4. Approve the User Account Control prompt.
5. Navigate to:

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Untethered Labs\GateKeeper Client\Config

---

Step 4: Create the ExcludeNFCReaders Registry Value

1. Right-click an empty area in the right pane.
2. Select:

New → Multi-String Value

3. Name the new value:

ExcludeNFCReaders

The value type should be:

REG_MULTI_SZ

4. Double-click ExcludeNFCReaders.
5. In the Value data field, enter the exact card reader name identified in Device Manager and the GateKeeper logs.

Example:

HID Global OMNIKEY 5025 CL 0

6. Click OK.

Excluding Multiple Readers

To exclude more than one reader, enter each reader name on a separate line.

Example:

HID Global OMNIKEY 5025 CL 0
Identiv SCR3310 v2.0 USB Smart Card Reader 0

Do not separate the reader names with commas or semicolons.

---

Step 5: Restart the GateKeeper Client Service

The GateKeeper Client service must restart before the new registry configuration takes effect.

1. Open the Start menu.
2. Search for:

Command Prompt

3. Right-click Command Prompt and select Run as administrator.
4. Run the following command:

taskkill /F /IM GateKeeper.Service.Windows.exe

The GateKeeper Bootstrap service should automatically restart the GateKeeper Client service within approximately one minute.

Alternatively, restart the computer.

---

Step 6: Confirm That the Reader Is Excluded

After the GateKeeper Client service restarts, confirm that GateKeeper no longer detects the excluded reader.

Option 1: Check the GateKeeper Client Application

1. Open the GateKeeper Client application.
2. Review the NFC or card-reader section.
3. Confirm that the excluded reader is no longer displayed.
4. Confirm that the reader intended for GateKeeper is still available.

Option 2: Check the GateKeeper Logs

1. Return to:

C:\ProgramData\GateKeeper\Log

2. Open the newest log file.
3. Search for the excluded reader name.
4. Confirm that GateKeeper is no longer initializing or using that reader.

Option 3: Test Both Readers

1. Present a registered GateKeeper card to the excluded reader.
2. Confirm that GateKeeper does not respond.
3. Present the same card to the approved GateKeeper reader.
4. Confirm that GateKeeper detects the card and performs the configured authentication action.

---

Troubleshooting

The Excluded Reader Is Still Detected

Confirm the following:

• The registry value is named exactly ExcludeNFCReaders.
• The registry type is REG_MULTI_SZ.
• The reader name matches the GateKeeper log exactly.
• There are no extra spaces before or after the reader name.
• The registry value was created under the correct path.
• The GateKeeper Client service or computer was restarted after the change.

If Device Manager and the GateKeeper logs display slightly different reader names, use the exact name shown in the GateKeeper log.

---

GateKeeper No Longer Detects Any Readers

The wrong reader may have been excluded.

1. Open the ExcludeNFCReaders registry value.
2. Remove the reader that GateKeeper should continue using.
3. Restart the GateKeeper Client service.
4. Confirm that the correct reader is detected again.

---

The GateKeeper Service Does Not Restart

Restart the computer and check the GateKeeper Client application again.

You can also verify in Task Manager that the following GateKeeper processes are running:

GateKeeper.Bootstrap.Windows.exe
GateKeeper.Service.Windows.exe

---

Removing the Exclusion

To allow GateKeeper to use the excluded reader again:

1. Return to:

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Untethered Labs\GateKeeper Client\Config

2. Open ExcludeNFCReaders.
3. Remove the reader name from the value data.
4. If no readers need to be excluded, delete the ExcludeNFCReaders value.
5. Restart the GateKeeper Client service or restart the computer.
6. Confirm that the reader is detected by GateKeeper again.

For any additional questions or concerns regarding faster 2FA, proximity settings, computer locking, password management, or compliance, please contact GateKeeper Enterprise support using the Support Ticket form on https://gkaccess.com/support/ or email [e-mail].