Installation

You can download and install the SafeNet FIDO Key Manager application from the following:

• Microsoft Store

• EXE

• MSI

Install SafeNet FIDO Key Manager using MSI/EXE

Use the SafeNet FIDO Key Manager Installation Wizard to install the application with its default properties and features.

Perform the following steps:

1. Double-click the appropriate file.

   • EXE file: run SafeNetFIDOKeyManager-x64-2.0.exe.

   • MSI file: run SafeNetFIDOKeyManager-x64-2.0.msi.

   The SafeNet FIDO Key Manager Installation Wizard is displayed.

   

2. Click Next.

3. The End-User License Agreement is displayed, read the license agreement, and select I accept the license agreement option.

   

4. Click Next.

   The Destination Folder window is displayed, showing the default installation folder.

   

5. You can click Change to select a different destination folder, or install the SafeNet FIDO Key Manager application into the default folder:

   C:\Program Files\Thales Group\

6. Click Next, and then click Install to proceed with the installation.

   

7. A Windows pop-up appears, click Yes to confirm the administrator permissions.

   

   The installation proceeds.

   

8. When the installation is complete, a confirmation message is displayed. Click Finish to complete the installation.

   

After the application is installed, its icon is displayed on your computer’s installed application list under the Start menu.

SafeNet FIDO Key Manager Binary Files

The following PKI DLLs exist under C:\Program Files\Thales Group\SafeNet FIDO Key Manager

DLL file	Description
FKMeTCoreInst.dll	Executes the custom actions for the installer.
FKMeToken.dll	Installs the features of PKCS#11.
FKMLog.dll	Manages the logs for PKI devices.
FKMeTPKCS11.dll	Installs the wrapper for PKCS#11 to load the FKMeToken.dll internally. Note: Make sure to use FKMeToken.dll as a PKCS#11 library instead of FKMeTPKCS11.dll.
FKMIDPrimePivTokenEngine.dll	Installs the IDPrime PIV token engine that supports IDPrime PIV cards and tokens.
FKMIDPrimeTokenEngine.dll	Installs the IDPrime token engine that supports IDPrime cards and tokens.

SafeNet FIDO Key Manager Registry keys

The following setting is written to the Log section in the ThalesGroup\Authentication\FKM\Log registry key.

These settings may be defined using: HKEY_LOCAL_MACHINE

Description	Registry Value
Enabled Determines if the logs for PKI token is enabled or disabled. The machine location where this registry is saved is C:\Users\{user}\AppData\Local\SafeNetFIDOKeyManager	Registry Value Name: Enabled Value: - 1 - Enabled - 0 - Disabled Default: - For FIDO devices: Enabled Note: By default, logs are enabled for the FIDO devices and there is not option to disable them. - For PKI devices: Enabled and can be disabled via registry

Open SafeNet FIDO Key Manager

To open SafeNet FIDO Key Manager:

1. Select the SafeNet FIDO Key Manager application from the start menu or use the desktop shortcut to open it.

   • For a FIDO device, you need to open the application with administrator permissions only.

   Note

   If the application is not executed with administrator privileges, the FIDO device will not be detected and a warning message appears.

   • For a PKI device, launch the application directly with no administrator permissions required.

   • For a Fusion (FIDO + PKI) device, the application gets open for a PKI device directly but in case of a FIDO device, you need to select Yes in the Windows pop-up to confirm the administrator permissions.

   Note

   While requesting elevation for managing a FIDO device the UX may differ depending on the enterprise admin management. For example: Thales uses "Admin by Request".

2. If you want SafeNet FIDO Key Manager to always run with the administrator permission, follow the steps:

   1. Right-click SafeNet FIDO Key Manager in the Start menu and then select More > Open file location.

   2. Select the SafeNet FIDO Key Manager application icon and then right-click Properties.

   3. Within the Properties window, select the Compatibility tab.

   4. Under Settings, select Run this program as an administrator.

   5. Select Apply and then select OK.

3. Select Next on the tutorial screen that is displayed only for the first time when the application is opened.

   

4. Click Next.

   

5. Click Get Started to start the tutorial.

   

6. If no devices are connected, the application prompts you to insert one. The Insert your SafeNet PKI or FIDO key screen is displayed.

   

7. Insert the device(s) and select the required mode (PKI or FIDO).

Install MSI or EXE file through Command Line

Command line installation gives the administrator full control of installation properties and features.

Install in UI mode

The following command line installation uses a standard Windows Installer syntax.

Perform the following steps:

1. Close all applications.

2. Open the Command Prompt and run it as administrator.

3. Type the appropriate command line utility:

   • MSI file: run msiexec /i SafeNetFIDOKeyManager-x64-2.0.msi.

   • EXE file: run SafeNetFIDOKeyManager-x64-2.0.exe.

Install in Silent Mode

Installing through the command line enables the administrator to define a silent mode installation in addition to optional property settings.

To run the installation in silent mode with no user interface, perform the following steps:

1. Close all applications.

2. Open the Command Prompt and run it as administrator.

3. Type the appropriate command line utility:

   • MSI file: run msiexec /i SafeNetFIDOKeyManager-x64-2.0.msi /qn.

   • EXE file: run SafeNetFIDOKeyManager-x64-2.0.exe /S /v/qn.

Uninstall SafeNet FIDO Key Manager

After SafeNet FIDO Key Manager has been installed, it can be uninstalled. Local administrator rights are required to uninstall.

To remove SafeNet FIDO Key Manager, use one of the following methods:

• Uninstalling through Add or Remove Programs

• Uninstalling through the Command Line

Uninstall through Add or Remove Programs

Perform the following steps:

1. Use one of the following methods:

   • Right-click the SafeNet FIDO Key Manager application from the start menu, and select Uninstall. It will redirect you to the Control Panel.

   • From the Windows taskbar, select Start > Settings > Control Panel, and double-click Add or Remove Programs.

2. Select SafeNet FIDO Key Manager, and click Uninstall/Remove.

3. Follow the instructions to remove the application.

Uninstall through the Command Line

Uninstall in UI mode

Perform the following steps:

1. Close all applications.

2. Open the Command Prompt and run it as administrator.

3. Type the appropriate command line utility:

   • MSI file: msiexec /x SafeNetFIDOKeyManager-x64-2.0.msi.

   • EXE file: SafeNetFIDOKeyManager-x64-2.0.exe /uninstall

Uninstall in Silent mode

To run the uninstallation in silent mode with no user interface, perform the following steps:

1. Close all applications.

2. Open the Command Prompt and run it as administrator.

3. Type the appropriate command line utility:

   • MSI file: run `msiexec /x SafeNetFIDOKeyManager-x64-2.0.msi /qn.

Upgrade SafeNet FIDO Key Manager

The upgrade and repair of SafeNet FIDO Key Manager can be performed as follows.

You can upgrade from previous versions of SafeNet FIDO Key Manager to the latest version using the MSI or EXE file wizard installation, or by using the command line installation. Refer to Install MSI or EXE file through Command Line.

Upgrade using Command Line

To run the upgrade using command line, use the following sections.

Upgrade in UI mode

Perform the following steps:

1. Close all applications.

2. Open the Command Prompt and run it as administrator.

3. Type the appropriate command line utility:

   • MSI file: run msiexec /i SafeNetFIDOKeyManager-x64-2.0.msi.

   • EXE file: run SafeNetFIDOKeyManager-x64-2.0.exe.

Upgrade in Silent mode

To run the upgrade in silent mode with no user interface, perform the following steps:

1. Close all applications.

2. Open the Command Prompt and run it as administrator.

3. Type the appropriate command line utility:

   • MSI file: run msiexec /i SafeNetFIDOKeyManager-x64-2.0.msi /qn.

   • EXE file: run SafeNetFIDOKeyManager-x64-2.0.exe /S /v/qn.

Repair SafeNet FIDO Key Manager

You can use the repair option in the SafeNet FIDO Key Manager installer to reinstall the missing or corrupt files, registries, dlls, etc. The repair operation can be performed using msi/exe and from the Control Panel.

Perform the following steps to use the repair option from the Control Panel:

1. In the search box on the taskbar, enter control panel and select Control Panel from the results.

2. Select Programs > Programs and Features.

3. Right-click the program you want to fix and select Repair, or if that's not available, select Change. Then, follow the directions on the screen.

Repair through the Command Line

Repair in UI mode

Perform the following steps:

1. Close all applications.

2. Open the Command Prompt and run it as administrator.

3. Type the appropriate command line utility:

   • MSI file: msiexec /f SafeNetFIDOKeyManager-x64-2.0.msi.

   • EXE file: SafeNetFIDOKeyManager-x64-2.0.exe

Repair in Silent mode

To run the repair in silent mode with no user interface, perform the following steps:

1. Close all applications.

2. Open the Command Prompt and run it as administrator.

3. Type the appropriate command line utility:

   • MSI file: run msiexec /f SafeNetFIDOKeyManager-x64-2.0.msi /qn.

   • EXE file: run SafeNetFIDOKeyManager-x64-2.0.exe /S /v/qn.