EIDAuthenticate

Smart card authentication on stand-alone computers — without a domain controller.

Try for free

Test all features of EIDAuthenticate with a free trial — no credit card required.

Request a trial

Purchase a license

Buy or renew your EIDAuthenticate license. Volume discounts available.

Go to the shop
Overview

EIDAuthenticate is the solution to perform smart card authentication on stand-alone computers, or to protect local accounts on domain-joined computers. Built by certified security experts, it respects the deep internal security mechanisms of Windows and offers a user-friendly interface.

Windows 8
Windows 8
Windows 7
Windows 7
Windows XP
Windows XP
Configure a smart card
Configure a smart card
Configure logon
Configure logon
Requirements
Operating system
  • Windows XP / Server 2003 or later
  • A local user account (stand-alone or domain-joined)

Windows XP/2003 supported only on non-domain-joined machines. Remote Desktop (RDP/NLA) is fully supported.

Smart card

A smart card with CSP support or a Windows minidriver is required.

We recommend Gemalto IDPrime (formerly Axalto Cryptoflex .NET). Check your card's compatibility →

Demo video
Secure design

Unlike most logon programs that require specific smart card drivers or user-space processes, EIDAuthenticate performs authentication inside the Windows security kernel (lsass.exe). This means even signature-only cards keep your data safe.

EIDAuthenticate is the only solution natively supporting the Windows "Force Smart Card Logon" policy — used to secure local administrator accounts in data centers and to comply with HSPD-12.

1 Detection — the credential provider detects the inserted smart card.

Detailed sequence, for screen readers and when animation is reduced:

  1. Detection — the credential provider detects the inserted smart card.
  2. Read & certify — the credential provider reads and certifies the smart card.
  3. The user enters their PIN in the credential provider.
  4. CredProtect(PIN) + card reference are passed from the credential provider to the LSASS security package.
  5. Read — the security package reads the certificate from the smart card.
  6. Certificate checks are performed by the security package.
  7. Challenge sent from the security package to the private key on the smart card.
  8. Response returned from the private key to the security package.
  9. 9a. Session opened.
  10. 9b. DPAPI initialisation.
Internationalization

EIDAuthenticate ships with built-in translations for French, Russian, Chinese, Japanese, Czech, and Lithuanian. Click a thumbnail to preview.

French
French
Chinese
Chinese
Czech
Czech
Japanese
Japanese
Russian
Russian
FAQ

EIDAuthenticate comes in two editions: Community Edition (free, for home users on Windows Home editions, based on the 0.5 core) and Enterprise Edition (for organizations and governments, complete rewrite with a secure development lifecycle, based on the 1.0 core).

EIDAuthenticate may be eligible for FIPS 201 certification. However, authentication software is not yet in the GSA certification categories.

For the Enterprise Edition, audits can be conducted by government entities on demand. Please contact us for pricing.

No. The Enterprise Edition is licensed to organizations. Home users on Windows Pro editions can use the Community Edition (which requires Windows Home), or contact us to discuss your situation.