Enabling Robust Windows Two-Factor Authentication with FIDO2, Even in Offline Closed Network Environments

September 2, 2026 To the Media

Soft Giken Inc. (President: Norio Fujita, established in 1983) announces the launch on September 2, 2026, of 'YubiOn FIDO Logon Standalone,' a FIDO2-based two-factor authentication solution for Windows endpoints that operates without an authentication server and functions entirely offline.

In recent years, as phishing attacks and credential theft incidents have increased, transitioning to multi-factor authentication beyond simple ID and password reliance has become urgent. However, many environments such as manufacturing lines, factories, medical institutions, government agencies, financial institutions, and power infrastructure operate on closed networks isolated from the internet due to security policies or operational requirements, making it impossible to adopt cloud-based authentication services.

'YubiOn FIDO Logon Standalone' provides FIDO2 two-factor authentication that runs entirely on the endpoint, requiring neither an authentication server nor internet connectivity. By using passkeys (FIDO2 security keys) such as YubiKey, it enables phishing-resistant, robust Windows logon authentication even in closed network environments. With simple setup involving only installation and initial configuration, this product is ideal for customers requiring enhanced security in isolated environments.

[Phishing-Resistant Two-Factor Authentication via FIDO2] Supporting FIDO2 (WebAuthn), it enables two-factor Windows logon with a simple touch of a security key such as YubiKey. FIDO2 uses public-key cryptography, eliminating risks of password theft or reuse, and is highly resistant to phishing attacks. It supports not only local accounts but also Active Directory, Entra ID, and Microsoft accounts.

[Compliance with NIST AAL3 Requirements] By combining hardware authenticators with user verification via PIN or biometrics, the solution can be configured to meet the requirements of the U.S. National Institute of Standards and Technology (NIST) Authentication Assurance Level 3 (AAL3). This makes it suitable for use in government, finance, and infrastructure sectors with stringent security requirements.

[One-Time Purchase, No Subscription Fees] The product uses a perpetual licensing model, eliminating ongoing monthly or annual subscription fees. This allows customers to maintain stable authentication security over the long term while minimizing operational costs after deployment.

[Support for a Wide Range of FIDO2 Authenticators] The solution supports multiple manufacturers' FIDO2 authenticators, including YubiKey. Customers can flexibly select authenticators based on their requirements and procurement conditions.

[Management Features for Flexible Operations] Features include automatic screen locking when the authenticator is removed, restricting access to configuration tools via FIDO authentication, and uninstallation control and protection to prevent spoofing and unauthorized configuration changes. Additionally, a 'Master Key Function' allows administrators to log in to any account, and 'Recovery Codes' provide fallback options in case of lost or damaged authenticators, ensuring preparedness for emergencies in closed environments. Authentication activities are logged for audit compliance.

[Features of YubiOn FIDO Logon Standalone] YubiOn FIDO Logon Standalone offers multiple features that can be customized according to customer use cases.

Authentication and Login Features

FIDO2-Based Two-Factor Authentication: Combines passwords with security keys such as YubiKey to achieve strong, phishing-resistant logon.

Support for Multiple Account Types: Supports logon for local accounts, Active Directory, Entra ID, and Microsoft accounts.

Broad Authenticator Device Support: Supports FIDO2-compliant security keys from multiple manufacturers, including YubiKey, iShield Key, and ATKey.

Secure Mode: Enforces authentication via security key.

※ Supports logon via Remote Desktop connections.

Security and Protection Features

Automatic Screen Lock on Authenticator Removal: Automatically locks the Windows screen when the security key is removed, preventing unauthorized access during absence.

Restriction of Configuration Tool Launch: Requires administrator FIDO authentication to launch configuration tools, preventing unauthorized access by non-administrators.

Uninstallation Control and Protection: Prevents unintended uninstallation through features such as hiding the product from Control Panel and protection mechanisms.

Compliance with NIST AAL3 Requirements: Enables configurations that meet the highest level of authentication assurance (AAL3) defined in NIST SP 800-63B by applying multi-factor authentication using FIDO2 hardware keys.

Operational Management and Failure Response Features

User Management: Supports both administrator pre-registration and user self-registration for first-time setup, enabling multi-device and multi-user use.

Master Key Function: Allows administrators to register a master key to log in to any account, supporting recovery during incidents.

Recovery Code: Generates and allows use of emergency login codes in case of lost or damaged security keys.

Import/Export of Settings: Enables smooth migration of configuration data and encrypted authentication credentials to other PCs.

Event Log Auditing: Records events such as endpoint logons and configuration changes in the Event Viewer for log aggregation and audit compliance.

[Product Information for YubiOn FIDO Logon Standalone] A security solution that enables FIDO2-based two-factor authentication for your PC endpoints through simple installation and initial setup. No authentication server or internet connection required, usable even in closed network environments.

System Requirements CPU: 64-bit processor with 1GHz or higher Memory: 4GB or more Storage: 200MB or more free space

Software: .NET Framework 4.7.2 or later

Network: Not required (operates fully offline)

Supported Operating Systems PC OS: ・Windows 10 (20H2 or later) ・Windows 11 Server OS: ・Windows Server 2022 or later

Supported Account Types ・Local Account / Active Directory / Entra ID / Microsoft Account

Supported Authentication Devices ・FIDO2-compliant authenticators are supported.