Personal Desktop Client authentication

Personal Desktop Client uses the public key infrastructure (PKI) security method. The PKI-based eID needed for authentication and digital signing is stored either as a software token on the user’s computer, or on a smart card or some other hardware token. If a smart card is used, a card reader is connected to the user’s computer. To authenticate or sign, the user types a PIN into the user interface, which pops up automatically.

Use cases include enabling user-friendly 2FA for desktop applications, domain login, and remote desktop and VPN access. The solution is also well-suited for secure and cost-effective identification of users of online banks, e-commerce sites or e-services in the public sector. The signing functionality can be used for transactions such as online shopping, loan applications, contract signing and tax declarations.

The client software is installed on the users’ computers, and their eIDs and PINs are managed by the administrator through a web portal. It is easy to configure Digital Access out-of-the-box to require Personal Desktop Client for 2FA. If Personal Desktop Client is to be used with your online services, you integrate the included message server in your online service solution. The client software works with all web browsers, and does not require plug-ins.

Personal Desktop Client can be used together with Digital Access, which enables users to authenticate themselves and get remote access to digital resources. Since Digital Access supports identity federation and single sign-on (SSO), the user only has to log on once with Personal Desktop Client to reach all exposed resources. Personal Desktop Client is also very well suited for secure mobile eID activation in the Smart ID Mobile App.

For more information, see Set up Smart ID authentication.