User Manual

The VeroCard provides bank-to-bank grade and defence level certified security for internet and cloud identity, stopping unauthorised access to cyber systems and data. Enjoy complete online confidence with indisputable identity verification. The simple and familiar Card + PIN interface provides absolute protection from digital fraud for all people, devices, transactions and data.

The VeroCard is a security device, engineered to meet the highest physical and virtual security standards. VeroCard works with Active Directory, Azure Active Directory, LDAP and Citrix and supports common identity protocols and interfaces such as Windows Hello, Fido2 and OAuth2 with OpenIDConnect.

VeroCard is certified:

PCI-PTS 5.1 - approved as a PIN entry device, meaning it has passed the stringent security standards of the Payment Card Industry to ensure your PIN remains secure.
FIDO2 - supporting the latest WebAuthn standards for passwordless authentication
Common Criteria - EAL 2+ - tested for end-to-end security to Defence specification.

With a build quality of a top-end consumer device, the VeroCard has no physical connectors to wear out or pose a security risk, and its sleek design and wireless charging makes VeroCard the ultimate universal and unified digital identity. Capable of protecting user credentials on any Windows 10 device, OAuth integrated website or FIDO2 enabled service. (Native mobile Android/iOS support coming soon)

No other digital identity system or device comes close to the security and flexibility of VeroCard. The VeroCard is an ultra-secure (in built HSM), unified, universal and portable digital identity that fits in your wallet. It pairs seamlessly with your devices via Bluetooth or NFC and delivers bank-to-bank grade security with hardware encrypted connections.

All of the information stored on the VeroCard can be securely stored on the VeroGuard platform for recovery purposes. VeroCards are anchored to an individual and PIN’s are fully verified with every login attempt – meaning that no-one can pretend to be you once your accounts are protected by VeroGuard.

Features

Quality high end build
Tamper Resistant – any attempt to open will wipe keys
Portable – fits in a wallet, phone case or lanyard
Wireless connectivity Bluetooth or NFC
No physical connections
Can replace multiple other devices and tokens
Provides secure PIN verification with every authentication request across any system
Ultra-secure hardware encryption

VeroCard:

Introduction

Settings & Navigation

User settings and navigating the VeroCard

The VeroCard Keypad

For best results when using your VeroCard, don’t press hard on the keypad – instead place your finger on the required character and hold it lightly until you hear a ‘beep’.

VeroCards use a capacitive keypad so pressing hard on keys will make no difference to the keypad's function. Try to align your finger directly in the middle of the character you want to input, and avoid touching multiple keys at the same time. There may be a slight delay between pressing the key and the VeroCard reacting to the input compared to a mechanical keyboard.- this is normal. Capacitive keypads have no mechanical parts so you will not feel any tactile response – instead user feedback is provided via an audible tone and a change in the display when a valid input is received. This may result in a change in the menu or a “*” to be displayed when entering your PIN.

Capacitive keypads work by sensing a change in the way an electrical signal behaves due to the proximity of a finger on the keypad. As there are no moving or mechanical parts, devices can be completely sealed for better durability and security.

Turn on your VeroCard

To turn on your VeroCard, depress the button on the top left edge of the device. This button has been designed to sit almost exactly in line with the device’s edge, so that unintentional presses are minimised, but simply applying gentle pressure on to the button will turn it on.

Once the VeroCard has turned on, press the “0” key to open the main menu which facilitates access to device information, and changes or activation of user controlled settings.

Basic Navigation

If you look at the face of the VeroCard you will see that aside from a numeric key pad with the digits 0-9, there is also a green “✓” and red “✘” - nominally used as “yes” or “confirm” and “no” or “cancel”.

If you look carefully you will also notice that there are small arrow on the edges of the “8”, “0”, “✓” and “✘” keys which are used to navigate the user menu.

“8” and “0” provide “Up” and “Down” functions, and
“✓” and “✘” provide “right and left” or “enter” and “back” functionality.

Navigating the menu can be facilitated in two ways;

Use the “Up” and “Down” keys to select the menu option you require, and then press “enter” or “✓” to enter that menu; or

Simply press the number corresponding to the menu option you require.

To return to the previous menu level, simply press the “back” or “✘”.

There are two ways to navigate the device:

How is VeroCard so secure?

The VeroGuard Platform addresses the biggest problem facing users of the internet – identity fraud. The VeroGuard Platform has been developed as the next generation of ultra-secure digital identity designed to remove passwords from users and provide a single secure multifactor authentication experience for every integrated login. Unlike anything else on the market, VeroGuard provides a unique unified, user centric, high assurance identity solution for the internet. Every authentication request is verified back to a trusted source of verified identity, and communications are secured over open networks by the platform’s unique Hardware Security Module (HSM) to HSM protection. VeroGuard achieves this by providing a portable HSM (VeroCard) in the hands of every user (device and OS agnostic). Proven identities are stored in a Bureau of ID (BoID) which are linked to the users’ personal HSM and PIN. Every access request is substantiated via an HSM to HSM encrypted tunnel to verify the user against their identity stored in the BoID. The platform integrates with any Access Management system to significantly elevate security and useability. VeroCards are PCI PTS 5.1 certified (Payment Card Industry), and are tamper resistant meaning that any attempt to open the device will result in the device self-destructing and deleting all security keys. VeroGuard’s devices can only run VeroGuard software/firmware and can only operate when connecting back to the VeroGuard host, and only devices which are registered in our system during manufacture can connect to the host – meaning that device security and control is of the highest possible level. VeroGuard has also developed solutions using the VeroGuard Platform to secure the digital world, including human interactions across the internet, data at rest and machines in the IoT. For more information on our other solutions please go to our website .
Where are VeroCards made?

VeroGuard manufactures VeroCards in Australia. The manufacturing process includes the complete chain of custody of all components, flashing of subassemblies to remove any software and key loading processes completed within a secure bunker environment which meets with the strict security requirements of the Banking and Payment Card Industry (PCI).
What is Serenity?

Serenity is VeroGuard's secure communications interface between VeroCards and user devices. The version of Serenity you use will vary depending on how and where you will be using your VeroCard. If you are using your VeroCard to log into your company domain on your Windows 10 device, you will need to install the Windows 10 application which replaces the normal “Windows Hello” login screen. If you are using your VeroCard to securely log into websites with the “Login with VeroCard” button, you will need to ensure you have a compatible browser with a Serenity connector built in. Currently supported browsers are the latest versions of Chrome and Edge. If you do not currently use either of these browsers, you will need to download and install one of your choice. If you currently use one of these – we recommend that you make sure it is updated to the latest version.
What do I do if I lose my VeroCard?

If you have lost your VeroCard – first don’t worry. Your VeroCard cannot be used by anyone else as its useless without your PIN so your online accounts secured by VeroGuard remain secure. As soon as you realise you have lost your VeroCard contact your system administrator who can immediately place a block on your account, and can help to arrange a replacement device. A replacement VeroCard can be attached to your account and you can be back up and securely accessing your accounts.
What happens if my VeroCard goes flat?

VeroCards do not lose their data when they go flat. All data including your PIN or other stored credentials are stored securely in non-volatile storage so that charging will return the VeroCard back to normal service. The VeroCards charge swiftly and become functional even after only a few minutes charge from being completely flat. VeroCard come with their own wireless charger and can be left on charge while not in use. VeroCards are compatible with any wireless charger (QI format).
How long does the battery last?

The battery will last for weeks with daily use, even with multiple logins every day. If your VeroCard battery is flat, it charges very quickly via the wireless charger provided and can facilitate a log in as soon as it has as little as 10% charge. You can even leave your VeroCard on the charger – but you must pick it up to enter your PIN.
What do I do if I forget my PIN?

Only you know your VeroCard PIN which means that a forgotten PIN cannot be recovered.  If you forget your VeroCard PIN you will need to contact your company IT administrator for help to reset your PIN. This process may require you to be able to prove your identity. If required you can contact VeroGuard support team for further advice at support@veroguard.com.au.
How do I turn on a VeroCard?

The VeroCard’s power button is located on the top of the left hand side of the device (keypad and screen facing you). The button is set back in line with the case to minimise any accidental key presses. Press the power button in once and the VeroCard will immediately boot up. This button also acts as the reset/reboot button and pressing at any time will restart the decvice and return it ot the “ready” screen. Alternately, placing the VeroCard on a charger will also turn it on.
Do I own the VeroCard?

No. VeroCard’s remain the property of VeroGuard at all times and are provided to users as part of a product subscription. By accepting the Terms and Conditions of use, you acknowledge and agree to that the VeroCard remains the property of VeroGuard at all times.
Is the VeroCard waterproof?

No. The VeroCard is not water resistant and is not designed to be used in situations where the device may become wet or immersed in liquid. Any immersion in water will damage the VeroCard and is not covered by any warranty.
Can I open or service the VeroCard?

The VeroCard cannot be serviced by anyone other than VeroGuard. Do not attempt to open a VeroCard. ANY attempt to open the VeroCard case will result in the VeroCard tamper security being triggered which will automatically cause the VeroCard to wipe and destroy all content on the VeroCard. If this occurs, the VeroCard will no longer work and the contents of the VeroCard will be lost and cannot be recovered. VeroGuard takes no responsibility or liability for any loss you may suffer as a result. To obtain service, go to www.veroguard.com.au/service. Available service options are dependent on the country in which service is requested and may be restricted to the original country of sale. International shipping charges may apply, depending on your location. If a VeroCard is subject to damage that is not covered by the warranty, a replacement VeroCard can be purchased from VeroGuard. Other than in the situation where the contents of the VeroCard are lost because of a security breach described above, the contents of the original VeroCard will automatically be transferred to the replacement VeroCard.
How can I tell if I use Active Directory (on-premises) or Azure Active Directory (cloud)

The best way to answer this question is to check with your IT team, however in most cases you are able to tell by the way you log into your PC. Active Directory (AD) ‘on-premises’ users log into the domain, whereas for Azure AD (AAD) users they login to the cloud. In general, this means that users who are logging into a domain will enter their domain/username and the corresponding password, where as those logging into the cloud will generally enter their email address and password. For AAD users the account will often be shown as an “other user” or listed as a “Work or School” account. This can also be seen by viewing the Users in the Settings application, however depending on your IT setup you may not have the authority to view these settings. Users can also use the whoami utility in a command box which will show: Azure AD authenticated users will display the logged on user as: AzureAD\<usernamead>.</usernamead> AD On-Premises users will display the logged on user as <domain>\<usernameon-premisead>.</usernameon-premisead></domain> Users logged into the PC (no domain) will display the logged on user as <localcomputername>\<username>.</username></localcomputername> There are many variations in the way business networks can be deployed and User PC’s can be setup – so the best way if you are unsure is to check with your IT team!
What identification documents will I need when picking up my VeroCard?

When you collect your VeroCard from a Post Office, your identity will be verified by presenting Proof of Identity documents to pass a 100-point identity check. You will require 2 Primary documents, or 1 Primary and 1 Secondary. Primary documents must have a photograph of the document holder. Valid documents are: Primary Documents: Australian Passport International Passport Australian Photo Driver Licence Australian Learner’s Permit Australian Photo Firearms Licence Proof of Age Card NSW Photo Card Secondary Documents: Full Birth Certificate / Card Department of Veterans Affairs Card Centrelink Card Medicare Card Council Rate Notice Telephone Account Utility Bill Financial Institution Debit/Credit Card Financial Institution Statement If applicable, for a change of name: Australian Marriage Certificate Decree Nisi Change of Name Certificate (Issued by an Australian Office of Births, Deaths and Marriages)
What if I don’t have compatible Bluetooth on my PC?

VeroCard uses Bluetooth Low Energy (BLE) which generally available in most new PC’s and mobile devices. If your PC does not support BLE you can plug the provided Bluetooth adapter into the USB port of your PC. The adaptor is plug and play, so no drivers or software are required.
What do I do when my VeroCard doesn't connect to my PC?

When PC’s wake up from sleep mode, sometimes the Bluetooth interface does not turn on. Symptoms of this include the: VeroCard does not prompt you to enter your PIN Login or the PC “times out" Bluetooth icon on the VeroCard is not displayed VeroCard goes to sleep If these symptoms are occurring, try toggling the Bluetooth off and on again. This can be done without needing to log in by following the steps below: On the login screen, click the "Internet" icon (Wifi symbol) on the bottom right corner of the screen This should open and show you the networks dialog, along with a toggle button for “Aeroplane Mode” Click “Aeroplane Mode” The Serenity screen will change and display a link to “Enable Bluetooth” – Click to turn Bluetooth back on Try to log in with your VeroCard as normal Don’t forget to turn “Aeroplane Mode” off again.
Can I do a firmware update or does VeroGuard do this?

VeroGuard may from time to time release new software for VeroCards. Updates are provided remotely at VeroGuard discretion and may be performed at any time. Users cannot upgrade firmware, and no application may be loaded to the VeroCard other than via VeroGuard.
How do I dispose of a VeroCard?

The VeroCard should be returned to VeroGuard or an authorised service provider for recycling and/or disposal.

User Options

User options

VeroCard menu can be found by pressing "0". From there you can find:

"1" Information

About ➔ Device codes and software versions
BLE ➔ Bluetooth ID and status
QR Code ➔ Displays VeroCard ID in QR code and number format

"2" Authentication

Show Password ➔ used to access password vault
Change Vero PIN ➔ Menu used when user chooses to change their PIN
Fido2
- Delete Cred ➔ Delete a stored Fido credential
- Delete all creds ➔ Delete all stored Fido credentials

"3" Power

Battery details ➔ displays data on battery state and charging
Sleep Now ➔ puts device to sleep
Idle Time ➔ sets time before device turns off

"4" Updates ➔ Used to manage firmware updates

"5" User Settings

Brightness ➔ Allows user to adjust screen brightness (will help with power management)
Beep On/Off
Activate ➔ Manual Activation mode

Changing PIN

Changing your PIN (Windows users only)

Only you know your PIN. VeroGuard does not store a copy of your PIN, and it is only stored in a one-way encrypted format on your VeroCard. That being the case, if you choose to change your PIN the process is entirely in your control and is initiated from the login screen on your PC.

The way in which you change your PIN depends on your environment. If you are unsure check with your IT team or read our AD or AAD article.

On-premises

Active Directory

Azure Active Directory