Registering a new account with a security key

Description

Would you like to use a new AGOV account with a security key as a login factor?

Guide

Remarks
  • You can register a maximum of 4 security keys as login factors in an AGOV account.

  • Only security keys that support the FIDO2 security standard can be used for the AGOV-Login. An overview of the security keys compatible with AGOV can be found at:
    Security keys that can be used in AGOV

    Minimum requirements for browsers that support the use of security keys:


    Browser macOS 10.15+ Windows 10 Linux
    Safari* Yes, not recommended
    ×

    To login with a FIDO2 security key on a macOS computer at agov.ch, we recommend using Google Chrome (or Microsoft Edge) on your Mac. These browsers provide the most reliable support for FIDO2/WebAuthn technology, especially when used with USB security keys or Touch ID. Firefox is not recommended as it may experience limitations or malfunction when using FIDO2 on macOS. Safari also offers limited support.
    Therefore, please use Chrome for registration and login with FIDO2 on agov.ch.
    		 No No
    Chrome Yes Yes Yes
    Edge Yes Yes Yes
    Firefox Yes, not recommended
    ×

    To login with a FIDO2 security key on a macOS computer at agov.ch, we recommend using Google Chrome (or Microsoft Edge) on your Mac. These browsers provide the most reliable support for FIDO2/WebAuthn technology, especially when used with USB security keys or Touch ID. Firefox is not recommended as it may experience limitations or malfunction when using FIDO2 on macOS. Safari also offers limited support.
    Therefore, please use Chrome for registration and login with FIDO2 on agov.ch.
    		 Yes Yes
    *If your stick does not yet have a PIN (either new or reset), perform the setup in Chrome.

    If you have problems registering or logging in with a security key, check the following things:
    • Check whether the security key (token) is connected to the correct USB port on your computer.
    • Check that the port is not blocked.
    • Check whether the correct security key is displayed.

  • Security keys (FIDO2) from the Swiss manufacturer Token2 can be ordered online: Token2 security key
Creating a new AGOV account
The guide shows the procedure for registering a security key on Windows and macOScomputers.
To register a security key on a macOS PC or laptop, please read the help article first [addseckeymac].

  1. As soon as you click on Register in your authority's online service, you will be redirected to the AGOV registration page. Click on Register now!
    AGOV registration and login page with the QR code.
    Click on the image to enlarge


  2. Read the guide for option 2: Using a security key. Click on Start.
    The two AGOV registration methods are displayed: AGOV access app and FIDO security key.
    Use security key.


  3. Enter your email address and confirm that you have read the privacy statement. Click on Continue.
    Image for capturing the email address and to confirm that you have read the data protection declaration.
    Enter your email address and confirm that you have read the data protection declaration.


  4. You will receive a verification code at the email address provided. Enter this code and click on Verify.
    I have not received a verification code, what can I do?
    AGOV registration screen where you need to enter the verification code that was sent to your email address.
    Enter verification code.


  5. Enter your personal details and click on Continue.
    Display to enter personal data such as first name, last name, date of birth, gender, nationality and correspondence language.
    Enter personal data.


  6. Select Security key as the login factor and click on Confirm selection.
    Display of AGOV login factors for selection: AGOV access app and FIDO security key.
    Select security key.


  7. Click on Register key.
    Display with instructions and registration of the security key.
    Register your security key.


  8. The procedure for registering a security key is different for Windows and macOS:

    Registering a security key in Windows ▼
    ×

    1. Select the option Security key and connect it to your computer's USB port. In newer Windows versions, the first step is to select the option Use another device.
      Register the security key under other devices
      Register the security key under other devices

      Image with the option to select the security key as a passkey.
      Select the security key as the passkey.


    2. Confirm the next two prompts.
      Confirm the Windows security message to set up the security key.
      Confirm Windows security message.


      Confirm the Windows security message to set up the security key.
      Confirm Windows security message.


    3. Enter your security key PIN. If the security key has never been used before, you can set a new PIN.
      Image to enter the PIN of the security key.
      Enter the security key PIN.


      Image to set a new PIN and repeat if the security key has never been used before.
      Set a new PIN and repeat it if the security key has never been used.


    4. Tap to confirm your security key.
      An image asking them to tap their security key.
      Tap your security key.


    5. The security key has been successfully registered as a login factor.
      Image confirming that the security key has been registered as a login factor.
      Successful registration of your security key.


    Regosteromg a security key in macOS ▼
    ×

    To login with a FIDO2 security key on a macOS computer at agov.ch, we recommend using Google Chrome (or Microsoft Edge) on your Mac. These browsers provide the most reliable support for FIDO2/WebAuthn technology, especially when used with USB security keys or Touch ID. Firefox is not recommended as it may experience limitations or malfunction when using FIDO2 on macOS. Safari also offers limited support.
    Therefore, please use Chrome for registration and login with FIDO2 on agov.ch.


    Notes
    To use security keys on Macs, a PIN must be set before using them for the first time.
    1. Chrome
      Use the Chrome browser to set the PIN on a new security key:
      • Open Chrome and type chrome://settings/securityKeys into the address bar.
      • Insert the FIDO2 key into your computer.
      • Follow the instructions to set or change your PIN.

      Chrome and Firefox web browser prompts
      • Select the Security key option.
        Picture showing the selection of possible passkeys. Select the USB security key.
        Select the USB security key.


      • Connect the security key to your Mac's USB port.
        Image with the prompt to tap to connect your security key to your Mac.
        Attach the security key and tap on it.


      • Enter your security key PIN. Tap to confirm your security key.
        Image for entering the existing PIN of the security key.
        Enter the existing PIN for the security key.


        Chrome web browser only: If the security key has never been used, you can define a new PIN.
        Image to enter and repeat a new PIN for the security key.
        Set and confirm a new PIN for the security key.

    2. Firefox
      Firefox is not recomended on MAC for FIDO2 Scurity Keys.

      Read the instructions anyway
      ×

      If the security key is registered in the Safari browser, the PIN must be set in accordance with the security key manufacturer's instructions. Once the PIN has been set, the security key can be registered in the AGOV account. If no PIN was set before registration, the following error message appears:
      Image with error message if no PIN was set before registration.
      Error message if no PIN was set before registration.

      Registering the security key
      The prompts may vary depending on the MacOS version and the web browser used.

      Safari web browser prompts

      • Select the Security key option.
        Screen with options to log in with a smartphone or security key.
        Login with security key.


      • Connect the security key to your Mac's USB port.
        Image with the prompt to insert the security key into the USB port.
        Insert the security key into the USB port.


      • Enter your security key PIN. Tap to confirm your security key.
        Image to enter the security key PIN with the prompt to tap on the key afterwards.
        Enter your security key PIN.



    3. User guides for security keys are available on the following manufacturers' support websites:
      Token2 security key
      Youbico security key


    Registering a security keys in Linux ▼
    ×

    Please read the article "Using Token2 FIDO2 keys under Linux" at: Link
    (Link to original manufacturer information, not translated)



  9. Enter a name for your security key.
    Display for entering a name for the administration of the security key.
    Enter a name for the security key to manage it.


    Register your mobile number as a recovery option.


    Please confirm your mobile number.


  10. You have successfully completed your AGOV account registration. You will also receive a confirmation to your email address.
    A message indicating that your AGOV account registration has been completed successfully and that you will also receive a confirmation by email.
    AGOV registration completed successfully.


  11. We recommend that you watch the following tips and explanatory videos before using your AGOV-Login:
    7 important tips and AGOV explanatory videos ➽

Related help articles

Removing security keys from the AGOV account
Adding security keys to your AGOV account
Registering a new account with the AGOV access app
What can I do if I no longer have access to my smartphone/tablet or security key?


Were we able to help you?
 
Read more help articles →