# How to create and set Hideez Key Access Profiles

{% embed url="<https://www.youtube.com/watch?v=IbqywP2tmuo>" %}

## **Profile settings explanation**

### PIN

* **Require PIN:** *Require PIN each time the key is connected or the computer is unlocked. If this setting is not enabled, the PIN will be prompted less frequently, only during computer or key restarts.*
* **PIN expiration**: *After the PIN code is expired, the device storage will be locked until the user enters the PIN again.*
* **PIN length:** *Minimum and maximum length of the PIN code for the device.*
* **Incorrect PIN Entry:** *Maximum number of incorrect PIN code entering. After the number of entries is exceeded, the device is locked.*

### Button Press

* **Require Button Press:** *Require a button press each time the key is connected or the computer is unlocked. If this setting is not enabled, button confirmation is only needed when pairing the key with the computer via Bluetooth*.

### Server Confirmation

* ***Require Server Confirmation*****:** *To use the key, it is necessary for the server to be accessible at the moment of each workstation unlock or key connection.*

{% hint style="info" %}
Note! The installed Server Confirmation / Connection checkbox will not allow you to unlock your computer without connecting to the server.
{% endhint %}

## Default Profile Settings

<figure><img src="https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/s9Dyz34baNtkErY79qaO/image.png" alt="" width="563"><figcaption></figcaption></figure>

By default, all Employees have a Default Profile with such parameters:

* **Require PIN:** Disabled
* **Require Button Press** Disabled
* **Require Server Confirmation** Disabled

{% hint style="warning" %}
Please note that during the activation of your Hideez Key, you will need to set up a PIN code. This PIN code will be used for **authentication** using the **FIDO** standard. Additionally, you will enter this PIN code each time you unlock your computer using the Hideez key for the first time after turning it on or restarting it.
{% endhint %}

{% hint style="info" %}
The administrator can configure separate access settings for each Hideez Key. Access settings can only be set via HES. Settings are grouped into profiles. The first profile - **Default** - is created during the installation of HES, the administrator adds the rest.&#x20;
{% endhint %}

To configure profiles, go to the **Hardware Vaults** sectio&#x6E;**, Access Profiles** tab.

<figure><img src="https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/BMcMQdWEUSUmBz1vS1Ml/image.png" alt=""><figcaption></figcaption></figure>

You can [edit an existing profile](#edit-an-existing-profile), [create](#create-a-new-profile) a new one, and [delete](#delete-profile) it.

{% hint style="warning" %}
Do not forget to [set the desired profile to the Hideez Key](#set-a-profile-for-the-device).
{% endhint %}

## Edit an existing profile

#### Step 1

To edit an existing one, you need to select a profile by clicking on it and then click **Edit**.

![](https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/gcmwpCuSwyihntwGzmc5/Untitled-29.jpg)

#### Step 2

Make all needed changes and click **Save**.&#x20;

* [Read about Profile Settings](#profile-settings-explanation)

## Create a new profile

#### Step 1

To create a new one, click the **Create Profile**.

![](https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/1PqrRX9NF0hHXcHyMnuD/Untitled-30.jpg)

#### Step 2

Make all needed settings and click **Create**. [Read about Profile Settings](#profile-settings-explanation).

<figure><img src="https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/F7i3PM11AOZfkmBofuqT/Screenshot_2.jpg" alt="" width="563"><figcaption></figcaption></figure>

## **Delete profile**

#### Step 1

To delete an existing one, you need to select a profile by clicking on it and then click **Delete**.

![](https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/3R8LCIjuv4bh2L4GWJrQ/Untitled-31.jpg)

#### **Step 2**

Approve action by clicking **Delete**.

![](https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/U5iY01ZZfwm2elnXJv13/delete2.jpg)

{% hint style="warning" %}
You can delete only Profiles that are not in use by Hardware Vaults. Otherwise, you need to first assign other profiles to the hardware vaults.
{% endhint %}

## **Set a profile for the device**

For the created profile to work, it must be assigned to the device.

[Set a profile for a device](https://enterprise.hideez.com/hideez-enterprise-server/hardware-vaults/set-a-profile-for-a-hardware-vault)

When an administrator changes profile settings, remote tasks are created to change these settings on each affected device. These tasks will be completed as soon as the device is connected.