You can register a passkey (from your computer or mobile device) or a physical security key for a RAM user. This provides a secure, phishing-resistant method for logging on or performing multi-factor authentication (MFA) by using your device's built-in biometrics (like fingerprint or face ID) or a PIN.
Before you begin
Before you begin, read the following topics:
Register a computer's built-in passkey
You can register your computer's built-in authenticator (such as Windows Hello or a MacBook's Touch ID) as a passkey for a RAM user.
This example demonstrates how to register a passkey on a Windows 10 computer by using its fingerprint reader.
Log on to the Alibaba Cloud Management Console as a RAM user.
Hover over the profile picture in the upper-right corner and click Security Information.
In the Passkey section of the Security page, click Create Passkey.
Enter a name for the passkey and click Bind.
Use a descriptive name to distinguish this passkey from others (such as "PC_fingerprint"). Passkey names must be unique for each RAM user. You can rename a passkey later.
Your browser will prompt you to complete the registration. Follow the on-screen instructions to authenticate with your computer's security feature.
The authentication prompt is handled by your device's operating system and will vary. For example, Windows uses Windows Hello, while macOS and iOS use iCloud Keychain. When using a fingerprint reader, ensure you hold your finger on the sensor long enough for it to register.
After successful registration, the new passkey appears in your list.
Register a mobile device's passkey
You can register a mobile device (such as a phone) as a passkey by initiating the process on a computer and then scanning a QR code with your phone. This cross-device method is convenient if you use multiple computers, as your phone can act as a universal key for all of them.
This example demonstrates how to initiate the registration on a Windows 10 computer and complete it on an iPhone using Face ID.
On your computer, log on to the Alibaba Cloud Management Console as a RAM user.
Hover over the profile picture in the upper-right corner and click Security Information.
In the Passkey section of the Security page, click Create Passkey.
Enter a name for the passkey and click Bind.
Use a descriptive name to distinguish this passkey from others (such as "Phone_face"). Passkey names must be unique for each RAM user. You can rename a passkey later.
When your computer's system prompt appears, choose the option to use a different device, such as a phone or tablet. This may involve clicking Cancel and then selecting an option like Use a different device or Phone or Tablet.
A QR code is displayed on your computer screen.
On your mobile device, use the built-in camera or a QR scanner to scan the code. Follow the prompts on your phone to complete authentication (such as by using Face ID or fingerprint).
After successful registration, the new passkey appears in your list.
Register a physical security key
You can register a FIDO2-compliant physical security key for a RAM user. You can register the key by inserting it into a USB port on your computer, or by connecting it to a mobile device via Bluetooth or NFC.
This example demonstrates how to register a security key on a computer.
Log on to the Alibaba Cloud Management Console as a RAM user.
Hover over the profile picture in the upper-right corner and click Security Information.
In the Passkey section of the Security page, click Create Passkey.
Enter a name for the passkey and click Bind.
Use a descriptive name to distinguish this passkey from others (such as "SecurityKey"). Passkey names must be unique for each RAM user. You can rename a passkey later.
When your computer's system prompt appears, choose the option for an external or USB security key. This may involve clicking Cancel first.
Insert your security key into a USB port and touch the button on the key when prompted.