3.2 Fingerprint Settings

NOTE:You must install Microsoft .NET Framework 4.0 for using fingerprint.

Device Service supports the following modes for fingerprint readers:

  • fingerprint.mode: 1 to use the WBF API mode: In this mode, Advanced Authentication works with a processed fingerprint reader in Windows Biometric Framework API.

  • fingerprint.mode: 2 to use the WBF Direct mode: In this mode, Advanced Authentication works directly with a device driver. This is the default mode.

    NOTE:Some WBF compliant readers may work only in the WBF Direct mode, for example, the NEXT Biometrics readers. You can download the NEXT Biometrics driver from the link.

  • fingerprint.mode: 3 to use the Lumidigm mode. You must install the Lumidigm Drivers. You can download the drivers from the HID Global website. Some devices require that the Lumidigm Device Service is installed.

  • fingerprint.mode: 4 to use the DigitalPersona mode. You must install the DigitalPersona U.are.U RTE. You can download it from the DigitalPersona website.

To change the finger print settings, perform the following steps:

  1. Open the configuration file depending on your platform:

    • Microsoft Windows: C:\ProgramData\NetIQ\Device Service\config.properties.

    • Linux: Fingerprint readers are not supported.

    • Apple Mac OS X: Fingerprint readers are not supported.

  2. Add a string that specifies a mode. For example, fingerprint.mode: 3 to use the Lumidigm mode.

  3. Add optional parameters (if required):

    • fingerprint.captureTimeout: 15 of capture inactivity in seconds.

      NOTE:The parameters are case-sensitive.

  4. Save the changes.

  5. Restart your machine.

NOTE:The parameter fingerprint.isoSupported: true (default value is true) helps Device Service to extract ISO from raw image that it gets from user who scanned his fingerprint for authentication. This parameter helps to eliminate this additional step on the server and improves the authentication speed on the server.

If you set the parameter to false, Device Service sends raw image to Advanced Authentication server and the server will need to extract ISO to compare it with a stored authenticator. This may cause performance issues in environments where hundreds of users perform fingerprint authentication at the same time.