Device Service supports the following modes for fingerprint readers:
fingerprint.mode: 1 to use the WBF API mode: In this mode, Advanced Authentication works with a processed fingerprint reader in Windows Biometric Framework API.
fingerprint.mode: 2 to use the WBF Direct mode: In this mode, Advanced Authentication works directly with a device driver.
NOTE:Some WBF compliant readers may work only in the WBF Direct mode, for example, the NEXT Biometrics readers. You can download the NEXT Biometrics driver from the link.
fingerprint.mode: 3 to use the Lumidigm mode. You must install the Lumidigm Drivers. You can download the drivers from the HID Global website. Some devices require that the Lumidigm Device Service is installed.
fingerprint.mode: 4 to use the DigitalPersona mode. You must install the DigitalPersona U.are.U RTE. You can download it from the DigitalPersona website.
Device Service supports multiple fingerprint modes. You can configure multiple modes in the following ways:
Specify numeric values assigned to each mode.
For example: fingerprint.mode: 1,2,3 to use WBF API, WBF Direct, and Lumidigm modes.
Specify the mode names.
For example: fingerprint.mode: WbfDirect,DigitalPersona to use WBF Direct, and DigitalPersona modes.
Specify the combination of numeric value and mode name.
For example: fingerprint.mode:1,WbfDirect,3 to use WBF API, WBF Direct, and Lumidigm modes.
NOTE:The fingerprint.mode: auto is the default mode which enables Lumidigm, DigitalPersona, and WbfDirect modes.
To change the fingerprint settings, perform the following steps:
Open the configuration file depending on your platform:
Microsoft Windows: C:\ProgramData\NetIQ\Device Service\config.properties.
Linux: Fingerprint readers are not supported.
Apple Mac OS X: Fingerprint readers are not supported.
Add a string to configure single or multiple modes.
For example:
fingerprint.mode: 3 to use the Lumidigm mode
fingerprint.mode: 1,WbfDirect,3 to use the WBF API, WBF Direct, and Lumidigm modes.
Add optional parameters (if required):
fingerprint.captureTimeout: 15 of capture inactivity in seconds.
NOTE:The parameters are case-sensitive.
Save the changes.
Restart the Device Service.
NOTE:The parameter fingerprint.isoSupported: true (default value is true) helps Device Service to extract ISO from raw image that it gets from user who scanned his fingerprint for authentication. This parameter helps to eliminate this additional step on the server and improves the authentication speed on the server.
If you set the parameter to false, Device Service sends raw image to Advanced Authentication server and the server will need to extract ISO to compare it with a stored authenticator. This may cause performance issues in environments where hundreds of users perform fingerprint authentication at the same time.