Authentication Failures

Troubleshooting Fingerprint Mismatch Failures

If the fingerprint authentication fails, ensure the following:

• Fingerprint sensor is clean and dry.
  • If the fingerprint sensor is dirty, clean with a 70% isopropyl alcohol wipe, allow it to dry completely, and then retry authentication.
  • If the fingerprint sensor is wet, dry completely with a lint-free towel, and then retry authentication.
• User does not press too hard or too softly on the fingerprint sensor.
• User’s finger is clean and dry.
  • If the finger is dirty, clean the hands and allow them to dry completely, and then retry authentication
  • If the finger is too dry, rub some lotion well into the finger, and then retry authentication.
  • If the finger is too wet, rub the finger with an alcohol wipe or with hand sanitizer, allow the finger to dry completely, and then retry authentication
• User places their finger on the centre of the sensor, touching the surrounding bezel.
• User keeps their finger still on the sensor and bezel during the authentication period.
• User does not lift their finger off the sensor or bezel until the authentication process completes.
• Ensure that the Nymi Band fits snugly on the wrist.

Troubleshooting Liveness Detection Failures

If the liveness detection fails, ensure the following:

• Bottom sensor is clean and dry.
  • If the bottom electrode is dirty, clean with a 70% isopropyl alcohol wipe, allow it to dry completely, and then retry authentication.
  • If the bottom electrode is wet, dry completely with a lint-free towel, and then retry authentication.
• User’s finger is clean and dry.
  • If the finger is dirty, clean the hands and allow them to dry completely, and then retry authentication
  • If the finger is too dry, rub some lotion well into the finger, and then retry authentication.
  • If the finger is too wet, rub the finger with an alcohol wipe or with hand sanitizer, allow the finger to dry completely, and then retry authentication
• User keeps their finger still on the sensor and bezel during the authentication period.
• User's wrist is not too dry. Before authentication, wash and completely dry the wrist before putting on the Nymi Band, or rub some lotion well into the wrist, and then retry authentication.
• Nymi Band bottom electrode remains in contact with the wrist during the authentication period. If the position of bottom electrode prevents contact, remove the Nymi Band, reposition the Nymi Band on the wrist, and then try authentication again.
• User does not lift their finger off the sensor or bezel until the authentication process completes.
• Ensure that the Nymi Band fits snugly on the wrist and does not move around during the authentication process.

Authentication Lockout

Lockout policies help prevent adversarial users from gaining unauthorized access to systems through brute-force attacks.

After 50 consecutive failures due to a fingerprint mismatch, the Nymi Band displays the See Admin icon and prevent the user from performing additional authentication attempts.

The lockout persists on the Nymi Band, even if the user removes the Nymi Band. The lockout will also persist while the Nymi Band is dead or while charging.

Clear the lockout by one of the following methods:

• Re-enroll the user to the Nymi Band.
• Authenticate the user with their credentials in the Nymi Band Application. A user can authenticate by using corporate credentials only if the Corporate Credentials Authentication option was enabled in the NES policy at the time of enrollment.