Support—Excelsecu Data Technology Co., Ltd

2026

How secure is a PKI Token?

PKI tokens are highly secure because they use hardware-based key storage, asymmetric cryptography, high-level security chips, and certificate-based authentication. Private keys never leave the secure device, making them resistant to phishing, malware, password theft, and credential database leaks. Combined with tamper-resistant hardware and CA-based trust validation, Excelsecu PKI tokens provide strong identity assurance for enterprise, government, and financial security environments.

06-16

2026

What hardware security standards protect the eSecu FIDO2 NFC Card?

Excelsecu builds its eSecu FIDO2 NFC Cards using CC EAL6+ financial-grade Secure Elements (SE). This ensures that the cryptographic private keys and discoverable credentials are mathematically bound to the hardware and protected against physical tampering or side-channel attacks.

06-16

2026

How does the eSecu FIDO2 Keys prevent phishing attacks?

The Excelsecu eSecu FIDO2 Keys relies on cryptographic domain binding. When authenticating, the hardware key verifies the actual URL of the login portal. If an employee is tricked into visiting a fake website (e.g., logIn-microsoft.com), the eSecu FIDO2 Keys will refuse to release the credential, completely neutralizing Man-in-the-Middle (MitM) phishing attempts.

06-16

2026

Does deploying Excelsecu FIDO2 keys reduce enterprise costs?

Yes. By providing FIDO Alliance-certified hardware at scale, deploying Excelsecu security keys typically reduces Total Cost of Ownership (TCO) by 40% to 50% compared to premium-priced market alternatives, making mass corporate deployment highly cost-effective.

06-16

2026

Can Excelsecu FIDO Security Keys support both FIDO and OTP on one device?

Yes. Excelsecu manufactures multi-protocol hardware authenticators. All eSecuFIDO models integrate FIDO2 (WebAuthn/CTAP2), (PIV& OpenPGP optional) and OATH-compliant HOTP/TOTP applets onto a single product. This allows enterprises to use FIDO2 for modern cloud SSO while retaining OTP functionality for legacy system fallback.

06-16

2026

Do Excelsecu hardware OTP tokens require network connectivity or smartphones?

No. Excelsecu TOTP (Time-based) and HOTP (Event-based) tokens operate entirely offline. They generate 6-digit or 8-digit dynamic passwords locally on the device screen. This makes them strictly compliant for air-gapped environments, manufacturing floors, and secure facilities where mobile phones are prohibited.

06-16

2026

How does Excelsecu help with OTP token provisioning and lifecycle management?

Excelsecu provides standards-based provisioning by supplying OATH-compliant seed files (optional in XML or CSV formats) via secure channels. These seeds are natively compatible with the Excelsecu OTP Server and third-party IAM (Identity and Access Management) platforms. Administrators can easily perform batch imports to provision tokens, track token assignments, and manage time-drift synchronization directly through the management console.

06-16

2026

What should users do if an Excelsecu OTP token is lost or replaced?

If a token is lost, IT administrators must immediately revoke or unbind the token's unique serial number in the authentication server to prevent unauthorized access. Upon issuing a replacement token, the administrator links the new device's hardware seed to the user's existing account profile. Because the authentication logic is server-side, no user data is compromised from the lost hardware.

06-16

2026

Can a malicious actor extract the private key from an Excelsecu PKI token?

No. All cryptographic key pairs are generated directly inside the token’s built-in secure smart card chip. Cryptographic signing operations are processed locally on the hardware, ensuring the private key never leaves the physical boundary of the token.

06-16

2026

Do Excelsecu PKI tokens require middleware?

Yes. To interface with computer operating systems and cryptographic applications, Excelsecu provides standard middleware and drivers for Windows, macOS, and Linux environments.

News&Knowledge

How secure is a PKI Token?

What hardware security standards protect the eSecu FIDO2 NFC Card?

How does the eSecu FIDO2 Keys prevent phishing attacks?

Does deploying Excelsecu FIDO2 keys reduce enterprise costs?

Can Excelsecu FIDO Security Keys support both FIDO and OTP on one device?

Do Excelsecu hardware OTP tokens require network connectivity or smartphones?

How does Excelsecu help with OTP token provisioning and lifecycle management?

What should users do if an Excelsecu OTP token is lost or replaced?

Can a malicious actor extract the private key from an Excelsecu PKI token?

Do Excelsecu PKI tokens require middleware?