Skip to content
Secure digital and physical access

Why juggle multiple tokens and badges when one rugged security key serves everyone, everywhere, every time? The MIFARE edition RSA iShield Key 2, powered by Swissbit, is the only FIDO-certified security key that supports the MIFARE physical access standard. A single tap lets users badge into buildings, pay in the cafeteria, and launch passwordless sessions across web apps, desktop (online or offline), VPNs, and legacy systems.

By integrating the RSA iShield Key 2 MIFARE series with RSA ID Plus, enterprises gain access to the highest level of security. The hardware authenticators provide NIST AAL3 hardware authentication, helping businesses implement phishing-resistant, hardware-based multi-factor authentication (MFA) and protect sensitive data and intellectual property with a solution capable of adapting to evolving threats. Together, the RSA iShield Key 2 series and RSA ID Plus deliver a single vendor, a single policy engine, and phishing-resistant access for everyone, everywhere, even when offline.

FIDO2 and multi-protocol support

The RSA iShield Key 2 MIFARE series delivers support for MIFARE, FIDO2 passkeys, smart card credentials, and OATH OTP for legacy compatibility in one authenticator. Whether your organization needs to secure logical access, safeguard remote work, physical access, or protect sensitive data, the RSA iShield Key 2 MIFARE series provides versatile and resilient access.

Key features include:

  • Unified digital AND physical access: Built-in MIFARE and FIDO security let users tap the same key at turnstiles, clock in and out, make cafeteria purchases, and access desktops, legacy systems, and SaaS portals. The solution is ideal for financial services, healthcare, energy, and other highly regulated organizations.
  • Stop phishing: FIDO2 and PIV provide strong, phishing-resistant authentication, protecting enterprise systems from credential theft- attacks with a capacity for 300 stored passkeys and 24 smart card credentials.
  • Lifecycle savings: Field updatable firmware can add new features, so enterprises cut hardware replacement cycles and user re-registration costs.
  • Audit-ready out of the box: The RSA iShield Key 2 MIFARE series aligns with NIS2, DORA, US EO 14028, and NIST SP 800-63-4 AAL 3 hardware authentication guidance.
  • End-to-end identity protection: Easily integrates with RSA ID Plus, giving you full control over your IAM strategy.
RSA iShield MIFARE benefits

RSA ID Plus and the RSA iShield Key 2 series provide key benefits to organizations, including:

  • One tap, everywhere: swipe through turnstiles and log into desktop or cloud apps with the same key. Passwordless for everyone, everywhere, every time.
  • Zero Trust identity protection: RSA ID Plus integrates a range of identity security capabilities—including contextual, risk-based authentication, mobile passkeys, and ID verification—to advance ZTA and protect every component of your organization.
  • Ruggedized form factor: Fully molded, robust, and waterproof housing.  Single issuance workflow: provision one authenticator instead of separate security and access cards, cutting onboarding time and lost-badge tickets.
  • Self-Service capabilities with ID Plus: End-users can easily register, update, and manage their credentials with ID Plus, minimizing the burden on IT teams while enhancing the user experience. Reduced hardware inventory: retire separate proximity cards; reduce replacement spend
  • Privacy built-in: cryptographic keys never leave the device; no personal data is printed on the device.
  • Secure end-to-end supply chain from semiconductor chips to assembly to dropship, all in one factory.
Phishing-resistant passwordless access for optimal Zero Trust maturity

Eliminate credential-based threats while driving your organization toward the highest levels of Zero Trust maturity. The RSA iShield Key 2 series provides robust, phishing-resistant, passwordless authentication that ensures only trusted, authorized users gain access to critical systems, helping enterprises achieve their Zero Trust goals.

Specifications

Supported standards / features

MIFARE DESFire EV3, FIDO2/CTAP2.1, WebAuthn, Universal 2nd Factor (U2F) CTAP1, HOTP (Event), Smartcard (PIV-compatible), OpenSC-compatible

Mechanical details

51.5mm x 18.5mm x 6mm

Form factor / device type

FIDO2 HID Device, CCID Smartcard, USB-A or USB-C, With NFC interface and multi-color LED

Certifications

FIDO Universal 2nd Factor (U2F/CTAP1), FIDO2 Level 1

Operating temperature range

Extended: -25°C to 70°C

Multi-platform support

Operating Systems: Windows 10/11, macOS, iOS, iPadOS, Linux, Chrome OS, Android
 
Browsers: Firefox, MS Edge, Chrome, Apple Safari

Storage

Holds up to 300 FIDO passkeys and 24 smart card certificates

Supported standards / features
MIFARE DESFire EV3, FIDO2/CTAP2.1, WebAuthn, Universal 2nd Factor (U2F) CTAP1, HOTP (Event), Smartcard (PIV-compatible), OpenSC-compatible

Mechanical details
51.5mm x 18.5mm x 6mm

Form factor / device type
FIDO2 HID Device, CCID Smartcard, USB-A or USB-C, With NFC interface and multi-color LED

Certifications
FIDO Universal 2nd Factor (U2F/CTAP1), FIDO2 Level 1

Operating temperature range
Extended: -25°C to 70°C

Multi-platform support
Operating Systems: Windows 10/11, macOS, iOS, iPadOS, Linux, Chrome OS, Android
Browsers: Firefox, MS Edge, Chrome, Apple Safari

Storage
Holds up to 300 FIDO passkeys and 24 smart card certificates

Request a Demo

Thank you for your interest in RSA.
Get a Demo