RSA iShield Key 2 Series, powered by Swissbit, eliminates the credential entirely. Authentication happens on the device—a cryptographic proof of possession, not a secret that travels across a network. No shared secret. No replay attack surface. No way to phish what was never transmitted.
Integrated with RSA® ID Plus, iShield delivers phishing-resistant, hardware-based multi-factor authentication (MFA) across your entire enterprise—protecting sensitive data and intellectual property with a solution built to adapt as threats evolve.
The RSA iShield Key 2 Series is built on a FIPS 140-3 Level 3 certified cryptographic module (certificate 4679), supporting high-assurance authentication under the current NIST standards, and meets the NIST AAL3 hardware authenticator requirement. For enterprises operating under the most demanding compliance mandates, this isn’t a feature. It’s the baseline you’ve been asked to reach.
RSA iShield Key 2 Series delivers phishing-resistant, passwordless authentication with FIDO Passkey, smart card, and OATH OTP support across modern and legacy environments.
- No hardware recall. No re-enrollment: Field-updatable firmware pushes security fixes and new features to deployed units. Your hardware investment doesn’t expire when standards evolve
- 300 stored passkeys: Enterprise-scale FIDO passkey capacity without re-registration overhead
- Phishing-resistant by design. FIDO passkey and PIV smartcard authentication eliminate credential-based attacks. No shared secret to intercept, replay, or steal
- Flexible usage: Modern FIDO passkey and PIV smart card authentication are available via USB or contactless NFC. OATH HOTP for legacy systems via USB
- Versatile by design: Compatible with legacy and modern systems across financial services, healthcare, energy, and other highly regulated organizations
- End-to-end identity protection: Integrates with RSA ID Plus, giving you full control over your IAM strategy
- Built for the field: Fully molded, robust, and waterproof housing
Eliminate credential-based threats while driving your organization toward the highest levels of Zero Trust maturity. The RSA iShield Key 2 series provides robust, phishing-resistant, passwordless authentication that ensures only trusted, authorized users gain access to critical systems, helping enterprises achieve their Zero Trust goals.
Supported standards / features
FIDO2/CTAP2.1,/WebAuthn, FIDO Universal 2nd Factor (U2F) / CTAP1, OATH HOTP OTP (Event-based),Smartcard (PIV-compatible), USB 2.
OpenSC-compatible for non-management PIV operations, Swissbit provided iShield-specific OpenSC mini driver (LSA signed by Microsoft) for PIV management.
FIDO2/CTAP2.1,/WebAuthn, FIDO Universal 2nd Factor (U2F) / CTAP1, OATH HOTP OTP (Event-based),Smartcard (PIV-compatible), USB 2.
OpenSC-compatible for non-management PIV operations, Swissbit provided iShield-specific OpenSC mini driver (LSA signed by Microsoft) for PIV management.
Mechanical details
USB-A: 65 x 16 x 5.2 mm, 5g
USB-C: 60 x 16 x 5.2 mm, 5g
USB-A: 65 x 16 x 5.2 mm, 5g
USB-C: 60 x 16 x 5.2 mm, 5g
Form factor / device type
USB 2 Composite Device: HID FIDO, CCID Smartcard, HID Keyboard, USB-A or USB-C, VID: 1370, PID: 0911
Near Field Communication (NFC) interface and multi-color LED
USB 2 Composite Device: HID FIDO, CCID Smartcard, HID Keyboard, USB-A or USB-C, VID: 1370, PID: 0911
Near Field Communication (NFC) interface and multi-color LED
Certifications
FIPS 140-3 certified secure element (certificate 4679) FIDO Universal 2nd Factor (U2F) Level 1, FIDO2 CTAP2.1 Level 2
FIPS 140-3 certified secure element (certificate 4679) FIDO Universal 2nd Factor (U2F) Level 1, FIDO2 CTAP2.1 Level 2/p>
Temperature range
Storage: -25°C to 85°C
Operational: -25°C to 70°C
Storage: -25°C to 85°C
Operational: -25°C to 70°C
Multiplatform support
Operating Systems: Windows 10/11, macOS, iOS, iPadOS, Linux, Chrome OS, Android
Browsers: Firefox, MS Edge, Chrome, Apple Safari
Operating Systems: Windows 10/11, macOS, iOS, iPadOS, Linux, Chrome OS, Android
Browsers: Firefox, MS Edge, Chrome, Apple Safari
Storage
Holds 300 FIDO passkeys and 24 smart card certificates
Holds 300 FIDO passkeys and 24 smart card certificates
Secure element
NXP P71D600 running JCOP 4.5
NXP P71D600 running JCOP 4.5
Water resistant
IP68 compliant
IP68 compliant