RSA iShield Key 2 Series for Federal Agencies

Nearly all federal and governmental agencies, both civilian and defense, trust RSA to secure the most critical systems—from civilian compliance mandates to DOD enforcement of phishing-resistant MFA requirements. Whether protecting classified information or securing federal networks, RSA^® ID Plus for Government is your go-to solution for robust, compliant authentication.

Integrating the RSA iShield Key 2 with RSA ID Plus for Government provides U.S. federal agencies, contractors, and systems integrators with yet another method of secure authentication. Employing a FIPS 140-3 Level 3 certified cryptographic module (certificate #4679) that supports both the FIDO2 and PIV Smart Card standards, the RSA iShield Key 2 FIPS models ensure that government systems are protected and compliant with White House Executive Order (EO) 14028, OMB M-22-09, and OMB M-24-14, which require federal agencies to secure cloud services, develop and implement Zero Trust Architecture (ZTA), and deploy phishing-resistant multi-factor authentication (MFA). Together, the iShield Key 2 FIPS and the RSA ID Plus platform support these efforts, delivering robust security compliance by default with solutions that are secure by design.

The RSA iShield Key 2 Series delivers secure, passwordless authentication aligned with NIST digital identity guidance and federal phishing-resistant MFA initiatives. The solution supports FIDO2 passkeys, OATH HOTP OTP, and PIV smart cards, providing flexible and resilient authentication across a wide range of government use cases. Federal agencies can rely on RSA to secure access for remote workers, personnel operating in classified environments, and privileged administrators accessing critical systems.

• FIPS 140-3 Level 3 certified: The iShield Key 2 FIPS employs a FIPS 140-3 certified cryptographic module (Overall level: 3, and a Physical Security level: 4, certificate #4679), one of the highest levels of cryptographic certification available. FIPS 140-3 certification is now required for all new federal deployments, with NIST setting September 21, 2026 as the date after which FIPS 140-2 modules move to Historical status.
• No hardware recalls: Secure, field-updatable firmware lets users apply new features and bug fixes to deployed units without replacing and re-registering hardware authenticators.
• 300 resident passkeys: Holds 300 FIDO passkeys and 24 smart card certificates—three times the passkey capacity of leading alternatives.
• Phishing-resistant: FIDO passkeys and PIV provide strong, phishing-resistant authentication, protecting federal systems from credential-based attacks.
• Smart card functionality: PIV support offers secure, tamper-resistant storage for digital certificates and credentials.
• Compatible with both legacy and modern systems, providing broad support for all agency applications.
• End-to-end identity protection: Easily integrates with the FedRAMP-authorized RSA ID Plus for Government, giving you full control over your IAM strategy. Enhances federal-private sector collaboration, ensuring secure access and compliance with federal mandates.
• Flexible usage: FIDO passkey and PIV smart card are available via both USB and contactless NFC. OATH HOTP OTP is available via USB.
• Ruggedized form factor: Fully molded, robust, and waterproof—built to withstand the environments federal personnel actually work in.

RSA ID Plus and the RSA iShield Key 2 provide key benefits to federal agencies, including:

• Compliance with federal standards: FIPS 140-3 Level 3 certified cryptographic module (certificate #4679), meeting the highest U.S. government requirements for cryptographic security. Aligns with EO 14028, OMB M-22-09, OMB M-24-14, and NIST SP 800-63B AAL3 hardware authentication guidance.
• A capable alternative to CAC for modern federal environments: The RSA iShield Key 2 FIPS supports PIV smart card, FIDO2, OATH HOTP OTP, and multi-protocol authentication—meeting the same use cases required of hardware authenticators across federal civilian and defense environments. RSA ID Plus, already trusted by 90% of U.S. federal agencies, delivers the identity platform to match.
• Zero Trust identity protection: RSA ID Plus integrates a range of identity security capabilities—including contextual, risk-based authentication, mobile passkeys, and ID verification—to advance ZTA and protect every component of your organization.
• Seamless passwordless experience: With FIDO2 certification, the RSA iShield Key 2 series supports a secure and frictionless passwordless journey across all federal systems.