StrongKey FIDO Server

Spec sheet

What it does

StrongKey FIDO Server is an open-source FIDO Certified server for passwordless authentication in web and mobile applications.Read 14 Oct 2026 · strongkey.com

Purpose

StrongKey FIDO Server (SKFS) is an open-source FIDO Certified server for passwordless strong authentication in web and mobile applications.Read 30 Sep 2026 · strongkey.com

Intended users

StrongKey describes its support and customized services as serving enterprise and SMB customers, and its product page highlights developer integration resources.Read 30 Sep 2026 · strongkey.com

Deployment

StrongKey describes on-premises and hosted data-center deployment, with high availability, disaster recovery, clustering, and replication built in.Read 30 Sep 2026 · strongkey.com

API

Applications access SKFS through REST and SOAP web services rather than embedding the server into each application.Read 14 Oct 2026 · docs.strongkey.com

Integrations

StrongKey lists out-of-the-box integration with Citrix ADC and Citrix Gateway, plus LDAP or Active Directory and PKI integration.Read 30 Sep 2026 · strongkey.com

Support

StrongKey offers integration and support services for FIDO testing, development, and production, PKI onboarding and provisioning, PCI DSS compliance, and customized support; purchased versions include maintenance and upgrades.Read 30 Sep 2026 · strongkey.com

License

The SourceForge project lists GNU LGPL version 2.0, while StrongKey’s product page specifies GNU LGPL version 2.1 for downloadable software.Read 14 Oct 2026 · sourceforge.net

APIs

Web and mobile applications can integrate with SKFS through REST or SOAP web services.Read 30 Sep 2026 · strongkey.com

Authenticator choice

The product page says users can use existing FIDO-compatible devices and that StrongKey natively supports Apple and Android platform FIDO keys.Read 30 Sep 2026 · strongkey.com

Authenticator support

The product works with existing FIDO authenticators and supports Apple and Android platform keys.Read 14 Oct 2026 · strongkey.com

Citrix integration

StrongKey documents integration with Citrix ADC and describes it as supporting deployments targeting NIST AAL-3.Read 14 Oct 2026 · sourceforge.net

Company headquarters

LinkedIn lists Sunnyvale, California as headquarters, while StrongKey’s about page also identifies offices in Cupertino, California and Durham, North Carolina.Read 14 Oct 2026 · linkedin.com

Company size

LinkedIn lists StrongKey as a privately held computer and network security company with 11–50 employees.Read 14 Oct 2026 · linkedin.com

Deployment choices

Customers can run the product on-premises, in private or public clouds, in StrongKey-hosted data centers or on Tellaro appliances.Read 14 Oct 2026 · fidoalliance.org

Developer samples

StrongKey provides Node.js, JavaScript and Java tutorials, sample applications and a bundled command-line test tool.Read 14 Oct 2026 · strongkey.com

Directory integration

The feature set includes LDAP compatibility and integration with directory servers such as OpenLDAP or Active Directory.Read 14 Oct 2026 · docs.strongkey.com

Documentation depth

The documentation site contains product manuals, versioned release notes, installation instructions, administration material and developer tutorials.Read 14 Oct 2026 · docs.strongkey.com

FIDO Alliance status

FIDO Alliance lists StrongKey as joining in 2014, building a U2F server in 2015 and offering an early FIDO2-certified server.Read 14 Oct 2026 · fidoalliance.org

FIDO metadata

The server supports the FIDO Alliance Metadata Service for authenticator information.Read 14 Oct 2026 · strongkey.com

FIDO protocols

The server supports both U2F and FIDO2 authentication using FIDO Certified authenticators.Read 14 Oct 2026 · sourceforge.net

GitHub community

The public repository shows 222 stars, 56 forks, 11 issues and one commit history entry.Read 14 Oct 2026 · github.com

Hardware security

Tellaro appliances provide a FIPS 140-2 Level 2 TPM by default and an optional Level 3 HSM.Read 14 Oct 2026 · strongkey.com

High availability

Deployment options include built-in high availability, disaster recovery, clustering and replication.Read 14 Oct 2026 · strongkey.com

Installation detail

The installer deploys software under /usr/local/strongkey, runs it as a strongkey user and exposes the REST WADL over HTTPS port 8181.Read 14 Oct 2026 · docs.strongkey.com

Installation requirement

The documented standalone installation calls for Rocky Linux 9.3, OpenJDK 21, at least 20 GB disk space, 4 GB memory, and a public fully qualified domain name.Read 30 Sep 2026 · docs.strongkey.com

Limit: GitHub distribution

The project README says StrongKey stopped distributing updates on GitHub during the GitHub Copilot licensing lawsuit and directs users to SourceForge.Read 14 Oct 2026 · github.com

Limit: installation hardening

The installation guide requires administrators to replace default signing keys and generated service credentials before production use.Read 14 Oct 2026 · docs.strongkey.com

Limit: paid hardware security

A StrongKey representative states that integration with FIPS-certified cryptographic hardware is not included free of charge.Read 14 Oct 2026 · groups.google.com

Limit: virtual machines

StrongKey warns that VM deployments simulate the secure element and recommends them for proof of concept rather than production.Read 14 Oct 2026 · docs.strongkey.com

Maker legal identity

The company’s own about page identifies StrongAuth, Inc. doing business as StrongKey as privately held and incorporated in 2001.Read 14 Oct 2026 · strongkey.com

Notable news (March 2026)

StrongAuth announced the Tellaro SB2 bundle for small and medium businesses, with pricing starting at US$9,995 plus installation and first-year support.Read 14 Oct 2026 · blog.strongkey.com

OpenAPI documentation

The developer site links interactive OpenAPI documentation and demos for integrating the server.Read 14 Oct 2026 · strongkey.com

Password protection

StrongKey says FIDO authentication removes common password vulnerabilities and phishing exposure.Read 14 Oct 2026 · strongkey.com

Policy and transaction features

SKFS includes a policy module and supports transaction confirmation for digitally signed business transactions on Android devices.Read 30 Sep 2026 · strongkey.com

Praise: open-source economics

StrongKey repeatedly promotes no per-user, per-transaction or per-application fees and unlimited scale under a flat-cost model.Read 14 Oct 2026 · strongkey.com

Praise: standards and certification

The FIDO Alliance describes StrongKey’s server as FIDO2 certified and available as an appliance, hosted service or private-cloud deployment.Read 14 Oct 2026 · fidoalliance.org

Protocols

SKFS supports FIDO2 and U2F authentication with FIDO Certified authenticators.Read 30 Sep 2026 · docs.strongkey.com

Rating on SourceForge

No user rating is displayed from 0 reviews; the page invites the first review.Read 14 Oct 2026 · sourceforge.net

SDK

A native Android client library supports registration, authentication and digitally signed transaction authorization.Read 14 Oct 2026 · docs.strongkey.com

Security hardware

The Tellaro appliance includes a FIPS 140-2 Level 2 validated TPM, with an optional HSM configuration for FIPS 140-2 Level 3 compliance.Read 30 Sep 2026 · strongkey.com

Security integrity

SKFS digitally signs persisted FIDO objects and verifies those signatures when reading them.Read 14 Oct 2026 · docs.strongkey.com

Single sign-on

SKFS adds SSO capability and can issue JWT responses for applications.Read 14 Oct 2026 · groups.google.com

SSO

SKFS provides SSO capability and can issue SAML assertions or use JWT tokens to authorize authenticated users.Read 30 Sep 2026 · strongkey.com

Support model

Contract customers receive SLA-backed support, while GitHub and SourceForge users receive best-effort forum support.Read 14 Oct 2026 · docs.strongkey.com

System requirements

The current standalone installation guide calls for Rocky Linux 9.3, OpenJDK 21, LDAP packages, at least 20 GB disk, 4 GB RAM and a public FQDN.Read 14 Oct 2026 · docs.strongkey.com

Transaction authorization

The server can support PSD2 strong-customer-authentication transaction signing through digital signatures.Read 14 Oct 2026 · sourceforge.net

Plans and prices

Every StrongKey FIDO Server plan and price →

Where Specifiction places it

• Biometric Authentication Software#11 of 458.3