HID Adds Enterprise Attestation to Crescendo FIDO Authenticators

HID Global has made Enterprise Attestation available across its Crescendo series of FIDO2-certified authenticators, including smart cards and security keys. The capability enables organizations to verify that a passkey was registered on a trusted, company-issued device rather than a personal or unmanaged authenticator, closing a governance gap that has limited enterprise passkey adoption in regulated industries.

Enterprise Attestation is defined within the FIDO Alliance’s WebAuthn and Client to Authenticator Protocol (CTAP) specifications. When a user attempts to register a passkey, HID’s implementation checks for certificates linking the authenticator to company-issued devices. Enrollment is blocked if valid attestation data is absent or unrecognized. The solution adds no friction to the end-user login experience. HID stated that Enterprise Attestation “helps organizations strengthen device trust, gain visibility into authenticator origin and support high-assurance authentication without adding friction for users.”

The launch addresses a documented barrier to enterprise passkey rollout. The FIDO Alliance’s State of Passkey Deployment in the Enterprise report found that 20 percent of organizations cite strict regulations as a key barrier to passkey adoption. Enterprise Attestation is designed to satisfy compliance requirements under the EU’s NIS2 Directive, the Digital Operational Resilience Act (DORA), and Zero Trust security frameworks. Target markets include financial services, healthcare, and critical infrastructure. The solution integrates with the PingOne identity platform.

Enterprise Attestation is an addition to the Crescendo portfolio expanded in HID’s Enterprise Passkey Management platform launch in August 2025, which introduced centralized FIDO credential lifecycle management. HID subsequently deepened its control over the enterprise passkey hardware stack through its acquisition of IDmelon, which gave the company technology to convert existing access cards into FIDO2 credentials.

The Crescendo portfolio spans both physical and logical access use cases. Crescendo smart cards serve as dual-purpose corporate badges combining facility access with passwordless digital authentication, supporting FIDO2, PKI, and OATH standards. Crescendo security keys are compact devices designed for cloud and enterprise application access. Enterprise Attestation-enabled authenticators are available globally.

With enterprise passkey adoption surging in the US and UK per FIDO Alliance data, HID’s attestation capability targets the governance and compliance requirements organizations encounter as they move from pilot to production deployment. Recent benchmarking research has identified operational hurdles including regulatory compliance as key maturation-stage challenges for enterprise passkey programs.

Sources: Security Info Watch, Security Informed

–

By Cass Kennedy