Allow managing multiple hardware-bound / device-specific Passkeys per technician account
Currently, Atera only triggers the passkey creation prompt once during setup. If a technician registers a hardware-bound passkey (e.g., local Windows Hello / TPM module), it is impossible to register a second device (like a secondary workstation or laptop) without completely resetting 2FA for the account. Resetting 2FA invalidates all previously configured credentials, making it impossible to use multiple hardware-bound keys simultaneously.
Technicians are currently forced to use cloud-synced passkey managers (like Chrome or iCloud Keychain), which is not compliant with many enterprise security environments that strictly mandate hardware-bound TPM credentials or physical FIDO2 tokens.
1
vote
IT Guys
shared this idea