Thales banner

SafeNet Authentication Client – Desktop Software for PKI-Based Authentication Management

Generate and store private keys on-board highly secure smart card-based authenticators

Get in Touch

SafeNet Authentication Client – is a middleware client that manages Thales' extensive SafeNet portfolio of certificate-based authenticators, including eTokens, SafeNet IDPrime smart cards, SafeNet IDPrime Virtual and combined PKI/FIDO devices. Offering full backward compatibility and incorporating features from previous middleware versions, SafeNet Authentication Client ensures complete support for all the above mentioned devices.

SafeNet Authentication Client links applications to Thales' PKI authenticators, providing full local administration and support for multiple advanced security applications such as pre-boot authentication via partners, digital signing and disk encryption. SafeNet Authentication Client generates and stores private keys on-board highly secure smart card-based authenticators, allowing users to securely carry all their digital credentials wherever they go.

Leverage your PKI Solution for multiple Use Cases

SAC Diagram

A Unified Solution for All Users

SafeNet Authentication Client is available for Windows, Mac, and Linux, so your organization can take full advantage of SafeNet’s solutions ranging from identity and access management, certificate based security, strong authentication, encryption and digital signing, from virtually any device.

SafeNet Authentication Client - Product Brief

SafeNet Authentication Client - Product Brief

Find out how to secure your organization across all platforms using a fully customized, single certificate-based authenticator with SafeNet Authentication Client.

Contact a specialist about SafeNet Authentication Client
  • Benefits
  • Features
  • Specifications
  • Supported Authenticators
  • Transparently operates with any standard certificate-based security application
  • Consolidated & simplified management tools allow users to manage their own cards/tokens and certificates
  • Supports secure access, data encryption and digital signing—all with a single authenticator
  • Streamlines security operations by allowing organizations to deploy multiple security applications on a single platform
  • Allows organizations to use certificate-enabled security capabilities from any client or server thanks to multi-platform support
  • Strong two-factor authentication for network logon
  • Smart card logon on Windows machines
  • Files and Disk Encryption
  • Support for Common Criteria and FIPS certified devices
  • Full support for SafeNet eTokens , IDPrime smart cards( with FIDO or not) , IDPrime virtual Smart cards, including Multi-slots support and PIN Quality modifications
  • Support for PIN Pad Readers
  • Support for See What You Sign (SWYS) PIN Pad readers
  • Enables local administration and usage of devices
  • Support for full client customization, including security configuration, policies and user interface
  • Seamless integration with any certificate-enabled application based on industry standard APIs
  • Support for Virtual Keyboard enables you to enter passwords without using a physical keyboard, providing protection against kernel level keyloggers
  • Key logger and PIN protection
  • Common look and feel across all platforms
  • Multiple Languages Support



Supported operating systems 
Windows Servers:
  • Windows Server 2012 and 2012 R2 (64-bit)
  • Windows Server 2016 (64-bit)
  • Windows Server 2019 (64-bit)
  • Windows Server 2022 (64-bit)
Windows OS:
  • Windows 10 (32-bit, 64-bit)
  • Windows 11 (64-bit)
  • macOS 12.6.5 (Monterey)
  • macOS 13.3.1 (Ventura)
Linux Distributions:
  • Ubuntu 20.04 & 22.04 (GNOME& KDE)
  • CentOS 8.3 & 9 Stream
  • Red Hat 8.X & 9
  • Fedora 34 & 36 (GNOME & KDE)
Supported APIs:
  • PKCS#11 V2.20, PKCS#15, MS CryptoAPI and CNG (CSP, KSP), Mac CTK, PC/SC
Supported Cryptographic Algorithms:
  • 3DES, SHA-256, RSA up to 4096-bit, AES up to 256-bit, Elliptic Curve Cryptography (ECC)
Supported CMSs
  • Atos, Axiad, Entrust, Intercede, Versasec, XTEC, HIDGlobal
Supported CPU's
  • ARM CPU support for Mac (Apple M1 & M2)
  • Intel CPU (32 and 64-bit) for Windows and Linux/Mac (64-bit only)
  • ARM CPU for Windows (Q4 23 onwards)
Thales OneWelcome PKI/CBA and FIDO Authenticators

Thales OneWelcome PKI/CBA and FIDO Authenticators - Brochure

This brochure showcases the Thales OneWelcome PKI/CBA and FIDO Authenticator portfolio, featuring certificate-based smart cards and virtual smart card, certificate-based USB tokens, offering strong multi-factor authentication enabling organizations to address their PKI...