Thales banner

SafeNet Authentication Client – desktop software for PKI-based authentication management

Generate and store private keys on-board highly secure smart card-based authenticators

Get in touch

SafeNet Authentication Client – is a middleware client that manages Thales' extensive SafeNet portfolio of certificate-based authenticators, including eTokens, SafeNet IDPrime smart cards, SafeNet IDPrime Virtual and combined PKI/FIDO devices. Offering full backward compatibility and incorporating features from previous middleware versions, SafeNet Authentication Client ensures complete support for all the above-mentioned devices.

icon cloud network

Identity and access management all on one platform.

SSO + MFA + Access Management

SafeNet Authentication Client links applications to Thales' PKI authenticators, providing full local administration and support for multiple advanced security applications such as digital signing, pre-boot authentication and disk encryption. SafeNet Authentication Client generates and stores private keys on-board highly secure smart card-based authenticators, allowing users to securely carry all their digital credentials wherever they go.

Leverage your PKI solution for multiple use cases

SAC diagram

A unified solution for all users

SafeNet Authentication Client is available for Windows, Mac and Linux, so your organisation can take full advantage of SafeNet’s solutions ranging from identity and access management, certificate based security, strong authentication, encryption and digital signing, from virtually any device.

SafeNet Authentication Client - Product Brief

SafeNet Authentication Client - Product Brief

Find out how to secure your organization across all platforms using a fully customized, single certificate-based authenticator with SafeNet Authentication Client.

Contact a specialist about SafeNet Authentication Client
  • Benefits
  • Features
  • Specifications
  • Supported authenticators
  • Transparently operates with any standard certificate-based security application
  • Consolidated & simplified management tools allow users to manage their own cards/tokens and certificates
  • Supports secure access, data encryption and digital signing – all with a single authenticator
  • Streamlines security operations by allowing organisations to deploy multiple security applications on a single platform
  • Allows organisations to use certificate-enabled security capabilities from any client or server thanks to multi-platform support
  • Strong two-factor authentication for network logon
  • Smart card logon on Windows machines
  • Files and disk encryption
  • Support for common criteria and FIPs certified devices
  • Full support for SafeNet eTokens, IDPrime smartcards (with FIDO or not), IDPrime virtual smartcards, including multi-slots support and PIN quality modifications
  • Support for PIN pad readers
  • Support for See What You Sign (SWYS) PIN Pad readers
  • Enables local administration and usage of devices
  • Support for full client customisation, including security configuration, policies and user interface
  • Seamless integration with any certificate-enabled application based on industry standard APIs
  • Support for Virtual Keyboard enables you to enter passwords without using a physical keyboard, providing protection against kernel level keyloggers
  • Key logger and PIN protection
  • Common look and feel across all platforms



Supported operating systems


Windows servers:

  • Windows Server 2012 and 2012 R2 (64-bit)
  • Windows Server 2016 (64-bit)
  • Windows Server 2019 (64-bit)
  • Windows Server 2022 (64-bit)

Windows OS:

  • Windows 8.1 (32-bit, 64-bit)
  • Windows 10 (32-bit, 64-bit)
  • Windows 11 (64-bit)


  • macOS 11.6.2 (Big Sur)
  • macOS 12.X (Monterey)
  • macOS 13 (Ventura)

Linux distributions:

  • Ubuntu 20.04 & 22.04 (GNOME& KDE)
  • CentOS 8.3 & 9 Stream
  • Red Hat 8.X & 9
  • Fedora 34 & 36 (GNOME & KDE)
  • Debian

 Supported APIs:

  • PKCS#11 V2.20, PKCS#15, MS CryptoAPI and CNG (CSP, KSP), Mac CTK, PC/SC

Supported cryptographic algorithms:

  • 3DES, SHA-256, RSA up to 4096-bit, AES up to 256-bit, Elliptic Curve Cryptography (ECC)

Supported CMSs

  • Atos, Axiad, Entrust, Intercede, Versasec, XTEC

Supported CPUs

  • ARM CPU support for Mac (Apple M1)
  • Intel CPU (32 and 64 bit) for Windows and Linux/Mac (64 bit only)
Access Management Handbook

Access Management Handbook – eBook

Identity and access management key concepts, technologies and standards compiled for you in this Access Management ebook . You will learn: • Authentication and access management differences • How to leverage cloud single sign on (SSO) • Key concepts in Access Management...