NG-Key
NG-Key
Credentials

Credential Surfaces Buyers Recognize as Serious

NG-Key treats identifiers as policy-bearing artifacts — not opaque strings in a table — so issuance, rotation, and revocation remain tied to the truth of the reader.

WebAuthn PASSkeys and NFC mobile keys share the same lifecycle mindset: cryptographically secure keys with login cleanup instead of later added shared secrets.

Physical media remain first-class — cards and DESFire profiles carry expectations regarding tamper resistance, cloning, and operational handling that procurement explicitly requests.

Security conversations shorten when credential types align cleanly with areas, timelines, and audit trails — a vocabulary from reception to boardroom.

Spotlight

Why credential depth belongs in the platform core

  • Fewer 'phantom entitlements' — identifiers remain tied to real issuance events and readable outcomes.
  • Revocation and rotation narratives stay honest because the state lives alongside execution, not in a parallel ticket queue.
  • Migration-friendly posture — legacy cards and modern PASSkeys coexist without forcing a big weekend.
  • Procurement reads stability – you describe credential classes, security levels, and operational responsibilities without needing to improvise.
  • Shared semantics with ledger exports — access decisions reference persistent identifiers that can be tracked by auditors.
Premium credential and reader abstraction – marketing element of the NG-Key platform.

Depth

Capability Coverage

PASSkey and WebAuthn flows

Enrollment Patterns That Respect Enterprise Identity Providers Without Isolating Readers.

NFC mobile keys

Phone-presented credentials with lifecycle hygiene, tailored to the setup.

Cards & DESFire Profiles

Operational handling for physical media where phones are not universal.

Issuance Coupling

Credential Events Remain Narratable Alongside Doors, Time Profiles, and Ledger References.

Motion

How teams roll credentials safely

01

Classify

Define Credential Families and Assurance Expectations Before Mass Issuance.

02

Enroll

Drive Enrollment Through Governed Channels – Q-Air and Operator Consoles Stay Aligned.

03

Bind

Attach cohorts, areas, and time profiles to consolidate access grants.

04

Prove

Review issuance and denial stories with audit exports — not screenshots.

Outcomes

Security reviews encounter coherent semantics for credentials instead of ad-hoc worksheets.

Help desks explain 'why this badge fails' with identifiers that operators actually recognize.

Executives see the credential posture as an ongoing program — not a checkbox for the launch week.

Product Preview

Chapter Walkthrough

Short Cinematic Clip for This Chapter – Silent Preview Players Follow Your Motion Settings Elsewhere on the Page.

Platform Hub

Platform Chapters

Open a Chapter for Depth and Cinematic Preview – Credentials, Readers, and Deployment Architecture.

Credentials & Identifiers

Credentials & Identifiers

PASSkeys, NFC mobile devices, cards, DESFire postures — identity surfaces that operators can defend.

Open
Readers Cloud Path

Readers Cloud Path

MQTT-attached readers, reader-bound truths, claims lifecycles — without shadow controllers.

Open
Deployment & Scaling

Deployment & Scaling

Tenant-aware rollout patterns, environments, and observability that recognize procurement.

Open

Continue Exploring

Switch Pillars – Facility Suite, Integrations, Ledger Proofs, Workspace, or Platform Core.

Platform Core Integrations Ledger Facility