# Desktop application

> Install and use the Ironchip desktop application on Windows, Linux and macOS: enrollment, identity on USB, safe zones and authentication.

URL: https://docs.ironchip.com/en/identidad/usuarios/app-escritorio/

Ironchip can provide the desktop application to customers who need it. It works exactly like the mobile application and is available for Windows, Linux and macOS. The installation instructions change depending on the operating system, but usage is the same on all of them.

## Download

Download the application from the official Ironchip GitHub: [github.com/Ironchip-Security](https://github.com/Ironchip-Security).

Go to the installer section for your operating system. The desktop authenticator is available for Windows, Linux and macOS. Make sure you download the latest available version.

## Installation

### Windows

Double-click the `.msi` file you downloaded and follow these steps:

1. Click **Next**.

   [Image: Welcome screen of the Windows installer with the Next button]

2. Select **I accept the terms in the License Agreement** and click **Next**.

   [Image: Installer license screen with the acceptance checkbox]

3. Select the components you want and click **Next**.

   [Image: Installer component selection screen]

4. Click **Next**.
5. Click **Finish** to complete the installation.

To uninstall the desktop application, right-click the file and click **Uninstall**.

### Linux and macOS

:::note
The installation process is the same on both systems, but the installation file is different.
:::

To install the Ironchip authenticator on your computer, run this command with administrator permissions:

```bash
sudo dpkg -i <path to the .deb file>
```

For security, the system asks for your password. Enter it to authorize the operation and the installation continues.

When the installation finishes, you only need to register the device and you can start using it.

To uninstall the application, run this command with administrator permissions. The system asks for your administrator password.

```bash
sudo dpkg -r ironchip-authenticator
```

#### Disable USB

Type this command in the terminal and press Enter. The system asks for your administrator password.

```bash
sudo ironchip-service configure --restrict-usb=true
```

#### Enable the proxy

With the **automatic proxy**, the application uses the proxy configured in the system. To enable it, type this command in the terminal and press Enter:

```bash
sudo ironchip-service configure --proxy-enable=true
```

With the **manual proxy**, the application takes the proxy details from the `config.json` file:

```bash
sudo ironchip-service configure --proxy-manual=true --proxy-manual-uri 127.0.0.1:8080
```

## Enrollment

Before you enroll, an administrator must have registered you in the admin console. You then receive a verification email. Follow these steps:

1. In the email, click the **Verify my account** button.

   [Image: Verification email with the Verify my account button]

2. The desktop application is already downloaded, so click **Continue**.
3. Copy the security code that appears on the computer screen and paste it into the Ironchip desktop application.

   [Image: Security code copied and entered in the desktop application]

Enrollment is complete when the next image appears on the computer and the application opens.

[Image: Enrollment confirmation screen in the desktop application]

For the other ways to enroll (mobile app or USB), see [Enrollment](https://docs.ironchip.com/en/identidad/usuarios/alta/).

### Carry your identity on an external device

This option lets you carry your identification credentials with you. Once you have enrolled with an external memory device, you can use it as an authentication mechanism on any Ironchip-compatible computer that has the **Ironchip Desktop Services** installed.

To enroll a new device as an identity provider for yourself, select the device to install on during enrollment, when you run the Ironchip desktop application:

1. Insert your external storage device.
2. Click the refresh button to scan your external device.
3. Click the device name, to the left of the refresh button, and choose the external device from the drop-down list.

   [Image: Selecting the external device in the drop-down list of the application]

:::caution[Keep the device connected]
The external device must stay connected for you to be able to use the desktop application.
:::

### Set up a USB drive with an identity

To store an identity on a USB drive, you first need to generate an invitation.

#### Step 1: generate the invitation

1. Go to the admin console.
2. Select the identity you want to store on the USB drive.
3. Send the invitation to the user. In the user list, the option is **Options > Add a device**.

   [Image: User list in the console with the Options menu open and the Add a device option]

#### Step 2: accept the invitation

The user receives an email with an enrollment link.

1. Open the email and click the link.

   [Image: New device confirmation email with the link to confirm the device]

2. The enrollment screen opens, with a QR code and, below it, an **Enrol** button (**Inscribirse** when the page is in Spanish).

   [Image: Enrollment screen with the QR code and the enroll button below it]

3. Click that button to start the enrollment process with the desktop authenticator.

#### Step 3: use the desktop authenticator

When you click the button:

1. The system asks whether you want to open the Ironchip authenticator. Confirm it.
2. A window like this appears.

   [Image: Desktop authenticator window to choose the USB drive]

3. In this window, choose the USB drive where the identity will be stored.

## Services

The services tab lists all the services you have access to. If your company so decides, it also includes the **Ironchip Management Panel** service, which is exclusive to the selected administrators who manage authentications and access to the services.

A countdown appears on these services if authentication has been requested for the service.

[Image: Services tab of the desktop application with the countdown of a service]

## Version

To check the version of the desktop application:

1. Open the application and click the three dots in the top bar.

   [Image: Top bar of the application with the three-dot icon]

2. In the drop-down menu, click **App information**.

   [Image: Drop-down menu with the Account information, App information and OTP options]

3. A window shows the application version.

   [Image: Window showing the desktop application version]

## Safe zones

The keys tab lists all the keys you have access to: the ones you created yourself and the ones shared by other members of your company.

To create a new safe zone:

1. Click the **+** icon.

   [Image: Keys tab with the + icon for creating a safe zone]

2. Enter a name for the safe zone.
3. Click **Add Safe Zone**.

   [Image: Form for naming the safe zone, with the button to add it]

4. When the progress wheel reaches its end, the key is created.

## Authentication

Once the safe zones are created and linked to the corresponding services, you can authenticate in two ways.

### From the notification

This is the most common method.

1. Enter your credentials in the service you want to access. A notification arrives on the device through the Ironchip app.
2. Click the notification. The Ironchip app opens.
3. Click **Authorize**. The signal scanning screen opens and verifies whether you are in the authorized location for accessing the service. If you are in the correct place, you get access to the service.

   [Image: Signal scanning screen that verifies the location]

### From the app

1. Enter your credentials in the service you want to access. A notification arrives on the device.
2. Instead of clicking the notification, open the app directly and go to **Services**. On the service where you entered your credentials, a countdown shows how many seconds are left to run the signal scan and verify your identity. Click the service card.

   [Image: Service card with the countdown]

3. Click **Authorize**. The signal scanning screen opens and verifies whether you are in the authorized location. If you are in the correct place, you get access to the service.

## Video tutorial

Video: [Using the Ironchip desktop application](https://play.hubspotvideo.com/v/7745202/id/154008302190)