IDEX FIDO2 Level 2 biometric card certification: what it means

IDEX says its access cards received FIDO2 Level 2 in July 2026. Here is what that adds, what remains unverified in the public register and what buyers should request.

My Biometric Cards editorial desk·9 min read·Published September 7, 2026

Evidence	What it supports	What it does not establish
FIDO2 functional certification	Protocol conformance and interoperability for the certified authenticator implementation	Reader compatibility, biometric accuracy or enterprise deployment quality by itself
Authenticator Level 1	The baseline security requirements required for FIDO2 certification	The additional security controls evaluated at Level 2
Authenticator Level 2	All Level 1 requirements plus the additional Level 2 security requirements	That every card configuration, component or surrounding access system has the same certification
IDEX certification page	IDEX states that Level 2 was granted to its access cards in July 2026	Independent register verification until the certificate and directory entry are published
Secure-element EAL6+	Assurance for the named Infineon or NXP secure element held by its manufacturer	A blanket EAL6+ certification for the complete finished card

The short answer

IDEX’s current certification page says its access cards have FIDO2 Level 1 and Level 2, with Level 2 granted in July 2026. The same page says the Level 2 certificate and FIDO Alliance register listing will be added once issued. Until those records appear, the July status is attributable to IDEX but cannot yet be independently checked against the public listing.

What Level 2 adds

FIDO Alliance states that authenticator security levels are cumulative: Level 2 includes all Level 1 requirements plus the additional Level 2 requirements. The program evaluates the authenticator against defined security and privacy requirements; it is more than a protocol logo, but its conclusions still apply to a specific certified implementation.

Functional certification and security level are related but different

FIDO2 functional certification addresses conformance and interoperability. The authenticator security level adds a security evaluation. Buyers should obtain both the certified product identity and its security-level evidence rather than interpreting “FIDO2” alone as a complete security verdict.

Scope matters

IDEX says the certification applies to its access cards and directs readers to search for “IDEX CTAP2.1” in the FIDO directory. Procurement teams should match the certificate’s vendor, model, firmware, authenticator version and allowed derivatives to the exact card offered in a tender.

Do not merge product and component certificates

IDEX separately lists Common Criteria EAL6+ certifications for Infineon SLC38BML800 and NXP P71D600 secure elements. It correctly identifies those as supplier-held component certifications. They should not be presented as proof that the complete biometric card has itself received EAL6+ evaluation.

What buyers should request now

Ask for the Level 2 certificate when issued, the final FIDO directory link, certified model and firmware identifiers, authenticator policy, biometric enrollment design, supported transports, attestation behavior and any derivative-certification statement. Then test the exact card against the intended identity platform and readers.

Commercial meaning

Level 2 can remove an assurance objection in enterprise or public-sector evaluation, but certification is not adoption. Pilots, purchase orders, delivered volumes, live users and repeat orders remain separate evidence and are tracked independently on this site.

Source note

Last reviewed 7 September 2026. The certification status is attributed precisely to IDEX until the corresponding Level 2 certificate and FIDO Alliance directory entry are publicly available.

COMMON QUESTIONS

Frequently asked questions

Is IDEX FIDO2 Level 2 independently verifiable today?

IDEX says Level 2 was granted in July 2026, but its certification page also says the certificate and FIDO Alliance register listing will be added once issued. The public record should be checked again when those links appear.

What is the difference between FIDO2 and FIDO Level 2?

FIDO2 functional certification addresses protocol conformance and interoperability. Authenticator Level 2 adds defined security requirements on top of the Level 1 baseline.

Does a Level 2 certificate cover every IDEX-based card?

Not automatically. Certification applies to the product and configuration identified in its certificate and permitted derivatives. Buyers should match those identifiers to the exact card being procured.