Gemalto is now part of the Thales Group, find out more.
Contact Us

SafeNet eToken Virtual

eToken Authentication Icon

eToken Virtual is software-based two-factor authentication security solution that provides full public-key infrastructure (PKI) functionality for secure remote access, network access, and digital signing.

eToken Virtual works with SafeNet Authentication Client and SafeNet Authentication Manager (SAM) to provide a fully managed software smart card implementation with the security benefits and functionality associated with a hardware-based smart card. SAM can include PKI key pairs and certificates, as well as single sign-on profiles.

eToken Virtual’s security features ensure a high degree of software-based security and integrity:

Keys and certificates can be securely created and stored in eToken Virtual, ensuring they are never exposed to an unsecured computing environment. The contents of eToken Virtual are separated into public and private. Public contents are openly available, and private data is encrypted using the AES 128 algorithm.

The contents of eToken Virtual are locked at time of provisioning to a specific storage device or to the PC in use. Once locked, neither eToken Virtual nor its contents can be copied to a different storage device.

eToken Virtual enforces password complexity according to organizational policies. To prevent tampering, the policies are digitally signed using the RSA 2048 key.

eToken Virtual is always stored in non-swappable memory to prevent content being written to disk.

Before deleting an eToken Virtual file from the file system, all the private data is replaced by random data and rewritten to disk to ensure no trace remains.


eToken Authentication Icon
  • Lock and Unlock – eToken Virtual limits the number of attempts to access the authenticator, and the locked authenticator can only be unlocked by an administrator password
  • Password Policy – eToken Virtual supports the enforcement of organizational policy for password complexity and rule
  • Full Crypto Functionality using Crypto API - eToken Virtual works in conjunction with eToken PKI Client (5+) supporting full CryptoAPI and PKCS#11
  • Smartcard Login – eToken Virtual supports the ability to provide Smartcard Login to Windows environment in conjunction with eToken Network Logon 5+
  • Device Locking – eToken Virtual can be locked to a specific PC or flash device enforcing the user to use that device only thus maintaining a high level of protection and restricting use on non- authorized devices
  • Full Lifecycle Management – eToken Virtual works with SafeNet Authentication Manager to ensure self service and management capabilities offered so far only with hardware-based authenticator systems


  • Low TCO - more cost-effective than a physical authenticator
  • No downtime – physical authenticators may be misplaced, stolen or broken
  • Convenience – ensures two-factor authentication without an additional hardware device
  • Smooth manageability – software authenticators can be distributed, deployed, managed and recovered easily due to the convenience of software portability
  • Mix and match - Integrated into the mix and match of other SafeNet Authentication products and applications

Technical Specifications



eToken TMS 5+

Security Application

SafeNet Authentication Client 5+

Windows Supported OS

  • Windows 8.1 (32-bit and 64-bit)
  • Windows Server 2012 R
  • All previous Windows versions

Mac Supported OS

  • Mac OS X 10.9 (Mavericks) 
  • All previous Mac OS X versions

Linux Supported OS

Supports latest versions of the following OSs:
  • Red Hat
  • Ubuntu
  • Debian
  • SUSE
  • CentOS 
  • Fedora 
For a full list of supported OSs, see the SafeNet Authentication Client technical specifications.
Back to Top

Contact Us

Thank you for your interest in our products. Please fill out and submit the form to receive more information about Gemalto or to be contacted by a Gemalto specialist.

Your Information

* Email Address:  
* First Name:  
* Last Name:  
* Company Name:  
* Phone:  
* Country:  
* State (US Only):  
* Province (Canada/Australia Only):  

By submitting this form I agree to receive information from Gemalto and its affiliates as described in our Privacy statement.