Thales SafeNet eToken Fusion Bio Meets Versasec vSEC:CMS

Date: 2026-04-08
Author: Tatjana Suhorukova, Business Development Manager

So, what is most interesting about this token? 

For some, it’s the “fusion” of two worlds. This newly designed token puts both FIDO2 and PKI in the palm of your hand, ensuring you never have to compromise on security. 

For others, the true winners here are the Enterprise Features. Let’s dive into why.

A Closer Look at the FIDO Enterprise Capabilities

Our partnership with Thales continues to push the boundaries of what’s possible. These features offer a granular level of administrative control, representing a leap forward from standard consumer-grade hardware:

• Managed Mode: Enhances security and eliminates user error by restricting token management strictly to authorized IT operators.
• Allow-Lists: Ensures the token only interacts with approved corporate applications, preventing unauthorized use.
• Remote Unblocking: Minimizes downtime by allowing IT to unblock locked keys without requiring a disruptive factory reset.
• On Behalf Enrollment Streamlines onboarding by allowing admins to enroll FIDO keys with Identity Providers (IdPs) on behalf of the user,  before the hardware even reaches the user.

The best part? You get all these capabilities, and more, integrated directly into vSEC:CMS or vSEC:CLOUD. Our mission is to provide a level of customization that fits your unique infrastructure. From the air-gapped setups to modern cloud-hosted environments, we are the trusted choice for securing the world’s most sensitive sectors, including healthcare, finance, and defense.

7.3 Release: A Focus on Healthcare 

The recent launch of vSEC:CMS 7.3 brings our integration with the SafeNet eToken Fusion Bio to the forefront. In this release, we are highlighting our healthcare customers and sharing insights from the field.

In hospitals worldwide, medical professionals rely on shared workstations. Whether in a neonatal ward or an intensive care unit, doctors and nurses must move quickly between devices. Historically, securing patient data was a burden on productivity; clinicians had to manually enter credentials or navigate long login lists for every session. The shift to security keys and smart cards has transformed this experience. Today, with the SafeNet eToken Fusion Bio, a nurse can simply insert the token and authenticate in seconds. We are proud to see vSEC:CMS being adopted by leading hospitals and clinics globally to save time where it matters most.

A Quick Preview into The Every Day Management of the Thales SafeNet eToken Fusion Bio

Here’s a quick sneak peak of the simplicity of managing a feature-packed token like the Thales SafeNet eToken Fusion Bio. Two lifecycles are shown in the following video:
– seamless self-issuance by user in vSEC:CMS User (With vSEC:CMS, the Admin could also choose batch issuance, or on-behalf-of-user issuance.)
– centralized token revocation by Admin in vSEC:CMS Agent.

Let’s Build a More Secure Future Together

Curious about how these new features fit into your workflow? We’d love to hear about your organization. Schedule a complimentary strategic call today to explore the benefits of our PKI and FIDO2 solutions. We’re ready to help you support and protect every part of your digital ecosystem.