# CodeB Identity Solutions

> Sovereign, on-premises identity and communications platform from Aloaha Limited (Malta). Windows credential provider with NFC / TOTP / PKI smartcard / USB tokens, self-hosted WebRTC video with a browser softphone and voice AI receptionist, OpenID Connect identity provider, browser SSO extension. Runs entirely on the customer's own Windows + IIS with no third-party cloud dependency. Air-gap deployable. GDPR-friendly by design.

*In today's IT landscape, "Plan A" is surrendering your data to Big Tech, accepting vendor lock-in, and relying entirely on the public cloud. When the internet drops, your workforce is locked out. We are CodeB — the sovereign, self-hosted Plan B. We give you back control of your keys, your communications, and your identity — and our systems keep running even when the internet doesn't.*

Recognised by the WIPO Award for Innovative Enterprises (Malta Innovation Awards, 2012) — signed by Francis Gurry, then Director General of the World Intellectual Property Organization — for the interoperable smartcard middleware that underpins the CodeB Credential Provider V2.

## Products

- [CodeB Credential Provider V2](https://www.codeb.io/products.html#cp-v2): Windows credential provider — NFC / TOTP / PKI smartcard / USB tokens; FIPS 140-2 enforceable via Group Policy; works with local accounts, Active Directory, or Microsoft Entra ID.
- [CodeB Wallet](https://www.codeb.io/products.html#eu-wallet): EU Digital Identity Wallet (EUDI) app for Android — also at myeuid.app. Holds Person Identification Data (PID, incl. the German PID), mobile driving licence (mDL), CodeB membership card and other attestations; selective disclosure (e.g. prove over-18 without a date of birth); OpenID4VCI issuance; OpenID4VP (online) and ISO/IEC 18013-5 (in person via QR / NFC / Bluetooth LE) presentation; also an ISO/IEC 18013-5 reader to verify another person's ID or age; PDF signing: a qualified electronic signature (QES) with a signature card over NFC (Maltese eID, D-Trust Card 5.1, German HBA), where the card's certificate is qualified (in closed testing), or an advanced signature (AdES, PAdES baseline B-T with trusted timestamp) via the CodeB signing service. Also a passkey / pseudonym provider (W3C WebAuthn, one key per website, Android 14+), a built-in TOTP authenticator (RFC 6238) for two-step sign-in, and turns the phone into a contactless PKI smartcard for passwordless sign-in at a domain-joined Windows PC (pairs with CodeB Credential Provider V2). Built to eIDAS 2.0 / the EU ARF; SD-JWT VC + ISO mdoc; keys in Android secure hardware; no tracking. Closed beta (not an official or certified wallet). By Aloaha Limited.
- [CodeB Conference](https://www.codeb.io/products.html#conference): Self-hosted WebRTC video meetings + CodeB Phone browser softphone (PWA) + CodeB Voice AI receptionist + EU Wallet (EUDIW / OpenID4VP 1.0) sign-in + BYO SIP/PSTN bridge with per-trunk PAI/RPID + ONVIF camera calls + forensic-grade signed recordings.
- [CodeB Single Sign-On](https://www.codeb.io/products.html#single-sign-on): OpenID Connect identity provider built into CodeB Conference — cookie-free, PKCE-only, RS256 with per-tenant RSA keys, four-role RBAC, verified-in-call badge, federates Nextcloud / WordPress / GitLab / any OIDC relying party.
- [CodeB Web SSO](https://www.codeb.io/products.html#web-sso): Browser extension and native helper that fills usernames, passwords and TOTP codes into web apps, legacy Win32 dialogs, and Java desktop apps. NFC cards can be assigned to an application account (T2med is the reference deployment), so the app signs in only while an assigned card is on the reader and can log off automatically when the card is removed (sends the app's own log-off shortcut, e.g. Ctrl+Shift+Q for T2med).
- [CodeB Admin CLI](https://www.codeb.io/products.html#admin-cli): Unattended AD enrolment, card-to-user binding, credential-token storage, scripted password rotation that keeps the stored soft-token in sync.

## Documentation

- [Support & FAQ](https://www.codeb.io/support.html): 36 answers on supported tokens, Windows deployment, Active Directory enrolment (altSecurityIdentities), NFC-only login on Windows 11, Microsoft Entra ID compatibility, shared-folder vs AD storage, DelayCardRemovalEventSec, T2med card logon and log-off when the card is removed, sharing cards and tokens across computers, why a card revocation may not reach every computer, accented/national characters in card credentials, Cyber Resilience Act readiness, SBOM.
- [Downloads](https://www.codeb.io/downloads.html): CredentialProviderInstaller, SmartLoginLicensing, LinkNFCCard, CodeBAdminCLI — plus editions and system requirements.
- [Industries](https://www.codeb.io/industries.html): Healthcare (including the T2med case study — NFC-card logon and automatic log-off when the card is removed, Ctrl+Shift+Q, with a grace period), financial services, public sector, telecommunications, OT / embedded machines.
- [Share cards & tokens across computers](https://www.codeb.io/sync-cards-across-computers.html): Point every computer at one file share (RemoteDataFolder) to sync NFC cards, TOTP/Bluetooth tokens, certificates and each user's Web SSO logins across the fleet — central enrolment, authorization-checked fleet-wide revocation (only an admin, a computer, or the card's owner can revoke, and a revoked card cannot be copied back), and sign-in that still works when the share is down.
- [Compare](https://www.codeb.io/compare.html): CodeB vs Microsoft Entra ID, Yubico, Duo, OKTA.
- [Why not Entra ID?](https://www.codeb.io/why-not-entra.html): Where centralised identity clouds are a poor fit for sovereign, offline-capable environments.
- [Pricing](https://www.codeb.io/pricing.html): CP V2 €49.99 perpetual per seat or €19.99/year per seat; larger-deployment pricing on request.
- [Contact](https://www.codeb.io/contact.html): Humans answer here.

## User manual

- [Manual overview & quick start](https://www.codeb.io/manual/): What CodeB Credential Provider V2 (formerly Aloaha Smartlogin) is, supported tokens, Edition 1 (codeb_tray.zip) vs Edition 2 (codeb_smartloginhelper.zip), NFC tap-to-logon in five steps.
- [Installation & licensing](https://www.codeb.io/manual/installation.html): CredentialProviderInstaller.exe switches /install, /remove, /upgrade, /checkupgrade, /license, /silentlicense, /cert, /test; shared certificates; silent deployment.
- [Linking tokens & logging on](https://www.codeb.io/manual/linking-tokens.html): Link2FA, LinkTOTP, LinkNFCCard, LinkNFC2AD, LinkX509, LinkMEMStick; storage on the PC, a share or Active Directory (altSecurityIdentities); card-removal lock/log off; logon-screen keywords.
- [CodeB Admin CLI reference](https://www.codeb.io/manual/admin-cli.html): every CodeBAdminCLI.exe command, parameter, alias and exit code, with a PowerShell bulk-enrolment example.
- [Registry settings reference](https://www.codeb.io/manual/registry.html): all documented values under HKLM\SOFTWARE\CodeB (32-bit view: WOW6432Node) with defaults; hiding the Microsoft password tile with the CodeB filter.
- [Troubleshooting & logs](https://www.codeb.io/manual/troubleshooting.html): debug logging (HKLM\SOFTWARE\Aloaha\pdf\debug), log files in C:\Windows\Logs\CodeBProvider, card not detected, Remote Desktop, TOTP time drift, lock-out recovery.
- [Passwordless Windows logon with the phone](https://www.codeb.io/manual/phone-pki-smart-card-passwordless.html): Use an Android phone in the CodeB Wallet as a virtual PKI smart card for Windows' built-in smart-card logon — passwordless, no CodeB software on the PC (Windows GIDS minidriver, Kerberos PKINIT), pairing with the company's AD CS; Android only, phone unlocked.
- [Phone as an NFC logon card (CAP1)](https://www.codeb.io/manual/phone-as-logon-card.html): Tap an Android phone in the CodeB Wallet to log on to Windows through the CodeB tile — offline challenge-response (ISO/IEC 18013-5 mdoc, ECDSA P-256), same card tokens, AD storage, shared accounts and audit as a plastic card; registry SiteId / RequiredGroup / MaxStatusAgeDays / ReaderId under HKLM\SOFTWARE\WOW6432Node\CodeB\CAP1.
- [Card logon for shared Windows accounts](https://www.codeb.io/manual/shared-accounts-several-cards.html): One card per person on a shared Windows account (card tokens or Active Directory), with per-person audit traceability and a one-command shared-password change (CodeBAdminCLI /updatecards).
- [Logon audit events](https://www.codeb.io/manual/logon-audit-events.html): Every CodeB logon/unlock writes event 1100 (success) or 1101 (failure) to the CodeB Credential Provider V2 event log with the card serial, account, method, computer and UTC time — never a password; collectable via Windows Event Forwarding or any SIEM.
- [Central Web SSO server](https://www.codeb.io/manual/web-sso-server.html): Optional IIS add-on that assigns web logins to Active Directory groups and fills them on every member's PC; per-group DPAPI-NG encryption, API-key download, setup wizard, registry WebSSOServer / WebSSOServerApiKey, health check at /api.ashx?action=health.
- [Licence terms](https://www.codeb.io/manual/license.html): CodeB Credential Provider V2 software agreement — perpetual vs annual licensing, optional 20%/year maintenance on perpetual licences, no reverse engineering, intellectual property retained by Aloaha Limited.

## About

- [Home](https://www.codeb.io/): Product ranking and Plan B manifesto.
- [Release notes](https://www.codeb.io/release-notes.html): Recent CodeB releases — hardened fleet-wide card revocation across computers (C122), accented/national characters in card credentials (C120), card-owner sign-in (C119), card & token sync across computers with roaming Web SSO (C112–C118), T2med card logon and log-off (C108–C110).
- [Global Carrier Awards recognition](https://www.codeb.io/global-carrier-awards-2022.html): CodeB by Aloaha shortlisted for Best Blockchain / Security Innovation at Capacity Media's Global Carrier Awards — a finalist in 2022 (alongside Airtel Business, Deutsche Telekom Global Carrier and Globe Teleservices), 2021 and 2020. See also https://www.codeb.io/global-carrier-awards-2021.html and https://www.codeb.io/global-carrier-awards-2020.html.
- [Privacy manifesto](https://www.codeb.io/privacy-manifesto.html): Sovereignty as a design principle.
- [Privacy policy / Impressum](https://www.codeb.io/privacy.html): Operator — Aloaha Limited, Pembroke, Malta.
- [Refund policy](https://www.codeb.io/refund.html)
- [Sister platform: phone.codeb.io](https://phone.codeb.io): CodeB Conference + CodeB Phone + CodeB Voice AI + EU Wallet verifier proof.

## Optional

- [Full AI-consumable content](https://www.codeb.io/llms-full.txt): Deeper prose — deployment patterns, EU CRA readiness details, Admin CLI switches, WIPO recognition, positioning verbatim.
- [XML sitemap](https://www.codeb.io/sitemap.xml)
- [German mirror](https://www.codeb.io/de/): Every page localised in German.
- [CodeB Credential Provider updates channel on WhatsApp](https://whatsapp.com/channel/0029Vb6kgodIHphFahtgoS1r): One-way broadcast — release notes and security advisories only. Support goes via the contact page.
- [WIPO Award certificate (2012)](https://www.codeb.io/assets/img/wipoaward.jpg)