USB devices identified by the operating system as keyboards and connected to the computer before installation of the BadUSB Attack Prevention component are considered authorized after installation of the component.
The application requires authorization of the connected USB device that has been identified by the operating system as a keyboard only if the prompt for USB keyboard authorization is enabled. The user cannot use an unauthorized keyboard until it is authorized.
If the prompt for USB keyboard authorization is disabled, the user can use all connected keyboards. Immediately after the prompt for USB keyboard authorization is enabled, the application shows a prompt for authorization of each unauthorized keyboard that is connected.
To authorize a keyboard:
The <Keyboard name> keyboard authorization window opens with the details of the connected keyboard and a numerical code for its authorization.
If the code has been entered correctly, the application saves the identification parameters – VID/PID of the keyboard and the number of the port to which it has been connected – in the list of authorized keyboards. Authorization does not need to be repeated when the keyboard is reconnected or after the operating system is restarted.
When the authorized keyboard is connected to a different USB port of the computer, the application shows a prompt for authorization of this keyboard again.
If the numerical code has been entered incorrectly, the application generates a new code. Three attempts are available for entering the numerical code. If the numerical code is entered incorrectly three times in a row or the <Keyboard name> keyboard authorization window is closed, the application blocks input from this keyboard. When the keyboard is reconnected or the operating system is restarted, the application prompts the user to perform keyboard authorization again.