FIDO2-TOKEN(1) | General Commands Manual | FIDO2-TOKEN(1) |
fido2-token
— find
and manage a FIDO 2 authenticator
fido2-token |
[-CR ] [-d ]
device |
fido2-token |
-D [-de ]
-i id
device |
fido2-token |
-I [-cd ]
[-k rp_id
-i cred_id]
device |
fido2-token |
-L [-der ]
[-k rp_id] [device] |
fido2-token |
-S [-de ]
[-i template_id
-n template_name]
device |
fido2-token |
-V |
fido2-token
manages a FIDO 2
authenticator.
The options are as follows:
-C
device-D
-i
id
device-D
-e
-i
id device-I
device-I
-c
device-I
-k
rp_id
-i
cred_id
device-L
-L
-e
device-L
-r
device-L
-k
rp_id
device-R
fido2-token
will NOT prompt for confirmation.-S
-S
-e
device-S
-e
-i
template_id -n
template_name device-V
-d
fido2-token
to emit debugging output on
stderr.If a
tty is available,
fido2-token
will use it to prompt for PINs.
Otherwise,
stdin is
used.
fido2-token
exits 0 on success and 1 on
error.
The actual user-flow to perform a reset is outside the scope of the FIDO2 specification, and may therefore vary depending on the authenticator. Yubico authenticators do not allow resets after 5 seconds from power-up, and expect a reset to be confirmed by the user through touch within 30 seconds.
An authenticator's path may contain spaces.
Resident credentials are called “discoverable credentials” in FIDO2.1.
September 13, 2019 | Debian |