fido2-manage

fido2-manage is a tool allowing to manage FIDO2.1 devices over USB or NFC, including Passkey (resident keys) management

License

fido2-manage is licensed under the BSD 2-clause license. See the LICENSE file for the full license text.

Supported Platforms

fido2-manage should work on any Linux distribution, but we develop and test using Ubuntu. This library is partially forked from libfido2 to provide a FIDO2.1 key management tool under the Linux platform (we already have a solution for Windows).

Supported devices

FIDO2.1 (PRE or FINAL) keys from any brand can be used. However, with FIDO2.0 keys, no passkey management is possible. As a result, only basic information will be shown with 2.0 devices.

Installation

If you haven't installed Git yet, please do so (sudo apt install git)

git clone https://github.com/Token2/fido2-manage.git

cd fido2-manage

sudo apt install -y zlib1g-dev pkg-config

sudo apt install -y cmake libcbor-dev libpcsclite-dev libssl-dev libudev-dev

rm -rf build && mkdir build && cd build && cmake -USE_PCSC=ON ..

cd ..

make -C build

sudo make -C build install

sudo ldconfig

chmod 755 fido2-manage.sh

Test the shell script

./fido2-manage.sh -list

GUI

The GUI wrapper (gui.py) created with Python3 is included in the package and should be ready for use on the latest Ubuntu releases. The only requirement is the tkinter module that can be installed as follows:

sudo apt install -y python3-tk

To run the script, execute it using Python from the same folder:

python3 gui.py

Automated installation script

You can download the installer bash script to run all commands in one go

wget https://raw.githubusercontent.com/token2/fido2-manage/main/install-fido2-manage.sh

chmod +x ./install-fido2-manage.sh & ./install-fido2-manage.sh

If no errors are shown, then you can launch the GUI:

cd fido2-manage

python2 gui.py