How to test FIDO U2F protocol of a NFC Security Key ?

1,113 views
Skip to first unread message

Deep Patel

unread,
Mar 9, 2021, 1:38:14 PM3/9/21
to FIDO Dev (fido-dev)
Hello,

I have a NFC security key which supports FIDO U2F / FIDO2.
I am using windows 10 (version 20H2) pc and an external NFC reader.
I have tested registration and authentication of this key using 
www.webauthn.io on google chrome and it works !

I believe this tests FIDO2 feature of the security key.
How to also test the FIOD U2F feature of the security key ?
Does Windows 10 support testing FIDO U2F NFC Security Key ?

Thanks.

Philipp Junghannß

unread,
Mar 9, 2021, 2:06:57 PM3/9/21
to Deep Patel, FIDO Dev (fido-dev)
You could try Android if you really want to try ctap1 with u2f style responses, attestations, etc. 

--
You received this message because you are subscribed to the Google Groups "FIDO Dev (fido-dev)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fido-dev+u...@fidoalliance.org.
To view this discussion on the web visit https://groups.google.com/a/fidoalliance.org/d/msgid/fido-dev/9483589d-be2f-4ad2-893f-01f837381948n%40fidoalliance.org.

Deep Patel

unread,
Mar 9, 2021, 2:34:50 PM3/9/21
to Philipp Junghannß, FIDO Dev (fido-dev)
I have a NFC / USB-C Security key that only supports fido u2f protocol.

I tried on android as well as windows 10, but it didn't work. 
--
Deep Patel

Arshad Noor

unread,
Mar 9, 2021, 2:51:06 PM3/9/21
to fido...@fidoalliance.org, patelde...@gmail.com
You can go to https://demo4.strongkey.com and test it with your U2F
Security Key - the StrongKey FIDO Server supports both FIDO2 and U2F
automatically, depending on the attestation sent by the Security Key.

If you are hung up on testing with a U2F Server, our open-source FIDO
Certified U2F Server is still available for download at
https://sourceforge.net/projects/skce.

Arshad Noor
StrongKey

On 3/9/21 11:34 AM, Deep Patel wrote:
> I have a NFC / USB-C Security key that only supports fido u2f protocol.
>
> I tried on android as well as windows 10, but it didn't work.
>
> On Tue, Mar 9, 2021 at 1:06 PM Philipp Junghannß
> <teamhyd...@gmail.com <mailto:teamhyd...@gmail.com>> wrote:
>
> You could try Android if you really want to try ctap1 with u2f style
> responses, attestations, etc.
>
> Deep Patel <patelde...@gmail.com
> <mailto:patelde...@gmail.com>> schrieb am Di., 9. März 2021, 19:38:
>
> Hello,
>
> I have a NFC security key which supports FIDO U2F / FIDO2.
> I am using windows 10 (version 20H2) pc and an external NFC reader.
> I have tested registration and authentication of this key using
> www.webauthn.io <http://www.webauthn.io> on google chrome and it

Deep Patel

unread,
Mar 9, 2021, 5:34:34 PM3/9/21
to Arshad Noor, FIDO Dev (fido-dev)
Thanks for sharing this ! 

I tried to test using the website shared above.

Still the security key doesn't work. Maybe I think it's just a bad key !?

These are what the errors i get :

image.png
image.png

image.png

--
Deep Patel

Arshad Noor

unread,
Mar 9, 2021, 6:46:25 PM3/9/21
to Deep Patel, FIDO Dev (fido-dev)

This looks more like a Windows message than from the web-application. Does this Security Key work only with NFC? If it has a USB connector, have you tried using it with that? Also, have you tried using it with other browsers: Firefox, Chrome, etc.?

Send in the Console log from your browser to see what transpires before you get to this error message.

Arshad

John Bradley

unread,
Mar 9, 2021, 6:54:59 PM3/9/21
to fido...@fidoalliance.org

What key are you using?

Did the webAutn test work?

For a site still using U2f vs webauthn use https://u2f.bin.coffee/

--
You received this message because you are subscribed to the Google Groups "FIDO Dev (fido-dev)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fido-dev+u...@fidoalliance.org.

Deep Patel

unread,
Mar 9, 2021, 7:37:18 PM3/9/21
to John Bradley, FIDO Dev (fido-dev), Arshad Noor
It's USB-C + NFC, but neither the USB nor webauthn works !
  
I got this key from here : 

https://www.amazon.com/gp/product/B089ZYVCV6/ref=ppx_yo_dt_b_asin_title_o05_s01?ie=UTF8&psc=1


It says, it supports both U2F and FIDO2, but this is the response i got from the manufacturer : 

"The security key you have is older version which only supports FIDO U2F"


Windows log service shows this : 

"Event Viwer" -> Application and Services Logs" -> "Microsoft" -> "Windows" -> "WebAuthN" -> "Operational" 


image.png





--
Deep Patel
Reply all
Reply to author
Forward
0 new messages