MDS Versions

[J B]

Hi all, I'm looking for some help understanding the " authenticatorVersion " and the "firmwareVersion" field of "authenticatorGetInfo" in the MDS file.

1. What exactly is the authenticator version? 
   1. Is this just a value arbitrarily assigned by the manufacturer to identify a product version?
   2. When should it be updated? I see that it must be incremented if a major security issue is resolved, but see no guidance outside that.
   3. Can this use semantic versioning or integers only?
2. What should be done with firmwareVersion?
   1. Does this need to be included in the MDS?
   2. If so which version should be reported if there are devices with multiple firmware versions in circulation?

Thanks!

[rlind...@noknok.com]

>What exactly is the authenticator version? 

See https://fidoalliance.org/specs/mds/fido-metadata-statement-v3.0-ps-20210518.html#dom-metadatastatement-authenticatorversion  - especially the past paragraph.

 

> What should be done with firmwareVersion?

See above.

 

Von: fido...@fidoalliance.org <fido...@fidoalliance.org> Im Auftrag von J B
Gesendet: Freitag, 24. März 2023 18:23
An: FIDO Dev (fido-dev) <fido...@fidoalliance.org>
Betreff: [FIDO-DEV] MDS Versions

 

Hi all, I'm looking for some help understanding the " authenticatorVersion " and the "firmwareVersion" field of "authenticatorGetInfo" in the MDS file.

 

1. Is this just a value arbitrarily assigned by the manufacturer to identify a product version?

1. When should it be updated? I see that it must be incremented if a major security issue is resolved, but see no guidance outside that.
2. Can this use semantic versioning or integers only?

2. What should be done with firmwareVersion?

1. Does this need to be included in the MDS?
2. If so which version should be reported if there are devices with multiple firmware versions in circulation?

 

Thanks!

--
You received this message because you are subscribed to the Google Groups "FIDO Dev (fido-dev)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fido-dev+u...@fidoalliance.org.
To view this discussion on the web visit https://groups.google.com/a/fidoalliance.org/d/msgid/fido-dev/bfa1160c-bd16-4f96-97e1-0d21a1217571n%40fidoalliance.org.