A gentle intro to certification of a cross-platform FIDO2 authenticator
summary
Explains a hands‑on L1 software authenticator certification: builds iOS and Android CTAP 2.1 authenticators, pairs devices over Bluetooth, runs the conformance self-validation tool (demo used deprecated v1.6.34) and clears keys with factory resets, submits 104 tests and achieves a full pass in the demo, then runs live interop against IBM StrongKey, LiveSec and browsers (Chrome/Edge/Firefox). Creates per‑device metadata (md3) and a vendor questionnaire, uses simple demo servers (Heroku/local) and submits paperwork to complete certification.
AI-written summary · about
chapters (10)
- 0:00Introduction to FIDO2 certification
- 1:27Benefits of FIDO certification
- 4:16Certification process overview
- 6:05Focus on L1 authenticator certification
- 7:12Preparation steps before testing
- 10:01Self-conformance validation demo
- 17:32Interoperability testing process
- 23:56Live interop demonstration
- 32:03Interop results and certification submission
- 33:50Final steps and celebration
related talks
22mPasskeys through FIDO: How to write your own client?
56mPasskeys 101: Technical Principles of FIDO
01h 14mWebAuthn: Theory and practice
40mWebAuthn 201: How to FIDO
09mProtecting APIs with DeviceCheck, App Attest & WebAuthn
33mNavigating Passwordless Authentication with FIDO2 & WebAuthn
47mWhy FIDO Security Keys & Webauthn are Awesome
38mBreaking FIDO: Are Exploits in There?