Usability of FIDO2 dialog box with Platform Authenticator (TPM backed) AND Security Keys (e.g. YubiKey)

[Kelly Clowers]

When setting up FIDO2 on a WebAuthn enabled site (at least with Firefox (all recent versions)), you will get an OS level popup for the WebAuthn/FIDO2 request.The first one that comes up is for the Windows Hello Platform Authenticator. If this is what you intend to use, all well and good. However if you use an external security key, like YubiKey, NitroKey, etc, you must first click "Cancel", and then at that point you will get another dialog box and be prompted to tap the key. (I believe this does not happen on a system without a TPM, and perhaps not with a pre-2.0 TPM, but of course most recen

Continue reading...