1FIDO_DEV_ENABLE_ENTAT... BSD Library Functions Manual FIDO_DEV_ENABLE_ENTAT...
2

NAME

4     fido_dev_enable_entattest, fido_dev_toggle_always_uv,
5     fido_dev_force_pin_change, fido_dev_set_pin_minlen — FIDO 2.1 configura‐
6     tion authenticator API
7

SYNOPSIS

9     #include <fido.h>
10     #include <fido/config.h>
11
12     int
13     fido_dev_enable_entattest(fido_dev_t *dev, const char *pin);
14
15     int
16     fido_dev_toggle_always_uv(fido_dev_t *dev, const char *pin);
17
18     int
19     fido_dev_force_pin_change(fido_dev_t *dev, const char *pin);
20
21     int
22     fido_dev_set_pin_minlen(fido_dev_t *dev, size_t len, const char *pin);
23

DESCRIPTION

25     The functions described in this page allow configuration of a FIDO 2.1
26     authenticator.
27
28     The fido_dev_enable_entattest() function enables the Enterprise
29     Attestation feature on dev.  Enterprise Attestation instructs the authen‐
30     ticator to include uniquely identifying information in subsequent attes‐
31     tation statements.  The pin parameter may be NULL if dev does not have a
32     PIN set.
33
34     The fido_dev_toggle_always_uv() function toggles the “user verification
35     always” feature on dev.  When set, this toggle enforces user verification
36     at the authenticator level for all known credentials.  If dev supports
37     U2F (CTAP1) and the user verification methods supported by the authenti‐
38     cator do not allow protection of U2F credentials, the U2F subsystem will
39     be disabled by the authenticator.  The pin parameter may be NULL if dev
40     does not have a PIN set.
41
42     The fido_dev_force_pin_change() instructs dev to require a PIN change.
43     Subsequent PIN authentication attempts against dev will fail until its
44     PIN is changed.
45
46     The fido_dev_set_pin_minlen() function sets the minimum PIN length of dev
47     to len.  Minimum PIN lengths may only be increased.
48
49     Configuration settings are reflected in the payload returned by the au‐
50     thenticator in response to a fido_dev_get_cbor_info(3) call.
51

RETURN VALUES

53     The error codes returned by fido_dev_enable_entattest(),
54     fido_dev_toggle_always_uv(), fido_dev_force_pin_change(), and
55     fido_dev_set_pin_minlen() are defined in <fido/err.h>.  On success,
56     FIDO_OK is returned.
57

SEE ALSO

59     fido_dev_get_cbor_info(3), fido_dev_reset(3)
60
61BSD                           September 22, 2020                           BSD
Impressum