I’m using Nitrokey 3C NFC. I cannot add a passkey for this forum using it. It works for other sites.
I try to add the passkey, I get the prompt to touch my Nitrokey, I do, I’m asked for the pin, I enter it, touch the Nitrokey again, and then I get this error:
“The passkey registration process either timed out, was cancelled or is not allowed.”
Adding the Nitrokey for 2FA works in the security configuration, but then it fails when using it to log in.
Has anyone else ran into this problem?
@gasull I don’t know if nitrokey has TOTP but that could work as a temporary workaround. I have this on some of my yubikeys when websites don’t support other auth options.
Yes, that’s what I did. Thanks.
Have same problem with Yubikey 5c NFC.
Same error:
“The passkey registration process either timed out, was cancelled or is not allowed.”
It works with CachyOS forum and PrivacyGuides forum but not here. Both of them uses Discourse as here.
What strange, passkey is saved on Yubikey but not on forum engine.
@KitsuneNoBaka and @gasull - If you still want to use passkeys as intended, you may want to try again. Today, I registered 3 passkeys (Yubikey 5C NFC and Yubikey 5 NFC using firmware 5.18, which was the latest as of last month) for this forum without any problems. I used Chromium as my browser and directly attached the keys to a disposable vm. I’ve had mixed success with Firefox. I’ve also used CTAP-proxy to limit what different qubes can do regarding key access, etc., in conjunction with the Qubes Policy Editor (30-user-ctapproxy.policy file).
In my limited experience, there has been a LOT of trial and error with the entire passkey setup, both Qubes-related and non-Qubes-related. Passkeys work great on some sites, while only serving as a potentially more secure TOTP (depending on one’s existing setup) on others. Over time, I’m sure that things will get more consistent and full-featured.