December 22, 2020

FIDO Certified Servers: Updates for Processing Current Metadata Statements

Yuriy Ackermann, Certification Technical Manager, FIDO Alliance

With the advancement and modifications to specifications and program requirements, certification processes and policies will need to be modified from time-to-time. With the recent changes and publication of the FIDO Authenticator Certification program as they relate to V1.4 of the Security Requirements, and the current FIDO Registry of Values specification, we are recommending currently certified servers make necessary changes.

It is strongly recommended that you update your FIDO2 and UAF servers in order to correctly process current and future metadata statements based on the latest updates to the FIDO Registry of Predefined Values.

The spec changes are as follows:

  • All previous USER_VERIFY methods have been post-fixed with _INTERNAL to identify them explicitly as INTERNAL user verification methods 
    • Example: USER_VERIFY_PRESENCE → USER_VERIFY_PRESENCE_INTERNAL.
  • New USER_VERIFY methods have been added: USER_VERIFY_PASSCODE_EXTERNAL (0x00000800) and USER_VERIFY_PATTERN_EXTERNAL (0x00001000)
  • RS1 or ALG_SIGN_RSASSA_PKCSV15_SHA1_RAW (0x0010) IANA ALG_KEY_COSE “alg” identifier has been changed to -65535

Servers should make the following updates to support these changes:

  • FIDO2 servers: Update pubKeyCredParams to contain -65535 alg
  • FIDO2 and UAF servers: Change old user verification methods values to the new post-fixed values. Example: USER_VERIFY_PRESENCE → USER_VERIFY_PRESENCE_INTERNAL
  • FIDO2 and UAF servers: Run the conformance tools to verify support for these changes

The latest FIDO Registry of Predefined Values is now available in JavaScript.

MORE Announcements


FIDO Alliance’s Authenticate Conference Announces 2021 Keynote Speakers and Open Registration

Keynote speakers to include executives from Google, Microsoft, Visa and...

June 30, 2021

Authenticate Virtual Summit: Focus on Europe Recap

By: FIDO Alliance Staff The digital security, privacy and authentication...

June 25, 2021

Major FIDO Updates Launched to Accelerate Global Charge Past Passwords

New FIDO UX Guidelines and Specification Enhancements Enable Consumers and...

June 23, 2021

FIDO2 Enhancements for Enterprise & Complex Security Applications

By David Turner, Director of Standards Development, FIDO Alliance Today...

Download Authn Specs
Sign up for updates!Get news from FIDO Alliance in your inbox.

By submitting this form, you are consenting to receive communications from: FIDO Alliance, 3855 SW 153rd Drive, Beaverton, OR 97003, US, http://www.fidoalliance.org. You can revoke your consent to receive emails at any time by using the unsubscribe link found at the bottom of every email.