The following procedure explains how to enable support for a new FIDO key.
To add a new FIDO key to the system:
Establish a secure connection (SSH) to the Management Console Server.
Navigate to the directory where the FIDO metadata is stored:
cd /opt/sdo/etc/fido
Place the JSON file for an existing FIDO key. The copy should be named according to the AAGUID value of the new key. For example:
cp fa2b99dc-9e39-4257-8f92-4a30d23c4118.json <AAGUID of new key>.json
Note: Verify that the file has the same ownership as all other JSON files in the folder.
Navigate to the directory containing the scripts:
cd ../../mcbackendsql
Check your Tenant ID: redis-cli hgetall TENANTS
Usage: node ./scripts/fidoMetadata.js add <file path> <tenantId>
Tenant ID is constant, as specified in Step 6.Run the following script:
node scripts/fidoMetadata.js add ../etc/fido/<AAGUID of new key>.json 11111111-1111-1111-1111-111111111111On all Authentication Servers and Authentication Servers in the DMZ, run the following command to restart the service:
systemctl restart sdoweba