The following procedure explains how to enable support for a new FIDO key.


To add a new FIDO key to the system:

  1. Establish a secure connection (SSH) to the Management Console Server.

  2. Navigate to the directory where the FIDO metadata is stored:

    cd /opt/sdo/etc/fido
  3. Place the JSON file for an existing FIDO key. The copy should be named according to the AAGUID value of the new key. For example:

    cp fa2b99dc-9e39-4257-8f92-4a30d23c4118.json <AAGUID of new key>.json

    Note: Verify that the file has the same ownership as all other JSON files in the folder.

  4. Navigate to the directory containing the scripts:

    cd ../../mcbackendsql
  5. Check your Tenant ID: redis-cli hgetall TENANTS 

    Usage: node ./scripts/fidoMetadata.js add <file path> <tenantId> 

    Tenant ID is constant, as specified in Step 6. 

  6. Run the following script:

    node scripts/fidoMetadata.js add ../etc/fido/<AAGUID of new key>.json 11111111-1111-1111-1111-111111111111
  7. On all Authentication Servers and Authentication Servers in the DMZ, run the following command to restart the service:

    systemctl restart sdoweba
Footer - Secret Double Octopus