How to set AAGUID #117

Closed
opened 2025-03-13 23:36:59 +08:00 by Raito00 · 4 comments
Raito00 commented 2025-03-13 23:36:59 +08:00 (Migrated from github.com)

Hello!
I flashed my ESP32 S3 with web ESP32 Flasher - www.picokeys.com/esp32-flasher/

but right now there is: AAGUID: 00000000-0000-0000-0000-000000000000

Image

It is possible set some random AAGUID if just using WEB esp32-flasher and Pico Commissioner on Windows PC ?

Hello! I flashed my ESP32 S3 with web ESP32 Flasher - www.picokeys.com/esp32-flasher/ but right now there is: AAGUID: 00000000-0000-0000-0000-000000000000 ![Image](https://github.com/user-attachments/assets/14f5c219-ac03-4e62-9d30-3395d7022f6f) It is possible set some random AAGUID if just using WEB esp32-flasher and Pico Commissioner on Windows PC ?
polhenarejos commented 2025-03-13 23:44:58 +08:00 (Migrated from github.com)

AAGUID is set at eb857df3e1/src/fido/cbor.c (L47)

If you see all zeros might be because of your browser.

AAGUID is set at https://github.com/polhenarejos/pico-fido/blob/eb857df3e14732976b1b0607c52d107491d7ae7a/src/fido/cbor.c#L47 If you see all zeros might be because of your browser.
Raito00 commented 2025-03-14 14:25:54 +08:00 (Migrated from github.com)

Tested browsers: Chrome, Edge, Mozilla - the same problem
also other webauthn test website
webauthn.bin.coffee/

Image

Authentication working all OK just AAGUID problem

Tested browsers: Chrome, Edge, Mozilla - the same problem also other webauthn test website webauthn.bin.coffee/ ![Image](https://github.com/user-attachments/assets/e846646e-f0c3-4ae4-a2ad-cce40e40c7cc) Authentication working all OK just AAGUID problem
Raito00 commented 2025-03-14 17:06:43 +08:00 (Migrated from github.com)

So problem is when flash with web browser in Windows?

Need try some other way ?

It will work in windows with cmd - esptool.exe ?

So problem is when flash with web browser in Windows? Need try some other way ? It will work in windows with cmd - esptool.exe ?
polhenarejos commented 2025-03-15 02:15:01 +08:00 (Migrated from github.com)

This is how it works.
When Attestation is set to None, AAGUID is replaced by all zeros (more info https://www.w3.org/TR/webauthn-2/#sctn-createCredential).
If you want to see the AAGUID, go to webauthn.io and select Attestation -> Direct.

This is how it works. When Attestation is set to `None`, AAGUID is replaced by all zeros (more info https://www.w3.org/TR/webauthn-2/#sctn-createCredential). If you want to see the AAGUID, go to webauthn.io and select Attestation -> Direct.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dearsky/pico-fido#117