Create a copy of this page as a sibling and complete it as instructed below. Please do not disturb markers such as  {10{ and }}.

Describe the platform

To ensure a successful test of the authenticator, please follow these steps:

Tester:
@ (name yourself){10{

}}Date:
Use '//' to input date{15{

 

}}Authenticator (or device) vendor:
Yubico, Apple, Dell, HP, Android phone brand...{17{
CryptoTrust
}}Authenticator (or device) model:
YubiKey 5 NFC, iPhone 13, PC model name, MacBook year size, MacBook Air year size, MacBook Pro year size...{20{
OnlyKey
}}OS and its version:
iOS 13, macOS 10.5.8, Windows 10 22H2, Windows 11 22H2, Android 13...{25{

Ubuntu 22

}}Browser and its version:
Chrome 114, Firefox 114...{30{
Firefox 117
}}I registered a PIN/password/finger/face in the authenticator before the session:
Yes or No
(
The situation where you have not previously registered in the authenticator is interesting for checking if the passkey creation will trigger user registration.){35{

Yes (in the key itself, not in Google Chrome)

}}

Capture the platform or browser passkey options

Possible locations:

These are exemplary paths. You need to screenshot the only passkey-related options. Please paste screenshots in or outside this table as suitable:





















Get diagnostics

}}Copy-paste the diagnostic results on the right as text (rows are labelled the same):

Platform authenticator (isUVPAA)


Conditional Mediation (Autofill UI)


CTAP2 support (Firefox)


{40{


Not available

Not defined

Supported

}}

Set repeated settings

It should look like this:

Create passkeys using various settings


Please insert or paste screenshots in this table as suitable, preferably putting the related screenshots in one row (you can place a note beneath an image in the same cell):

Seq1







Seq2 (just new screens)





Seq3 (just new screens)





Seq4 (just new screens)





Test User Verification

Copy-paste the result on the right:
Put Unsupported if there was an error{45{

Credential ID
02DCE1CD83F0E585DAA52BCAFC2E3F8ECE9454F422B2C52326200826E3A819CD78CD0B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5CBBCC8E01

RP ID
webauthntest.identitystandards.io

AAGUID
998F358B-2DD2-4CBE-A43A-E8107438DFB3

Credential Registration Data [more details]
Key Type: EC
Discoverable Credential: true
Attestation Type: none (unverified)
UP=1, UV=0, BE=0, BS=0, AT=1, ED=0, SignCount=26135739

Last Authentication Data [more details]
No authentications

}}

Copy-paste the result on the right:
Put Unsupported if there was an error{50{

Credential ID
030470F37809329777027B19C87A7E287E3A420E822B0D52339EAA12FF6AC9FDA13F0B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5CBACC8E01

RP ID
webauthntest.identitystandards.io

AAGUID
998F358B-2DD2-4CBE-A43A-E8107438DFB3

Credential Registration Data [more details]
Key Type: EC
Discoverable Credential: true
Attestation Type: none (unverified)
UP=1, UV=0, BE=0, BS=0, AT=1, ED=0, SignCount=26135738

Last Authentication Data [more details]
No authentications

}}

Test Attestation

Copy-paste the result on the right:
Put Unsupported if there was an error{55{

Credential ID
4C20BF2FFCE619319A8F85C14DFD1C87F695EFDC0325243A699A1D03151DAE7798500B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5CBCCC8E01

RP ID
webauthntest.identitystandards.io

AAGUID
998F358B-2DD2-4CBE-A43A-E8107438DFB3

Credential Registration Data [more details]
Key Type: EC
Discoverable Credential: true
Attestation Type: packed
UP=1, UV=0, BE=0, BS=0, AT=1, ED=0, SignCount=26135740

Last Authentication Data [more details]
No authentications

If registration worked, click on "Credential Registration Data [more details]" and copy-paste the content of the dialogue:

Require Resident Key
true

Authenticator Data
UP=1, UV=0, BE=0, BS=0, AT=1, ED=0, SignCount=26135740

Authenticator Data in Hex
0B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5C41018ECCBC998F358B2DD24CBEA43AE8107438DFB300464C20BF2FFCE619319A8F85C14DFD1C87F695EFDC0325243A699A1D03151DAE7798500B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5CBCCC8E01A50102032620012158204006B7AF2734896F59EC2868F7B68E8A7CD60F9378958A0AF6704D89D8502FF622582097130C9100C061BD042A0F5CB99C744F19E408590E4C0722F18E788241DE31FC

Public Key
EC key: A50102032620012158204006B7AF2734896F59EC2868F7B68E8A7CD60F9378958A0AF6704D89D8502FF622582097130C9100C061BD042A0F5CB99C744F19E408590E4C0722F18E788241DE31FC

Extension Data
No extension data

Attestation Statement Chain
[{"version":3,"subject":"/C=US/ST=North Carolina/O=CryptoTrust/OU=Authenticator Attestation/CN=crp.to/E=info@crp.to","issuer":"/C=US/ST=North Carolina/O=CryptoTrust/OU=Root CA/CN=crp.to/E=info@crp.to"}]

Attestation Statement in Hex
A363616C67266373696758463044022050EE54A679FD43B83115210B768064637E7AABEB02D4C48C82F8386BCC92679002205B80D2EBF7CEC2C2865B8431FED9E1540C9AE78E8F45FF6282ED8F9AA551559963783563815902DD308202D930820280A003020102020101300A06082A8648CE3D040302307B310B30090603550406130255533117301506035504080C0E4E6F727468204361726F6C696E6131143012060355040A0C0B43727970746F54727573743110300E060355040B0C07526F6F74204341310F300D06035504030C066372702E746F311A301806092A864886F70D010901160B696E666F406372702E746F3020170D3232303232313230313133315A180F32303732303230393230313133315A30818D310B30090603550406130255533117301506035504080C0E4E6F727468204361726F6C696E6131143012060355040A0C0B43727970746F547275737431223020060355040B0C1941757468656E74696361746F72204174746573746174696F6E310F300D06035504030C066372702E746F311A301806092A864886F70D010901160B696E666F406372702E746F3059301306072A8648CE3D020106082A8648CE3D03010703420004F0C70606BB77AB8D81A523135E50871BE0C9E4ED521DEE4C62425E1D4CFF9A79FCDFDCDC4163A20D06A0E3747CC6692198FA383EF4582D485CEA554387DB7ED6A381DF3081DC301D0603551D0E04160414C16DDB03C0DE975740F696D94817BDE125CBB4A43081A20603551D2304819A308197A17FA47D307B310B30090603550406130255533117301506035504080C0E4E6F727468204361726F6C696E6131143012060355040A0C0B43727970746F54727573743110300E060355040B0C07526F6F74204341310F300D06035504030C066372702E746F311A301806092A864886F70D010901160B696E666F406372702E746F8214537A3BBC6720A6FBE3CDE9AA2AA0B804FA56940C30090603551D1304023000300B0603551D0F0404030204F0300A06082A8648CE3D040302034700304402205C3C9E62C4EB26CC11A7CE7218265E9707E0D22C7705A50EE7EB79D2FE07E0A20220475ACCBBEF0D3D782FEC123A15706926C11719913B66AD8A0DCE0BA28D8315B5

}}

Copy-paste the result on the right:
Put Unsupported if there was an error{60{

Credential ID
7B31C5ADF539117E5B59A4FBB7B8A7A8352C92D65124B99F53411E743B48D14E5CE90B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5CBDCC8E01

RP ID
webauthntest.identitystandards.io

AAGUID
998F358B-2DD2-4CBE-A43A-E8107438DFB3

Credential Registration Data [more details]
Key Type: EC
Discoverable Credential: true
Attestation Type: packed
UP=1, UV=0, BE=0, BS=0, AT=1, ED=0, SignCount=26135741

Last Authentication Data [more details]
No authentications

If registration worked, click on "Credential Registration Data [more details]" and copy-paste the content of the dialogue:

Require Resident Key
true

Authenticator Data
UP=1, UV=0, BE=0, BS=0, AT=1, ED=0, SignCount=26135741

Authenticator Data in Hex
0B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5C41018ECCBD998F358B2DD24CBEA43AE8107438DFB300467B31C5ADF539117E5B59A4FBB7B8A7A8352C92D65124B99F53411E743B48D14E5CE90B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5CBDCC8E01A5010203262001215820B618D849370C15022A504B5822AD9F13467FD63695FD4E3B2773E3E781A08BE8225820790FF09772DE5F7980856DBA13D833D9335F194F209CFF95F31C68B5DFBD66CA

Public Key
EC key: A5010203262001215820B618D849370C15022A504B5822AD9F13467FD63695FD4E3B2773E3E781A08BE8225820790FF09772DE5F7980856DBA13D833D9335F194F209CFF95F31C68B5DFBD66CA

Extension Data
No extension data

Attestation Statement Chain
[{"version":3,"subject":"/C=US/ST=North Carolina/O=CryptoTrust/OU=Authenticator Attestation/CN=crp.to/E=info@crp.to","issuer":"/C=US/ST=North Carolina/O=CryptoTrust/OU=Root CA/CN=crp.to/E=info@crp.to"}]

Attestation Statement in Hex
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

}}

Copy-paste the result on the right:
Put Unsupported if there was an error{65{

Credential ID
92847DCE1EE91A9B4416B2DE3468F0D5112136337BB1F926B16C2FFB2AF227A55E020B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5CBECC8E01

RP ID
webauthntest.identitystandards.io

AAGUID
998F358B-2DD2-4CBE-A43A-E8107438DFB3

Credential Registration Data [more details]
Key Type: EC
Discoverable Credential: true
Attestation Type: packed
UP=1, UV=0, BE=0, BS=0, AT=1, ED=0, SignCount=26135742

Last Authentication Data [more details]
No authentications

If registration worked, click on "Credential Registration Data [more details]" and copy-paste the content of the dialogue:

Require Resident Key
true

Authenticator Data
UP=1, UV=0, BE=0, BS=0, AT=1, ED=0, SignCount=26135742

Authenticator Data in Hex
0B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5C41018ECCBE998F358B2DD24CBEA43AE8107438DFB3004692847DCE1EE91A9B4416B2DE3468F0D5112136337BB1F926B16C2FFB2AF227A55E020B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5CBECC8E01A5010203262001215820A3368B8305820DAFC535B3A7F8E43822FC1C9DD33EC8BECCE66F909A8042BA00225820042EEF96BE3F211139BCFF6F6AB66DF9E1447457B5D99E3CE254116D76DACB01

Public Key
EC key: A5010203262001215820A3368B8305820DAFC535B3A7F8E43822FC1C9DD33EC8BECCE66F909A8042BA00225820042EEF96BE3F211139BCFF6F6AB66DF9E1447457B5D99E3CE254116D76DACB01

Extension Data
No extension data

Attestation Statement Chain
[{"version":3,"subject":"/C=US/ST=North Carolina/O=CryptoTrust/OU=Authenticator Attestation/CN=crp.to/E=info@crp.to","issuer":"/C=US/ST=North Carolina/O=CryptoTrust/OU=Root CA/CN=crp.to/E=info@crp.to"}]

Attestation Statement in Hex
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

}}

Copy-paste the result on the right:
Put Unsupported if there was an error{70{

Credential ID
FF546A2FB76D3A6910EBE68FCD9C9491EBE87D97A5E452B3570771375469C35AA1C30B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5CBFCC8E01

RP ID
webauthntest.identitystandards.io

AAGUID
998F358B-2DD2-4CBE-A43A-E8107438DFB3

Credential Registration Data [more details]
Key Type: EC
Discoverable Credential: true
Attestation Type: none (unverified)
UP=1, UV=0, BE=0, BS=0, AT=1, ED=0, SignCount=26135743

Last Authentication Data [more details]
No authentications

}}

Copy-paste the result on the right:
Put Unsupported if there was an error{75{

(skipped)

}}

Test CredProtect Extension

Copy-paste the result on the right:
Put Unsupported if there was an error{80{

Credential ID
6B177208C58B82050E5CFDE865C9082BA841B17D5BF42F14D44B858479728D9E01E70B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5CC0CC8E01

RP ID
webauthntest.identitystandards.io

AAGUID
998F358B-2DD2-4CBE-A43A-E8107438DFB3

Credential Registration Data [more details]
Key Type: EC
Discoverable Credential: true
Attestation Type: packed
UP=1, UV=0, BE=0, BS=0, AT=1, ED=0, SignCount=26135744

Last Authentication Data [more details]
No authentications

}}

Copy-paste the result on the right:
Put Unsupported if there was an error{85{

Credential ID
406E24835315EA3508839AED1F4E7E36E40578C87532C28860A31FAF390AAE802BF50B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5CC1CC8E01

RP ID
webauthntest.identitystandards.io

AAGUID
998F358B-2DD2-4CBE-A43A-E8107438DFB3

Credential Registration Data [more details]
Key Type: EC
Discoverable Credential: true
Attestation Type: packed
UP=1, UV=0, BE=0, BS=0, AT=1, ED=0, SignCount=26135745

Last Authentication Data [more details]
No authentications

}}

Copy-paste the result on the right:
Put Unsupported if there was an error{90{

Credential ID
47F8B63B837D99B73F77A8E3460E22934C9F223A68D95D91FE70E5C21479E141F8390B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5CC2CC8E01

RP ID
webauthntest.identitystandards.io

AAGUID
998F358B-2DD2-4CBE-A43A-E8107438DFB3

Credential Registration Data [more details]
Key Type: EC
Discoverable Credential: true
Attestation Type: packed
UP=1, UV=0, BE=0, BS=0, AT=1, ED=0, SignCount=26135746

Last Authentication Data [more details]
No authentications

}}

Copy-paste the result on the right:
Put Unsupported if there was an error{95{

(skipped)

}}

Test cryptography

Copy-paste the result on the right:
Put Unsupported if there was an error{100{

Credential ID
FDA8F93D3A756DD5B1129269B45FD245EDFDC3851242C683ECB8E91E7A8DA73CF4910B997CCCEB3AEB29C55C94A894B11CF01A24B4C8AE706F328CC2EA8CEBC4AD5CC3CC8E01

RP ID
webauthntest.identitystandards.io

AAGUID
998F358B-2DD2-4CBE-A43A-E8107438DFB3

Credential Registration Data [more details]
Key Type: EC
Discoverable Credential: true
Attestation Type: packed
UP=1, UV=0, BE=0, BS=0, AT=1, ED=0, SignCount=26135747

Last Authentication Data [more details]
No authentications

}}

Copy-paste the result on the right:
Put Unsupported if there was an error{105{

Unsupported

}}

Copy-paste the result on the right:
Put Unsupported if there was an error{110{

Unsupported

}}

Copy-paste the result on the right:
Put Unsupported if there was an error{115{

Unsupported

}}

Copy-paste the result on the right:
Put Unsupported if there was an error{120{

Unsupported

}}

Conclusion

Do you have any additional observations or comments related to the entire procedure:{125{

Although I have a PIN on set (on the numeric keyboard on the key itself), the web browser does not ask for it. The key therefore ignores the User verification flag (in Firefox, which does not trigger the PIN creation).

}}

Thank you!