Hello,
Since many years I’ve been using my old solo v1 key as a security token for the Manjaro forum. It works perfectly.
6,5 years of use were not too kind to my old solo v1 key (duct tape is holding it together) so I bought two solo v2 usb-c keys. Which finally became available again.
Now I wanted to register those keys on the forum but the website doesn’t allow me to do so. Neither as a new security token nor as a passkey.
The keys work as a login to my laptop and I have confirmed them with webauthn.io. So my guess would be that the forum doesn’t allow me to register other keys?
The key responds with a color change of the LED when trying to register it on the forum, but I get this response:
In your profile Security tab → Manage Two Factor Auth → Add physical security key → Register - it appears to how you have started.
When you click register the browser should popup a message like
That message may not be obvious or something is blocking it e.g. a message from your password manager - in which case you need to close that message to get to the this one.
Follow the instruction
- Insert the security key you want to register
- Touch it - and that is it
With a clean install of Brave it was possible to add the key as a second factor. With Firefox I didn’t get the popup message you posted. That’s not what I wanted, but it proves the stick is working.
Tried to setup the passkey in Brave but got this message:
I cannot say - I have tried with Firefox as well - it work as expected.
I am thinking that it has something to do with your key.
I am using Yubikeys - no issues - at all.
EDIT:
The keys I use is Yubikey 5C NFC.
Manjaro Linux forum uses Discourse running in a container. We do not maintain any code inside that container - so if the browser responds awkward or in unexpected manners - blame it on discourse
Rereading your comment - there is two methods - both requiring a hardware key
- passkey method
- 2FA key method
In my experience with Discourse - the 2FA key is used to set the passkey - and you can only set a passkey if you have previously registered a 2FA key.
There is the oddity with the Forum - if one passkey exist - a second passkey cannot be created.
I can easily add several physical security keys to the same site and use those to authenticate at Manjaro Forum on different devices, but adding another passkey fails with the message the same message.
I can also use a password manager to store the passkey and use the passkey stored in the password manager to sign into Manjaro Forum on other devices.
One can only speculate why… I have no clues… sorry 
Thanks for the deeper testing!
My choice was Solo2 because the hardware is open source as well as the software. They are made in Europe/Italy, which seems even more important now than it was when I bought the Solo1.
Discours seems to have fixed some bugs with regard to this issue.
This seems to be the main issue I’m encountering. Thank you for confirmation.
Hopefully an update to Discourse might solve the issue.
In the meantime I managed to use the new keys with Github as passkeys, as a SSH passphrase alternative wit sk keys and as a login for my machines.
I’ll keep the Solo2’s and will use them in the future.
Thanks again for testing!
2 Likes
