How can i delete a website from TPM

Question

jyxjjj OP

Created Mar ’22

Replies 2

Boosts 0

Views 1.5k

Participants 2

I just registered a site for WebAuthn test.

I want to delete this FIDO2 credential,

from Apple TPM chipset,

just like the command of Yibikey "ykman fido credentials delete" as.

I cannot find my authentication datas from "KeyChain Access.app"

I know that Yubikey has 25 FIDO2 credentials limit.

Does Apple TPM chipset too?

If i cannot delete this credential, will i get something error in feture use?

Answered by DTS Engineer in 706864022

First up, TPM isn’t a term we use at Apple. For general background to our security architecture, see Apple Platform Security.

I suspect that you’re actually talking about the Secure Enclave (SE) here. If so, this question doesn’t make sense:

I know that Yubikey has 25 FIDO2 credentials limit.

Does Apple TPM chipset too?

When you protect a key via the SE it doesn’t store the key in the SE. Rather, the SE wraps the key in a way that only the SE can use it. The wrapped key can then be store wherever [1]. So there’s no SE-imposed limit on how many keys you can protect with the SE.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] Typically that’s the keychain but it’s not required.

Boost

Answer 1

DTS Engineer OP

Apple

Mar ’22

Accepted Answer

First up, TPM isn’t a term we use at Apple. For general background to our security architecture, see Apple Platform Security.

I suspect that you’re actually talking about the Secure Enclave (SE) here. If so, this question doesn’t make sense:

I know that Yubikey has 25 FIDO2 credentials limit.

Does Apple TPM chipset too?

When you protect a key via the SE it doesn’t store the key in the SE. Rather, the SE wraps the key in a way that only the SE can use it. The wrapped key can then be store wherever [1]. So there’s no SE-imposed limit on how many keys you can protect with the SE.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] Typically that’s the keychain but it’s not required.

0

Answer 2

DTS Engineer OP

Apple

Mar ’22

I am using Chrome on my mac.

I can’t help you with third-party products.

But I don’t know the answer for Safari either )-: This is more of a user-level question than a code-level question, and you’re more likely to find folks with relevant expertise in Apple Support Communities, run by Apple Support.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0