I just registered a site for WebAuthn test.
I want to delete this FIDO2 credential,
from Apple TPM chipset,
just like the command of Yibikey "ykman fido credentials delete" as.
I cannot find my authentication datas from "KeyChain Access.app"
I know that Yubikey has 25 FIDO2 credentials limit.
Does Apple TPM chipset too?
If i cannot delete this credential, will i get something error in feture use?
First up, TPM isn’t a term we use at Apple. For general background to our security architecture, see Apple Platform Security.
I suspect that you’re actually talking about the Secure Enclave (SE) here. If so, this question doesn’t make sense:
I know that Yubikey has 25 FIDO2 credentials limit.
Does Apple TPM chipset too?
When you protect a key via the SE it doesn’t store the key in the SE. Rather, the SE wraps the key in a way that only the SE can use it. The wrapped key can then be store wherever [1]. So there’s no SE-imposed limit on how many keys you can protect with the SE.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"
[1] Typically that’s the keychain but it’s not required.
First up, TPM isn’t a term we use at Apple. For general background to our security architecture, see Apple Platform Security.
I suspect that you’re actually talking about the Secure Enclave (SE) here. If so, this question doesn’t make sense:
I know that Yubikey has 25 FIDO2 credentials limit.
Does Apple TPM chipset too?
When you protect a key via the SE it doesn’t store the key in the SE. Rather, the SE wraps the key in a way that only the SE can use it. The wrapped key can then be store wherever [1]. So there’s no SE-imposed limit on how many keys you can protect with the SE.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"
[1] Typically that’s the keychain but it’s not required.
I am using Chrome on my mac.
I can’t help you with third-party products.
But I don’t know the answer for Safari either )-: This is more of a user-level question than a code-level question, and you’re more likely to find folks with relevant expertise in Apple Support Communities, run by Apple Support.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"
