FIDO2-TOKEN(1) General Commands Manual FIDO2-TOKEN(1) (NAME) fido2-token - FIDO 2.0 / CTAP 2.0 (SYNOPSIS) fido2-token -C [-d] device fido2-token -D [-d] -i cred_id device fido2-token -D -b [-d] -k key_path device fido2-token -D -b [-d] -n rp_id [-i cred_id] device fido2-token -D -e [-d] -i template_id device fido2-token -D -u [-d] device fido2-token -G -b [-d] -k key_path blob_path device fido2-token -G -b [-d] -n rp_id [-i cred_id] blob_path device fido2-token -G -t ppuat_path device fido2-token -I [-cd] [-k rp_id -i cred_id] [-t ppuat_path] device fido2-token -L [-bder] [-k rp_id] [device] fido2-token -R [-d] device fido2-token -S [-adefu] device fido2-token -S [-d] -i template_id -n template_name device fido2-token -S [-d] -l pin_length device fido2-token -S -b [-d] -k key_path blob_path device fido2-token -S -b [-d] -n rp_id [-i cred_id] blob_path device fido2-token -S -c [-d] -i cred_id -k user_id -n name -p display_name device fido2-token -S -m rp_id device fido2-token -V (DESCRIPTION) fido2-token FIDO2 . : -C device (PIN) device . . -D -i id device (resident credential) id device id base64 . . -D -b -k key_path device "largeBlob" key_path device key_path AES-256 GCM base64 blob . . -D -b -n rp_id [-i cred_id] device "largeBlob" rp_id device . rp_id device -i cred_id cred_id blob base64 . . -D -e -i id device id device id base64 . . -D -u device CTAP 2.1 " (user verification always)" device . -G -t ppuat_path device PIN/UV CTAP 2.2 device ppuat_path . -G -b -k key_path blob_path device "largeBlob" CTAP 2.1 key_path device key_path AES-256 GCM base64 blob . blob blob_path . -G -b -n rp_id [-i cred_id] blob_path device "largeBlob" CTAP 2.1 rp_id device . rp_id device -i cred_id cred_id blob base64 . blob blob_path . . -I device [-t ppuat_path] device . -t ppuat_path fido2-token PIN/UV CTAP 2.2 . -I -c device (resident credential) device . . -I -k rp_id -i cred_id device ( base64) ( PEM) rp_id cred_id rp_id (relying party id) UTF-8 cred_id base64 . . -L . -L -b device "largeBlobs" CTAP 2.1 device . . -L -e device device . . -L -r device (relying parties) device . . -L -k rp_id device rp_id device . . -R (reset) device . fido2-token . -S device . . -S -a device (Enterprise Attestation) CTAP 2.1 device . -S -b -k key_path blob_path device "largeBlob" CTAP 2.1 key_path device key_path AES-256 GCM base64 blob . blob blob_path . . -S -b -n rp_id [-i cred_id] blob_path device "largeBlob" CTAP 2.1 rp_id device . blob blob_path . rp_id device -i cred_id cred_id blob base64 . . -S -c -i cred_id -k user_id -n name -p display_name device name display_name cred_id user_id name display_name UTF-8 cred_id user_id blob base64 . . -S -e device device . . -S -e -i template_id -n template_name device (friendly name) template_id device template_name template_id base64 template_name UTF-8 . . -S -f device (PIN) device . . -S -l pin_length device device pin_length . . -S -m rp_id device device . . . -S -u device CTAP 2.1 " (user verification always)" device . -V . -d fido2-token (debugging) stderr . tty fido2-token . stdin . fido2-token 0 1 . (SEE ALSO) fido2-assert(1), fido2-cred(1) (CAVEATS) (reset) FIDO2 . Yubico . . (resident credentials) CTAP 2.1 "discoverable credentials" ( ) . CTAP 2.1 "user verification always" ( ) . Linux 6.12.107+deb13-amd64 March 9, 2026 Linux 6.12.107+deb13-amd64