Initial Required Configuration

Configuration

passkeyd can be configured via /etc/passkeyd.conf.

Configure authroized user

Only the user's UUID mentioned in the passkeyd configuration file can authorize the passkeyd request.

Run the command id -u, then modify the GUI_UID value in /etc/passkeyd.conf to match the GUI_UID returned by id -u. It is usually 1000.

- GUI_UID=1000   # The UID of the user allowed to run GUI components (typically a normal desktop user)
+ GUI_UID=PLACE_YOUR_UID_HERE # The UID of the user allowed to run GUI components (typically a normal desktop user)

Configure cryptography Mode

There are two modes for cryptography:

• TPM (Highly recommended ): Fancy math is done at the hardware level (no one can sneak in, no one can access private data)
• Virtual => Fancy math is done at the software level, without hardware support.

You may execute the command cat /sys/class/tpm/tpm0/device/description 2> /dev/null. If this returns nothing, either you do not have a TPM or it is not functioning properly. It should return “TPM 2.0 Device,” as passkeyd is compatible with TPM 2.0.

You should switch to virtual cryptography only if you do not have a TPM or if your TPM is an older version via /etc/passkeyd.conf. Otherwise, leave it set to yes.

USE_TPM_CRYPTOGRAPHY=yes # Can either be "yes" or "no"