secure connect failure about securedeviceconnectionprotocol

[prafulla-git]

After using the correct Model certificate while sending connect response, error changed to 0x8007001F, error description is generic, could you let us know in which scenario this error will be generated

[AlphaLee]

Hi prafulla-git,

 I'am confused about the model certificate usage, can you explain for me:
 1. new SDK add IntermediateCA1 and IntermediateCA2, device should preserve and transmit these to driver?
 2. root CA aleady exist in Windows?

thank you!

[prafulla-git]

Hi, Are you asking about how the test certificate installed on win 10?, if so, Test certificate is already installed on win 10 when you enable Test signing mode on win 10. In case if are asking about how to generate intermediate CA1/CA2 from test certificate, it can be converted to hex format from the installed certificate on win10 when test signing is enabled. Thanks, Prafulla

On Wed, 5 Apr 2023 at 6:44 PM, Yaduvir Singh ***@***.***> wrote: @prafulla-git <https://github.com/prafulla-git> How you were able to generate Test certificates from Test vectors and install on windows 10? — Reply to this email directly, view it on GitHub <#17 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AKHXRSMKMI6UMGB5HJAAWK3W7VV37ANCNFSM4F4QEZOQ> . You are receiving this because you were mentioned.Message ID: ***@***.***>

-- Thanks, Prafulla Kota 9866544810

[yaduvir111]

I have test signing mode enabled, But I don't see any certificate in the root or intermediate CA named "Secure Bio Sensor". I am getting 0x80070057(invalid argument) just like yours on secure connect. I return 3359 Bytes ( Model 846Bytes, ICA1 1025 Bytes, ICA2 1114 Bytes) to the sensor connect response. But i don't see an installed certificate in Windows 10 machine. Do you see "Secure Bio Sensor" certificate pre installed on test signing mode on like below?. I dont have this certificate installed but i got a picture from other bug filled

[prafulla-git]

Hi, I also didn't see this certificate under certmgr, But a similar certificate is generated by us and signed by MSFT to work with production model keys, when i open the .cer file we have generated, it displays in a similar way. I am yet to recollect if there was a certificate visible like this for the MSFT Test certificate. Are you using the keys provided at below link for Test certificate? https://github.com/Microsoft/SecureDeviceConnectionProtocol/wiki/Secure-Device-Connection-Protocol I hope you have enabled secure biometrics via registry entries and post enabling that, you should see "bioiso.exe" is running on the system. Thanks, Prafulla Kota

…

On Wed, Apr 5, 2023 at 10:42 PM Yaduvir Singh ***@***.***> wrote: I have test signing mode enabled, But I don't see any certificate in the root or intermediate CA named "Secure Bio Sensor". I am getting 0x80070057(invalid argument) just like yours on secure connect. I return 3359 Bytes ( Model 846Bytes, ICA1 1025 Bytes, ICA2 1114 Bytes) to the sensor connect response. But i don't see an installed certificate in Windows 10 machine. Do you see "Secure Bio Sensor" certificate pre installed on test signing mode on like below?. I dont have this certificate installed but i got a picture from other bug filled [image: image] <https://user-images.githubusercontent.com/104233060/230154281-194ba0ae-e572-48ff-b00a-c8b44f8ccb14.png> — Reply to this email directly, view it on GitHub <#17 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AKHXRSNHAJFONFGILFHLL3DW7WRXBANCNFSM4F4QEZOQ> . You are receiving this because you were mentioned.Message ID: ***@***.***>

-- Thanks, Prafulla Kota 9866544810

[prafulla-git]

I had forgotten to close it during Oct 2018, Closing it now.