Nitrokey FIDO2: Ubuntu 20.04 & Windows 10: still in bootloader mode after update

HI,
I have tried to do an upate with nitropy fido2 update -y, but the key is still in bootloader mode

Command line tool to interact with Nitrokey devices 0.4.23
Nitrokey FIDO2 firmware update tool
Platform: Linux-5.4.0-121-generic-x86_64-with-glibc2.29
System: Linux, is_linux: True
Python: 3.8.10
Saving run log to: /tmp/nitropy.log.4wicjwo3

Starting update procedure for Nitrokey FIDO2…
Found latest firmware: nitrokey-fido2-firmware-2.4.0.json
(published at 2021-05-12T12:24:14Z, under tag 2.4.1.nitrokey)
Current Firmware version: 2.4.1
Downloading latest firmware: 2.4.1.nitrokey (published at 2021-05-12T12:24:14Z)
Firmware saved to /tmp/fido2_firmware.json
Downloaded firmware version: 2.4.1.nitrokey
Key already in bootloader mode, continuing…
erasing firmware…
updated firmware 100%
time: 31.10 s
bootloader is verifying signature…
Trying with e6b14aadb4fc3c4d20fb0d90057c518cb3cce2bab22c2beac97ee1488d3d1589ae8823bec9cf49b5d9aac7b6422d7cf6da55d6097cf81f0c8e6e64275f0895ff
…error!

After update version check…
Congratulations, your key was updated to the latest firmware.
Log saved to: /tmp/nitropy.log.4wicjwo3

dmesg output

[ 9812.221550] usb 2-2.1: New USB device found, idVendor=20a0, idProduct=42b1, bcdDevice= 1.00
[ 9812.221559] usb 2-2.1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 9812.221564] usb 2-2.1: Product: Nitrokey FIDO2 Bootloader 2.4.1
[ 9812.221569] usb 2-2.1: Manufacturer: Nitrokey
[ 9812.221572] usb 2-2.1: SerialNumber: 205738864231
[ 9812.226178] hid-generic 0003:20A0:42B1.001B: hiddev1,hidraw3: USB HID v1.11 Device [Nitrokey Nitrokey FIDO2 Bootloader 2.4.1] on usb-0000:00:13.2-2.1/input0

The support told me this solution:

wget https://github.com/Nitrokey/nitrokey-fido2-firmware/releases/download/2.4.1.nitrokey/nitrokey-fido2-firmware-2.4.1-128kB-app-signed.zip 

unzip nitrokey-fido2-firmware-2.4.1-128kB-app-signed.zip  

nitropy fido2 util program bootloader nitrokey-fido2-firmware-2.4.1-128kB-app-signed.json  

Command line tool to interact with Nitrokey devices 0.4.23
erasing firmware...
updated firmware 100%             
time: 31.09 s
bootloader is verifying signature...
Trying with 26e3a467dcd2d8ce463b7f18d2b21c44495cbd2b3a45d10dbc05c9a26ab09def995c6e494ad4965f9d2d2ecdf1aad046c3ba198a0ffff64b946b1f9bc368cf48
...pass!

Thx :slight_smile:

3 Likes