Apex Flex - applets no longer install

Support
21

ACR1252U arrived today (finally). About to test on my lunch break.

22

I’ve used FDSM (works on macOS), results:

Standard command (non-verbose):

fdsm --card-apps
Using card in ACS ACR1252 Dual Reader
#  appId - name and vendor
cc68e88c - FIDO Security (by VivoKey Technologies)
           Services: install_fido2, install_u2f, destroy

Verbose:

fdsm --card-apps --verbose
Using card in ACS ACR1252 Dual Reader
#  appId - name and vendor
cc68e88c - FIDO Security (by VivoKey Technologies)
           install_fido2 - VivoKey FIDO2 BETA allows you to use your [VivoKey Apex](https://vivokey.com/apex) implant or wearable to authenticate using FIDO2.

**BETA APP**

Our FIDO2 app for Apex is in beta and meant for testing only! It is not fully compliant with FIDO2 standards yet and updates **WILL REQUIRE DELETION OF YOUR KEYS!** If you want a stable FIDO option, consider installing our U2F app instead.

Installation of the FIDO2 app and the VivoKey attestation certificate will take a considerable amount of time. Please continue to hold the reader or smartphone firmly to your Apex until you see the success screen.

Tap confirm to install and configure VivoKey FIDO2.
           install_u2f - VivoKey U2F allows you to use your [VivoKey Apex](https://vivokey.com/apex) implant or wearable to authenticate using FIDO U2F.

Installation of the U2F app and the VivoKey attestation certificate will take a considerable amount of time. Please continue to hold the reader or smartphone firmly to your Apex until you see the success screen.

Tap confirm to install and configure VivoKey U2F.
           destroy - Remove VivoKey FIDO applet from your device and destroy all FIDO authentication key data.

**WARNING** Again, removing VivoKey FIDO will destroy all FIDO authentication keys! Proceed with caution!

Note:
In the Fidesmo app (Android, not using iOS at all anymore), it still lists Fidesmo Link as the only installed app.

Next Steps?
Where to from here? My assumption is running the uninstall command:

fdsm --uninstall cc68e88c

Assuming that’s correct, what else would I need to do to resolve the issue? None of the other commands seem to relate to ‘resetting’ the card itself - any ‘cleanup’ or ‘flushing’ references pertain to Fidesmo.

I’ll wait for confirmation before I take any action though.

23

I think it’s something like

fdsm --run cc68e88c/destroy

That should remove the app. Then;

fdsm --run cc68e88c/install_fido2

That should deploy

24

Were you able to perform applet removal with the /destroy option? What about deploying with /install_fido2?

25

G’day, I’ve had some health and family stuff to deal with recently, haven’t had much of a chance to test but back into it now.

I’ve tried run service and first got this result:

fdsm --run cc68e88c/destroy                
Using card in ACS ACR1252 Dual Reader

FDSM: status code: 400, reason phrase: HTTP/1.1 400 Bad Request

but now consistently just get this one:

fdsm --run cc68e88c/destroy
Using card in ACS ACR1252 Dual Reader

Failed to run service

Attempting the uninstall command (not run service/destroy) results in this:

fdsm --uninstall cc68e88c
Missing required option(s) [app-id]

Don’t understand why it’s stating I haven’t supplied the app-id here.
Where to from here?

26

According to Fidesmo the chip is in a kind of locked state. After speaking to NXP it appears it’s technically recoverable, however Fidesmo does not have a recovery method at this time. Also I don’t think it would be possible to recover this particular chip because it requires a special application to be loaded before locking.

Let’s talk replacement.

3 Likes
27

Ok, will DM you to discuss. I appreciate all the help.

2 Likes