AAL2GenMessageActivation1Ex

Availability: Authentication Suite Server SDK 4.0.2 and later

Service: Digipass Multi-Device Activation

Function prototype

aat_int32 AAL2GenMessageActivation1Ex(TDigipassBlob *DPMAData,
                                      TKernelParms *CallParms,  
                                      aat_ascii *Challenge,  
                                      aat_ascii *StaticVector,
                                      aat_ascii *MessageVector, 
                                      aat_ascii *ActivationVector, 
                                      aat_byte *Fido2PublicKey,
                                      aat_int32 Fido2PublicKeyLength,
                                      aat_ascii *Activation1Message,  
                                      aat_int32 *Activation1MessageLength);

Description

AAL2GenMessageActivation1Ex() overloads AAL2GenMessageActivation1(), exposing additional Fido2PublicKey and Fido2PublicKeyLength parameters to provide device binding support for FIDO2–capable authenticators, such as DIGIPASS FX2.

This function generates an Activation Message 1 from the master activation application (the license), the static vector, the message vector, and the activation vector. The Activation Message 1 allows to activate an authenticator license in the device.

It is only applicable to hardware or software authenticators compliant with the multi-device two-step activation (in context of multi-device licensing).

The Activation Message 1 is used in the multi-device activation process for all authenticator instances of a particular license.

A challenge can be used to optionally generate an Activation Message 1 bound to a particular challenge. Using challenges allows generating different Activation Messages 1 for the same license. With this, it is possible to verify afterwards that the device code returned by the Digipass device corresponds to the license activated with a particular challenge (except for bound FIDO2 devices). This also makes it possible to create a new Activation Message 1 for a given license and to invalidate the previous one. If used, the challenge must contain 16 numeric or hexadecimal characters, and the same challenge will have to be reused afterwards to validate the device code returned by the Digipass device with the AAL2VerifyDeviceCodeEx() function. The AAL2GenerateChallenge() function can be used to generate a challenge with 16 numeric characters.

Parameters

Return codes