Metadata

Vendor Metadata files contain characteristics of authenticators as a Metadata Statement by using a specific syntax. The following formats and their corresponding syntax are supported:

FIDO Metadata Statement

This metadata statement is JSON and follows the format as outlined by the FIDO Alliance.

Yubico Metadata

Yubico have established their own Metadata format (file extension .yubico).

PEM Certificate

PEM certificates (file extension .pem) do not provide any of the user experience advantages that other Metadata statements do. However they can be used to verify an attestation statement.

Upon registration, a device provides the server with its attestation certificate during the attestation ceremony. This certificate can be (optionally with Metadata Enforcement) used to verify the authenticity of the device against a Metadata file.

Parent topic: Concepts