Please select the desired FIDO credential below to view accepted and approved authenticators for each FIDO type. The articles display tables that provides the FIDO Authenticator Name and AAGUID (Authenticator Attestation Global Unique Identifier) for FIDO FIPS Security Keys, FIDO Security Keys, FIDO Certification L1, and FIDO Synced Passkeys.
The Exostar Approved FIDO Authenticator List is renewed regularly and upon request by Exostar customers and partners.
Approved Authenticators
Please select the desired FIDO credential below to view approved authenticators:
Other Products Supporting FIDO Authenticators
The lowest assurance level MAG allows for FIDO Authenticators for all MAG customers is listed on the table below:
FIDO FIPS Security Keys
FIDO Security Keys
FIDO Security Keys L1
Synced Passkeys with no metadata restrictions as per the FIDO Alliance. That includes the following:
Synced Passkeys with Microsoft platform (Fabric)
Synced Passkeys with Apple iCloud platform (Fabric)
Synced Passkeys with Google Password Manager platform (Fabric)
| Product | FIDO FIPS Security Key allowed | FIDO Security Key allowed | FIDO Security Key L1 allowed | Synced Passkey allowed |
|---|---|---|---|---|
| MAG | Yes. Only Required Applications | Yes. Available to all Applications | No | No |
Extract AAGUID
How to Extract Your AAGUID and Device Details
This steps below explain how to extract the AAGUID and device details from your FIDO/passkey security key. Support uses this information to confirm device compatibility and troubleshoot registration issues.
(We recommend using the following browsers, Chrome or Edge).
You should see a page titled ‘FIDO2 Key Data Explorer.
2. When prompted by your browser, select Security Key.
3. Touch the key or press its button when it blinks.
4. Enter your PIN if prompted.
– Name (example: YubiKey 5 Series with NFC)
– AAGUID (example: d7781e5d-e353-46aa-afe2-3ca49f13332a)
– Supported Protocols
– Certifications (if shown)
Note: You may see ‘Failed or not a Token2 Device’. This is expected for non-Token2 keys and does not indicate an issue.
https://www.myexostar.com/knowledge-base/accepted-passkey-authenticators/
If your device is listed, include that confirmation when contacting Support. If not listed, still provide the AAGUID.
– The AAGUID
– Device name/model
– Screenshot of the tool results
– The error message you encountered during registration
Important Notes: The AAGUID identifies the device type, not you. No personal information is exposed. If a key is partially registered, Support may need to remove it before you can re-register.