# F40 or D12 + browser = 2FA challenge not working

**URL:** https://onlykey.discourse.group/t/f40-or-d12-browser-2fa-challenge-not-working/1314
**Category:** Two Factor Authentication
**Created:** [July 23, 2024, 6:36am UTC](https://onlykey.discourse.group/t/f40-or-d12-browser-2fa-challenge-not-working/1314 "2024-07-23T06:36:52Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![jsmith](https://avatars.discourse-cdn.com/v4/letter/j/df705f/32.png) [@jsmith](https://onlykey.discourse.group/u/jsmith)
#### Post date: [July 23, 2024, 6:36am UTC](https://onlykey.discourse.group/t/f40-or-d12-browser-2fa-challenge-not-working/1314/1 "2024-07-23T06:36:52Z")

</div>

Take for example using ONLYKEY for 2FA ‘hardware key’ with Gmail. On Fedora 38 all is good. The pop up comes up, in Firefox or Chrome, the blue light flashes, push the button, and the challenge is complete.

Not so on Fedora 40, or Debian 12. All browsers tried issue errors.

Note the discussion on the Fedora forums:

> **[Hardware Security Key not being queried from browsers F40](https://discussion.fedoraproject.org/t/hardware-security-key-not-being-queried-from-browsers-f40/126353/19)**
>
> Copying their udev file to the location suggested, followed by the commands they suggested, made no difference. I guess the next step is to ask on their forum.

Is there something obvious I am missing? It has been working for so long, that has been years since I cracked open the manual. Yes, I do update the firmware. Which brings up another point. The app works fine on D12. It is only the challenge that fails. Something about ignoring a return of ‘50’. anyway take a look at the Fedora forum rather than reproducing all that here.

---

<div class="post-metadata">

### Author: ![t11](https://avatars.discourse-cdn.com/v4/letter/t/8e7dd6/32.png) [@t11](https://onlykey.discourse.group/u/t11)
#### Post date: [July 23, 2024, 4:33pm UTC](https://onlykey.discourse.group/t/f40-or-d12-browser-2fa-challenge-not-working/1314/2 "2024-07-23T16:33:26Z")

</div>

Does the OnlyKey app or OnlyKey CLI work?

> **[OnlyKey App | Docs](https://docs.onlykey.io/app.html)**
>
> The OnlyKey App is used for the initial setup and configuration of OnlyKey. Supported on Windows, macOS, and Linux.

> **[OnlyKey Command-Line Utility | Docs](https://docs.onlykey.io/command-line.html)**
>
> The OnlyKey Command-Line Utility is a command line interface to OnlyKey.

If they do then its probably something with the browser, if they don’t then its probably USB/UDEV issue.

---

<div class="post-metadata">

### Author: ![jsmith](https://avatars.discourse-cdn.com/v4/letter/j/df705f/32.png) [@jsmith](https://onlykey.discourse.group/u/jsmith)
#### Post date: [July 24, 2024, 5:17am UTC](https://onlykey.discourse.group/t/f40-or-d12-browser-2fa-challenge-not-working/1314/3 "2024-07-24T05:17:15Z")

</div>

Yes, the app works fine in D12. Is only the challenge that fails.

In Chrome it issues an error to the system journal, something about ignoring a return value of 50.

The challenge does not work in F40 and D12 with any browser tried: Chromium, Chrome, Chrome-developer, Firefox, Brave, and Edge. In F40 flat pack versions were run with all devices available to the app. The Firefox was always run native, and all were run native in D12.

Because it fails for all browsers I have not suspected the problem to be browser specific.

In F38 default distribution it works fine. So for sites currently setup for a challenge negotiation, I run F38 in a VM and access them. it is a workaround. Note in F38 if I update Firefox, it no longer works.
