fido2.ctap.CtapError: CTAP error: 0x32 - PIN_BLOCKED

1

My OnlyKey stop working

Looks like my pin is blocked, how to unlock?

> onlykey-cli credential ls
PIN: 
Traceback (most recent call last):
  File "/home/unclestephen/.local/bin/onlykey-cli", line 8, in <module>
    sys.exit(main())
             ^^^^^^
  File "/home/unclestephen/.local/lib/python3.11/site-packages/onlykey/cli.py", line 1196, in main
    cli()
  File "/home/unclestephen/.local/lib/python3.11/site-packages/onlykey/cli.py", line 520, in cli
    solo.cli.key()
  File "/home/unclestephen/.local/lib/python3.11/site-packages/click/core.py", line 1157, in __call__
    return self.main(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/unclestephen/.local/lib/python3.11/site-packages/click/core.py", line 1078, in main
    rv = self.invoke(ctx)
         ^^^^^^^^^^^^^^^^
  File "/home/unclestephen/.local/lib/python3.11/site-packages/click/core.py", line 1688, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/unclestephen/.local/lib/python3.11/site-packages/click/core.py", line 1688, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/unclestephen/.local/lib/python3.11/site-packages/click/core.py", line 1434, in invoke
    return ctx.invoke(self.callback, **ctx.params)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/unclestephen/.local/lib/python3.11/site-packages/click/core.py", line 783, in invoke
    return __callback(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/unclestephen/.local/lib/python3.11/site-packages/solo/cli/key.py", line 553, in cred_ls
    cm = client.cred_mgmt(pin)
         ^^^^^^^^^^^^^^^^^^^^^
  File "/home/unclestephen/.local/lib/python3.11/site-packages/solo/devices/base.py", line 116, in cred_mgmt
    token = client.client_pin.get_pin_token(pin)
            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/unclestephen/.local/lib/python3.11/site-packages/fido2/ctap2/pin.py", line 260, in get_pin_token
    resp = self.ctap.client_pin(
           ^^^^^^^^^^^^^^^^^^^^^
  File "/home/unclestephen/.local/lib/python3.11/site-packages/fido2/ctap2/base.py", line 728, in client_pin
    return self.send_cbor(
           ^^^^^^^^^^^^^^^
  File "/home/unclestephen/.local/lib/python3.11/site-packages/fido2/ctap2/base.py", line 675, in send_cbor
    raise CtapError(status)
fido2.ctap.CtapError: CTAP error: 0x32 - PIN_BLOCKED
2

Have you set a FIDO2 PIN?
FIDO2 != OnlyKey PIN and is entered on the keyboard.

More info:
ssh-with-fido2-how-to-set-up-which-pin-code
cant-setup-onlykey-as-2fa-device-with-ssh-keys

I don’t know which disti you use.
You may have to reinstall onlykey-cli & onlykey-agent according to PEP 668.