# FIDO2 Level2 or Level3 support **URL:** \ **Category:** Feature Requests\ **Created:** [January 18, 2023, 11:40pm UTC](https://onlykey.discourse.group/t/fido2-level2-or-level3-support/970 "2023-01-18T23:40:57Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![kwinz](https://avatars.discourse-cdn.com/v4/letter/k/65b543/32.png) [@kwinz](https://onlykey.discourse.group/u/kwinz)\ **Post date:** [January 18, 2023, 11:40pm UTC](https://onlykey.discourse.group/t/fido2-level2-or-level3-support/970/1 "2023-01-18T23:40:57Z")
Hi! My local citizen card / egovernment system allows me to use FIDO2 tokens as a second factor. But it is required that the FIDO2 token is at least Level2 certified. As far as I know the current Onlykey does not have Level2 certification so it won’t let me add it. According to this overview Level2 certification seems possible: > **[Authenticator Level 2 - FIDO Alliance](https://fidoalliance.org/certification/authenticator-certification-levels/authenticator-level-2/)** > > Authenticator Certification Level 2 (L2) evaluates FIDO Authenticator protection against basic, scalable attacks. For L2, the Authenticator is required to conform to a solution included in FIDO Allowed Restricted Operating Environment... > **[Certified Authenticator Levels - FIDO Alliance](https://fidoalliance.org/certification/authenticator-certification-levels/)** > > The Authenticator Certification Levels introduce Authenticator Security Requirements to the FIDO Certification Program. Authenticators must be certified to at least Authenticator Certification Level 1 (L1) for UAF, U2F, and FIDO2... Mainly Level2 implementations can’t be software only and have to support attestation. Could you add this feature? Is this “just” a matter of preparing and applying including paying the 7500 USD certification fee? Or are there technical roadblocks why Onlykey couldn’t get this certification? Appreciate it! ---
**Author:** ![kwinz](https://avatars.discourse-cdn.com/v4/letter/k/65b543/32.png) [@kwinz](https://onlykey.discourse.group/u/kwinz)\ **Post date:** [January 18, 2023, 11:47pm UTC](https://onlykey.discourse.group/t/fido2-level2-or-level3-support/970/2 "2023-01-18T23:47:13Z")
For reference: [Idem Key – USB/NFC Security Key](https://gotrustid.com/products-idem-key/) is given by the government as an example of a FIDO2 Level2 certified token that will work with egovernment apps. It carrys the [L2 logo](https://gotrustid.com/wp-content/uploads/2022/07/Frame-17-853x1024.png). ---
**Author:** ![t11](https://avatars.discourse-cdn.com/v4/letter/t/8e7dd6/32.png) [@t11](https://onlykey.discourse.group/u/t11)\ **Post date:** [January 19, 2023, 2:46pm UTC](https://onlykey.discourse.group/t/fido2-level2-or-level3-support/970/3 "2023-01-19T14:46:01Z")
No OnlyKey is FIDO2 L1 certified so it would not meet the L2 requirement. ---
**Author:** ![kwinz](https://avatars.discourse-cdn.com/v4/letter/k/65b543/32.png) [@kwinz](https://onlykey.discourse.group/u/kwinz)\ **Post date:** [January 19, 2023, 3:46pm UTC](https://onlykey.discourse.group/t/fido2-level2-or-level3-support/970/4 "2023-01-19T15:46:10Z")
I was assuming th the L2 certification has not been done because it is relatively new, not because some requirements are not met. Can you elaborate? Why did you get L1 and not L2 certification? Which L2 requirement does the OnlyKey not meet? ---
**Author:** ![t11](https://avatars.discourse-cdn.com/v4/letter/t/8e7dd6/32.png) [@t11](https://onlykey.discourse.group/u/t11)\ **Post date:** [January 19, 2023, 4:38pm UTC](https://onlykey.discourse.group/t/fido2-level2-or-level3-support/970/5 "2023-01-19T16:38:51Z")
There are several factors, its not really that the OnlyKey does not meet L2 requirements the certification costs and effort increase with each level. Currently I am not aware of many applications that require L2 certification, there would need to be a cost/benefit to pursuing L2 certification. ---
**Author:** ![vchrizz](https://avatars.discourse-cdn.com/v4/letter/v/8e7dd6/32.png) [@vchrizz](https://onlykey.discourse.group/u/vchrizz)\ **Post date:** [January 20, 2023, 12:17am UTC](https://onlykey.discourse.group/t/fido2-level2-or-level3-support/970/6 "2023-01-20T00:17:20Z")
#### Why FIDO Level 2 Certification Matters [https://www.trustkeysolutions.com/blog/why-fido-level-2-certification-matters/](https://www.trustkeysolutions.com/blog/why-fido-level-2-certification-matters/) #### Example of an application: > **[Biometrics authentication into Citrix Workspace with TrustKey FIDO2 Security...](https://www.citrix.com/blogs/2021/11/04/biometrics-authentication-into-citrix-workspace-with-trustkey-fido2-security-keys/)** ---
**Author:** ![vchrizz](https://avatars.discourse-cdn.com/v4/letter/v/8e7dd6/32.png) [@vchrizz](https://onlykey.discourse.group/u/vchrizz)\ **Post date:** [January 20, 2023, 12:18am UTC](https://onlykey.discourse.group/t/fido2-level2-or-level3-support/970/7 "2023-01-20T00:18:13Z")
#### Examples for Applications: [https://www.businesswire.com/news/home/20220726005092/en/](https://www.businesswire.com/news/home/20220726005092/en/) [https://www.einnews.com/pr\_news/601770703/gotrust-idem-key-is-the-only-listed-fido2-security-key-for-id-austria](https://www.einnews.com/pr_news/601770703/gotrust-idem-key-is-the-only-listed-fido2-security-key-for-id-austria) ---
**Author:** ![kwinz](https://avatars.discourse-cdn.com/v4/letter/k/65b543/32.png) [@kwinz](https://onlykey.discourse.group/u/kwinz)\ **Post date:** [June 13, 2023, 11:24am UTC](https://onlykey.discourse.group/t/fido2-level2-or-level3-support/970/8 "2023-06-13T11:24:38Z")
A certain company that starts with Y has recently certified their whole lineup to Level 2 standard. Any news on getting OnlyKey Level 2 certified?