FCP Study Guide 2026

TPM attestation format uses a TPM-generated certifyInfo structure signed by the TPM's attestation key (AIK), with a certificate chain back to the TPM manufacturer CA.

The timeout parameter tells the browser how many milliseconds to wait for the user to interact with their authenticator before the ceremony is aborted, improving UX without leaving open-ended prompts.

FIDO authentication is considered user-friendly because it eliminates password fatigue, which stems from the need to remember complex passwords, change them frequently, and manage multiple credentials. By enabling passwordless logins using familiar gestures like biometrics or PINs, FIDO offers a much simpler, faster, and more intuitive user experience. This convenience encourages stronger security adoption.

FIDO2 is the latest generation of FIDO specifications, building upon its predecessors to enable robust passwordless authentication experiences across various platforms and devices. By integrating with web browsers and operating systems via WebAuthn, FIDO2 allows users to log in securely using biometrics, PINs, or external security keys without ever typing a password. This eliminates the vulnerabilities associated with passwords and improves user convenience.

Identifying and managing stakeholder expectations helps ensure support, resources, and alignment with project goals.

The 'none' attestation format means the authenticator provides no statement about its provenance, so the relying party cannot determine what kind of authenticator was used.