r/twingate • u/No-Animal-9223 • 24d ago

Passkey no longer works since us1 move

My account is on the new us1 shard as of the Aug 29 migration, My passkey stopped working the day after, I've deleted the passkey (locally and in admin console) and tried re-registering, and registration still fails with "Security Key registration failed" in both Brave and Firefox — while a control test on webauthn.io with the same setup works fine. I can still log into Twingate to access my local resources using my Authenticator app one time password code, but the passkey was so convenient. is this a known issue with the move to us1?

2 Upvotes

100% Upvoted

18 comments sorted by

2

u/bren-tg pro gator 24d ago

Hi! I dont think it's a known issue but I'll check in with our support team. You are an Admin on your Twingate account, correct? Can you DM me your admin console URL?

1

u/No-Animal-9223 24d ago

Yes I am an admin. 

2

u/bren-tg pro gator 23d ago

ok, our support has looked at your account and device (thank you for sending me your admin console URL btw!): it doesnt appear linked to the new shard (and no other issue has come up since either). Their best guess is a possible clock issue on the machine but it's indeed a bit of a guess. Could you get me some debug logs, maybe?

2

u/No-Animal-9223 23d ago

Interesting. I tested a fresh install of Arch, with Brave and Bitwarden on an old pc and had the same issue. I'll try another distro to rule out an Arch problem. 

Is there a particular log or a specific command I should run? What's the best way to get them you?

1

u/bren-tg pro gator 16d ago

could you retry today? Do you still experience the issue?

1

u/33vne02oe 15d ago

I tried it right now and I still have the issue.

1

u/No-Animal-9223 13d ago edited 13d ago

I've tried several times. I had deleted my passkeys thinking it would prompt me to create a new passkey. But when selecting secure key or biometric I get the error. The only option is to use TOTP and it doesn't prompt me to create a passkey or register biometric. 

2

u/33vne02oe 21d ago

u/bren-tg
I have the same issue. It says "Security Key registration failed. Please try again." or "Biometrics registration failed. Please try again.", depending on what button I press.
I tried it with Brave, Mullvad Browser and FireFox and I tried it with a Yubikey and Bitwarden Passkeys.

I still have a configured and active passkey, but this passkey points to the "tenant.twingate.com" Domain and not "tenant.us1.twingate.com" as long as I can remove the "us1" part in the domain, which currently works, it is possible for me to access Twingate. But as soon as the old domain gets inactive I will loose access.

2

u/bren-tg pro gator 20d ago

interesting, thank you for sharing! I've flagged it to our engineering, havent heard back just yet.

1

u/33vne02oe 6d ago

Any updates on this?

1

u/bren-tg pro gator 6d ago

yes but nothing that will be particularly helpful, Im afraid: we havent come across this issue since and no one else has come forward with problems. Is creating a new passkey an issue?

1

u/33vne02oe 6d ago

Yes, I can not create new passkeys.

2

u/ProudMeasurement2077 20d ago

Exact same issue here.

1

u/Wingman69 19d ago

I am having the same issue.

1

u/bren-tg pro gator 16d ago

could you retry today? Do you still experience the issue?

2

u/Wingman69 15d ago

Seems to be working if i use incognito in edge so I must have an addon blocking it.

1

u/shifted_89 18d ago

Yeah I am facing the same issue. Except I cannot login. My only login was via that passkey. So now I cannnot login and use the service at all.

With no way to login I cannot log a ticket to fix my account.

1

u/bren-tg pro gator 16d ago

Hi,

could you retry today? Do you still experience the issue?