3639
MariaDBERRORCommonAccess ControlHIGH confidence

FIDO assertion verification failed

Production Risk

Critical — Authentication is denied; potential security event if device was not replaced by the legitimate user.

How to reproduce
trigger — this will error
trigger — this will error
-- User presents wrong FIDO2 device or assertion is invalid

expected output

ERROR 3639 (HY000): FIDO assertion verification failed.

Fix

Re-register FIDO2 device

Re-register FIDO2 device
ALTER USER 'user'@'%' FACTOR 2 UNREGISTER;
ALTER USER 'user'@'%' FACTOR 2 REGISTRATION BEGIN; -- re-register new device

Why this works

Unregisters the old credential and allows a new device registration.

What not to do

Version notes

Sources
Official documentation ↗

MySQL 8.0 — 3639 ER_FIDO_ASSERTION_FAILURE

Content generated with AI assistance and reviewed for accuracy. Found an error? hello@errcodes.dev

← All MariaDB errors