Unable to Reset (Not allowed)

[kins-dev]

So I've tried Windows, solo-desktop, solo2-cli and even python and I cannot reset my Solo v2 device.

Python seems to give the best information:

>>> import fido2.attestation
>>> import fido2.ctap2
>>> import fido2.hid
>>> import fido2.webauthn
>>> import IPython
>>>
>>> pin = "1234"
>>>
>>> dev = fido2.ctap2.CTAP2(next(fido2.hid.CtapHidDevice.list_devices()))
>>>
>>> client_pin = fido2.ctap2.ClientPin(dev)
>>>
>>> dev_info = dev.get_info()
>>>
>>> N = 3
>>>
>>> print(dev_info)
{<VERSIONS: 0x01>: ['U2F_V2', 'FIDO_2_0'], <EXTENSIONS: 0x02>: ['credProtect', 'hmac-secret'], <AAGUID: 0x03>: b'\x86R\xab\xe9\xfb\xd8H\x10\xa8@\xd6\xfcD*\x8c,', <OPTIONS: 0x04>: {'rk': True, 'up': True, 'credMgmt': True, 'clientPin': True}, <MAX_MSG_SIZE: 0x05>: 7609, <PIN_UV_PROTOCOLS: 0x06>: [1], <MAX_CREDS_IN_LIST: 0x07>: 10, <MAX_CRED_ID_LENGTH: 0x08>: 512}
>>> if dev_info.options.get('clientPin', False):
...     pin_token = client_pin.get_pin_token(pin)
...     print(f"PIN set, token = {pin_token}")
...     print("resetting device to clear PIN")
...     dev.reset()
...
PIN set, token = b'\xe0H\x9d\xa8F\xfc{\x92"\x84\xafM\xe4\ty\x93'
resetting device to clear PIN
Traceback (most recent call last):
  File "<stdin>", line 5, in <module>
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\lib\site-packages\fido2\ctap2\base.py", line 753, in reset
    self.send_cbor(Ctap2.CMD.RESET, event=event, on_keepalive=on_keepalive)
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\lib\site-packages\fido2\ctap2\base.py", line 675, in send_cbor
    raise CtapError(status)
fido2.ctap.CtapError: CTAP error: 0x30 - NOT_ALLOWED

So what am I doing wrong? Shouldn't I be able to reset the device? If not, how would one wipe the device to give to another person?

Note: I initially set the pin in Windows.

[kins-dev]

Okay, so I installed solo1-cli and ran reset there, it gave me this traceback

C:\Users\tester>C:\Users\tester\AppData\Local\Programs\Python\Python310\Scripts\solo.exe key reset
Warning: Your credentials will be lost!!! Do you wish to continue? [y/N]: y
Press the button to confirm -- again, your credentials will be lost!!!
Traceback (most recent call last):
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\lib\runpy.py", line 196, in _run_module_as_main
    return _run_code(code, main_globals, None,
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\lib\runpy.py", line 86, in _run_code
    exec(code, run_globals)
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\Scripts\solo.exe\__main__.py", line 7, in <module>
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\lib\site-packages\click\core.py", line 1130, in __call__
    return self.main(*args, **kwargs)
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\lib\site-packages\click\core.py", line 1055, in main
    rv = self.invoke(ctx)
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\lib\site-packages\click\core.py", line 1657, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\lib\site-packages\click\core.py", line 1657, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\lib\site-packages\click\core.py", line 1404, in invoke
    return ctx.invoke(self.callback, **ctx.params)
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\lib\site-packages\click\core.py", line 760, in invoke
    return __callback(*args, **kwargs)
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\lib\site-packages\solo\cli\key.py", line 302, in reset
    solo.client.find(serial).reset()
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\lib\site-packages\solo\devices\base.py", line 79, in reset
    CTAP2(self.get_current_hid_device()).reset()
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\lib\site-packages\fido2\ctap2\base.py", line 753, in reset
    self.send_cbor(Ctap2.CMD.RESET, event=event, on_keepalive=on_keepalive)
  File "C:\Users\tester\AppData\Local\Programs\Python\Python310\lib\site-packages\fido2\ctap2\base.py", line 675, in send_cbor
    raise CtapError(status)
fido2.ctap.CtapError: CTAP error: 0x30 - NOT_ALLOWED

So I unplugged my USB-A key and plugged in a USB-C key, ran a reset and it worked. After that, I tried my USB-A key and it would reset. Something odd is going on, and people need to be aware of it.

I can't even reproduce the NOT_ALLOWED behavior, I tried by setting a pin in Windows again.

[PedroQ]

For safety reasons, the reset command has a 10-second time window, meaning that it can only be used during the first 10s after plugging in your SoloKey.

[kins-dev]

Okay, so why doesn't the Windows 10 reset work? It asks you to unplug, and plug in as part of the reset.

[kins-dev]

Also, if this is known and desired behavior, why doesn't the reset command tell you this requirement?