If a computer is used by several people, it is essential that each user has their own local user account.
MFA login cannot be set up with a technical account.
Important information:
Unfortunately, the Passkey web application does not currently support the Linux system.
To set up Passkey, we recommend using KeePassXC.
To perform the setup, you need at least Linux Ubuntu 24.04 LTS and KeePassXC version 2.7.7. The instructions refer to Linux Ubuntu 24.04 LTS with KeePassXC 2.7.9. The procedure may differ for other Linux distributions..
Als Browser empfehlen wir:
Google Chrome for Linux
Mozilla Firefox from version 122 onwards
Install KeePassXC for the desktop
You can install KeePassXC directly from the Application Center.
Alternatively, KeePassXC can be installed manually:
The next step is to create a new database in the program.
Open the menu in the installed KeePassXC desktop version. From there, select New Database via the Database option. Enter the desired database name and click Next. Then click through the next steps by confirming with Next.
Now create a password that is rated at least as good or secure and confirm with Done. Finally, save the new database in a location of your choice.
Figure 1: Creating a database in the KeepassXC app
Note!
The password you set up to unlock KeePassXC should not be the same password you use for the BA number or contain parts of the BA number.
Figure 2: Enable browser integration, General menu
Figure 3: Enable browser integration, Advanced
Next, open the Tools option in the menu. Go to Settings, then Browser Integration, and then Activate Browser Integration. Now select the browser you want to use (we recommend Google Chrome) and activate the following options in the General tab:
Request correspondence if the database is locked
Compare URL scheme
In the Advanced tab, select the following items:
Also display extended attributes beginning with “KPH:”
Allow use of localhost with passkeys
Update native messaging manifest at startup
Finally, confirm with OK.
Keep KeepassXC open, do not close it!
Passkey setup with Chrome web browser
Figure 4: Google Web Store in the extensions
Open Chrome Browser and click on the three dots in the top right corner. In the menu that appears, click on the Extensions option and then on Manage Extensions.
Click here on the Chrome Web Store. A new page will open. Enter KeePassXC in the search field.
Click on KeePassXC Browser and then click Add.
The Chrome Web Store browser window can be closed again.
Figure 5: Adding the KeePassXC browser extension
Figure 6: KeePassXC browser Show details
Figure 7: KeePassXC browser options
KeePassXC Browser will now appear under Extensions. Click here for details.
In Settings, scroll down to the Passkey section. Here, check the boxes for Enable Passkeys and Enable Passkeys Fallback.
Figure 9: Connecting the KeePassXC browser extension to the KeePassXC app
Next, click on the puzzle icon (extensions) in the upper right corner and then on KeePassXC Browser. In the new dialog window, click on Connect.
Passkey setup with Firefox web browser
The next step is to activate the web browser extensions.
In the upper right corner of the web browser, you will find three lines. After opening them, follow the Extensions option. Then open Manage Extensions so that the KeePass Browser option appears. Add it to the web browser via Add and confirm in the window that opens with Add Extension.
Figure 10: KeePassXC extension example in Firefox
KeepassXC is now displayed under Extensions. Please click on the 3 dots on the right-hand side and then on Settings in the menu that appears.
