Skip to content

Instantly share code, notes, and snippets.

@diogenesbrussels
Last active May 31, 2022 11:51
Show Gist options
  • Save diogenesbrussels/3b7bc1ef8dabe4f8d1f759e1c6d85768 to your computer and use it in GitHub Desktop.
Save diogenesbrussels/3b7bc1ef8dabe4f8d1f759e1c6d85768 to your computer and use it in GitHub Desktop.
Install Belgium eID authentication on Chromebook (workaround)
Installation procedure
This one time installation is only valid for the primary user, other chromebook users will not have access to this.
Activate linux terminal (please keep recommended values, this may take a few minutes)
Settings > Advanced settings > Developers > Linux development environment > Activate > Next > Install
The terminal should open after this or you can open linux terminal yourself (start Terminal app)
Type the following command :
sudo apt -y update && sudo apt -y upgrade
sudo apt install chromium -y
Install the official repo for Debian (should be the first one and .deb file). Doubleclick on the file and wait for installation to complete https://eid.belgium.be/en/linux-eid-software-installation
Install the eID middleware
Type the following command :
sudo apt -y update && sudo apt -y upgrade
sudo apt install eid-mw -y
You may need to start to eid procedure once (plug in, try to authenticate then get a fail with chromium and restart the linux container (right click terminal > Stop Linux) to create the nssdb
Add the eID certificate handler
Type the following command :
modutil -dbdir sql:.pki/nssdb -add "Belgium eID" -libfile /usr/lib/x86_64-linux-gnu/libbeidpkcs11.so.0
Open the terminal settings file and add an alias to start chromium (and refresh the card reader daemon)
Type the following command :
vi ~/.bash_aliases
Type the letter i to enter edit mode
Paste the following line (CTRL + Caps + V)
alias eid=”sudo /etc/init.d/pcscd restart && chromium https://iamapps.belgium.be/tma/login 2> /dev/null”
! Beware of the quotes character that might vary
Press the ESC key then enter
:x
Type the following command :
exec bash
This will relaunch the terminal with the right settings. To help the user finding the terminal again, pin it to the taskbar
Tests
Check if the eID certificate is installed, you should see a “Belgium eID” section in the text returned.
Type the following command :
modutil -dbdir sql:.pki/nssdb/ -list
Test the service with official eid login page
https://certif.iamfas.belgium.be/fasui/login/eidservice
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment