Last active
May 31, 2022 11:51
-
-
Save diogenesbrussels/3b7bc1ef8dabe4f8d1f759e1c6d85768 to your computer and use it in GitHub Desktop.
Install Belgium eID authentication on Chromebook (workaround)
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Installation procedure | |
This one time installation is only valid for the primary user, other chromebook users will not have access to this. | |
Activate linux terminal (please keep recommended values, this may take a few minutes) | |
Settings > Advanced settings > Developers > Linux development environment > Activate > Next > Install | |
The terminal should open after this or you can open linux terminal yourself (start Terminal app) | |
Type the following command : | |
sudo apt -y update && sudo apt -y upgrade | |
sudo apt install chromium -y | |
Install the official repo for Debian (should be the first one and .deb file). Doubleclick on the file and wait for installation to complete https://eid.belgium.be/en/linux-eid-software-installation | |
Install the eID middleware | |
Type the following command : | |
sudo apt -y update && sudo apt -y upgrade | |
sudo apt install eid-mw -y | |
You may need to start to eid procedure once (plug in, try to authenticate then get a fail with chromium and restart the linux container (right click terminal > Stop Linux) to create the nssdb | |
Add the eID certificate handler | |
Type the following command : | |
modutil -dbdir sql:.pki/nssdb -add "Belgium eID" -libfile /usr/lib/x86_64-linux-gnu/libbeidpkcs11.so.0 | |
Open the terminal settings file and add an alias to start chromium (and refresh the card reader daemon) | |
Type the following command : | |
vi ~/.bash_aliases | |
Type the letter i to enter edit mode | |
Paste the following line (CTRL + Caps + V) | |
alias eid=”sudo /etc/init.d/pcscd restart && chromium https://iamapps.belgium.be/tma/login 2> /dev/null” | |
! Beware of the quotes character that might vary | |
Press the ESC key then enter | |
:x | |
Type the following command : | |
exec bash | |
This will relaunch the terminal with the right settings. To help the user finding the terminal again, pin it to the taskbar | |
Tests | |
Check if the eID certificate is installed, you should see a “Belgium eID” section in the text returned. | |
Type the following command : | |
modutil -dbdir sql:.pki/nssdb/ -list | |
Test the service with official eid login page | |
https://certif.iamfas.belgium.be/fasui/login/eidservice |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment