Fingerprint Login Ubuntu MATE

Fingerprint login setup is available via a GUI for Gnome, however there is no current GUI for Ubuntu MATE.

The following steps will enable Fingerprint Login and user privilege escalation in Ubuntu MATE, please note that some of this will be dependent on the specific laptop you are using.

First step check your laptop for an available fingerprint reader

lsusb

If you have one listed then please follow the steps few steps:

sudo apt install fprintd libpam-fprintd

Now you need to enroll your fingerprint:

fprintd-enroll

Follow the prompt and swipe your right index finger across your scanner 5 times until you get the following: Enroll result: enroll-completed

Now you need to enable acess:

sudo pam-auth-update

This will open an ncurses interface. Add an * next to Fingerprint authenication and tab over to OK and exit.

At this point you will be able to use your fingerprint scanner to authenticate to elevated privileges, ie. sudo. It will also allow you to login and unlock your system using the fingerprint reader.

This has been tested on Ubuntu MATE 18.04, 19.10, and the current daily 20.04

3 Likes

Thanks for this tip. I tried it as follows:

[email protected]:~$ lsusb 
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 004: ID 27c6:5584 Generic Goodix FingerPrint Device
Bus 001 Device 003: ID 8087:0a2a Intel Corp. 
Bus 001 Device 002: ID 04f2:b61e Chicony Electronics Co., Ltd Integrated Camera
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
[email protected]:~$ sudo apt install fprintd libpam-fprintd
... remove install messages for brevity ...
[email protected]:~$ fprintd-enroll
list_devices failed: No devices available

I assume it's a hardware issue. I'm running a Yoga S730 and think I have seen reports that a driver is not yet forthcoming. Am I right and if so Is there anything I do to support?

Thanks

Thanks for the report. Sadly it's a bit of a crap-shoot on some of the finger print readers.

I spent a little time looking at it looks like there hasn't been any good news on the Goodix driver :frowning_face:

Unable to add * for the given options. What to do?

1 Like

Hello everyone

From a data-security point of view, fingerprint readers are not all that useful. They may be convenient, when they work, but they do not offer top level security.

Just a thought.

Unrelated, but I am just curious about a system security aspect: Would synchronous MFA ever be a thing for LightDM? i.e. login requiring multiple authentication methods at once?

Can you give us some more specifics? Can you take a screenshot and show was it looks like when you run: sudo pam-auth-update

well sure they are not top level security but that's not needed everywhere.

when you dont have overly sensitive data where an FP would not be enough but are using your laptop in public places and you dont wanna type you password in front of other people FP can be VERY helpful

I have the same problem.

It looks like this. I press enter to activate the selected option, and it returns straight to the command prompt. I run sudo pam-auth-update again, and the selection appears unchanged.

Is there a config file that I can edit manually?

OMG you press the space bar to select or deselect.

It'd be nice if it just said that at the top instead of just assuming everyone would know that.

That's kind of how Ncurses-based interfaces work. Unrelated, but you would have had a hell of a time dealing with Clonezilla (even though they spell out how to interface with the menus).

Having a problem getting fingerprint authentication to work on my HP Elitebook 8530p, using Ubuntu Mate 18.04.

The first step, training the Pam module works fine, as far as I can tell. at least it tells me five times that it was successful.

But logging in NEVER works with the fingerprint reader.

Is there some logging I can review (or enable) to help find out what's failing?

Thanks!

Fred

Hello and thanks for sharing this with us, but I encountered an error trying to enroll my fingerprint on a Dell Latitude E6230.

lsusb:

[email protected]:~# lsusb
Bus 002 Device 004: ID 0a5c:5801 Broadcom Corp. BCM5880 Secure Applications Processor with fingerprint swipe sensor
Bus 002 Device 003: ID 413c:818e Dell Computer Corp. 
Bus 002 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 004: ID 0c45:648b Microdia Integrated Webcam
Bus 001 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 003 Device 002: ID 046d:c058 Logitech, Inc. M115 Mouse
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

As I can see, the first device it's my fingerprint device. After I installed what I need to enroll the fingerprint, I get this:

[email protected]:~# fprintd-enroll
list_devices failed: No devices available

It's not a "must have" thing on my laptop, but I would be happy to make it work; Any help would be appreciated. Thanks!