Dear forum,

I recently started having the problem on my Pixel 7 with the current GOS version that I can no longer authenticate myself in the “Business” profile (from Shelter) with my fingerprint via the keystore.

Various error messages appear when trying to set up the fingerprint as an authentication method in KeepassDX Libre (from the F-Store):

Key user not authenticated (internal Keystore code: -26 mes...
or
Fingerprint for device unlock was not e...
or
Invalid operation handle (internal Keystore code: -28 message: sys...

When I try to open my banking app using the fingerprint sensor, I get the message:
Sorry, we were unable to enable the use of the biometric print. Please try again later.

And the Proxmox Virtual Environment app reports this error:
Could not establish connection: AuthException{code: AuthExceptionCode.unknown, message: Unexpecrted authentification error.null}

But all this only happens on the “business” side of Shelter on my Pixel 7 with GOS. On the “private” side I can log in everywhere with the fingerprint sensor without any problems.

Does anyone know this problem and possibly have a solution for me? Thank you.

    "I've been having" means: You solved it?
    If so, can you give me a hint as to how you solved it?
    Or did it work again by itself?

    I have the same problem with apps in shelter work profile. Also on the latest GOS release (2025030900) and Pixel 7. The problem first appeared 3-4 days ago.
    Some apps that worked before now show this behaviour:

    • the fingerprint dialog comes up
    • I press the finger on it
    • the area showes the green tick
    • but the apps won't accept it and give general error messages like "biometrical login failed" or "Something went wrong"

    I tried deactivating/activating it in some apps, but it won't let me activate it again (no error shown, just not activated).

    I also tried KeePassDX (which works in standard profile) in work profile with the above mentioned "Key user not authenticated (internal Keystore code: -26 mes.."-error

    In work profile I have mostly financial apps, some of them still work with fingerprint, it's like 50-50.

    Some more log from KeePassDX:

    Caused by: android.security.KeyStoreException: Key user not authenticated (internal Keystore code: -26 message: system/security/keystore2/src/operation.rs:847: KeystoreOperation::finish

Caused by:
    0: system/security/keystore2/src/operation.rs:428: Finish failed.
    1: Error::Km(r#KEY_USER_NOT_AUTHENTICATED)) (public error code: 2 internal Keystore code: -26)
	at android.security.KeyStore2.getKeyStoreException(KeyStore2.java:428)
	at android.security.KeyStoreOperation.handleExceptions(KeyStoreOperation.java:79)
	at android.security.KeyStoreOperation.finish(KeyStoreOperation.java:132)
	at android.security.keystore2.KeyStoreCryptoOperationChunkedStreamer$MainDataStream.finish(KeyStoreCryptoOperationChunkedStreamer.java:228)
	at android.security.keystore2.KeyStoreCryptoOperationChunkedStreamer.doFinal(KeyStoreCryptoOperationChunkedStreamer.java:181)
	at android.security.keystore2.AndroidKeyStoreCipherSpiBase.engineDoFinal(AndroidKeyStoreCipherSpiBase.java:624)
	... 15 more

    As long as there is no real solution for this, I have found a workaround that is acceptable to me:

    In the settings under “Security and privacy” there is the item “More security and privacy”. Under this, I have deactivated “Use uniform lock” (all translated with Deepl).

    This means that I have to unlock the work profile once with a PIN when I restart the phone, but then the fingerprint sensor works everywhere in the work profile again.

    Maybe it helps.

    Thanks for the workaround! Now every app behaves like they should regarding fingerprints.

    Your are right. Not really a good workaround. Sorry for that.