Enrolment after a reflash. The templates live on the phone's persist partition and survive a reflash, the finger names live on the rootfs and do not. A reflashed phone came back with the trustlet holding every template it had and the daemon knowing none of them, and with five of them the group was full: every enrolment from Settings failed at once ("Failed to scan finger"). The daemon now reads which templates the trustlet holds. An enrolment first removes the ones no finger name accounts for, and deleting all fingerprints removes them too.
Re-enrolling a finger replaces it. Enrolling a finger again under its existing name left the old template in place, taking one of the five slots, and the trustlet refused the duplicate for as long as it stayed. The old template is removed when the new enrolment starts.
jorijnvdgraaf released this